Edit tour

Windows Analysis Report
PersonnelPolicies.pdf

Overview

General Information

Sample name:	PersonnelPolicies.pdf
Analysis ID:	1582255
MD5:	fe604262089e53638bc238bcbdaf09b9
SHA1:	a08b736da0d8d447ff5231eab8c67cf1ee5c3e21
SHA256:	ec34a788bb130955dfae4d1c9c75b2166ccc02baf172d2b34f342e30385e8640
Infos:

Detection

KnowBe4, PDFPhish

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found potential malicious PDF (bad image similarity)

Multi AV Scanner detection for submitted file

Yara detected KnowBe4 simulated phishing

Yara detected PDFPhish

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Machine Learning detection for sample

Suspicious PDF detected (based on various text indicators)

IP address seen in connection with other malware

PDF has an OpenAction (likely to launch a dropper script)

Unable to load, office file is protected or invalid

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7568 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\PersonnelPolicies.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7792 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 8040 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1352,i,16443109779607777101,13006567146399552993,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 4228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,1483281230032166887,8997701478837374874,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
PersonnelPolicies.pdf	JoeSecurity_PDFPhish_1	Yara detected PDFPhish	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: PersonnelPolicies.pdf

Virustotal: Detection: 28%

Perma Link

Machine Learning detection for sample

Source: PersonnelPolicies.pdf

Joe Sandbox ML: detected

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Yara detected PDFPhish

Source: Yara match

File source: PersonnelPolicies.pdf, type: SAMPLE

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'Secure Open' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains prominent button: 'secure open'

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://password-change.phishwall.net/XUEFGQUhVTXl... This script exhibits several high-risk behaviors, including the use of an obfuscated URL that redirects to an unknown domain ('secure.encryptedconnection.net'). The obfuscated URL suggests an attempt to hide the true destination, which is a common tactic in malicious scripts. Additionally, the length and complexity of the URL further raise suspicions. Overall, this script demonstrates a high risk of malicious intent and should be investigated further.

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: Adob Adobe Document Cloud This document is encrypted using Adobe Secure CloudTM. Click below to securely view contents. Secure Open Please note: Some webmail clients are not compatible with Adobe obat Secure CloudTM. If that happens, download the file and open on Desktop.

Source: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==

HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 18.173.205.50 18.173.205.50
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.17.245.203 104.17.245.203

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780 HTTP/1.1Host: password-change.phishwall.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing_pages/oops/styles.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1 HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: password-change.phishwall.net
Source: global traffic	DNS traffic detected: DNS query: secure.encryptedconnection.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: helpimg.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com

Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://semver.org/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_205.11.dr, chromecache_206.11.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_204.11.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: PersonnelPolicies.pdf	String found in binary or memory: https://password-change.phishwall.net/XQ1V3N29SdFREMm9XOWFNOU5yUDBmUVYydkxNcG44bEkybnlOMVBacHpMUzZrT
Source: PersonnelPolicies.pdf	String found in binary or memory: https://password-change.phishwall.net/XRGh0cFpYQUIycHMvMnhpYnMwZldFZXFJU2xROHpaVWtYTnc4MUZiYU5UVzg1d
Source: PersonnelPolicies.pdf	String found in binary or memory: https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV
Source: PersonnelPolicies.pdf	String found in binary or memory: https://password-change.phishwall.net/XcUdKdVp0aUtvWXBHVko5SnIzekN1WnArYnErcDhEZzJvUi96dVVmTlpmeWFJe
Source: chromecache_211.11.dr	String found in binary or memory: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_204.11.dr	String found in binary or memory: https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf
Source: chromecache_204.11.dr	String found in binary or memory: https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8
Source: chromecache_204.11.dr	String found in binary or memory: https://training.knowbe4.com/packs/js/vendor-954761ad0dceb106b971.js
Source: chromecache_204.11.dr	String found in binary or memory: https://unpkg.com/petite-vue
Source: chromecache_209.11.dr	String found in binary or memory: https://utopia.fyi/type/calculator?c=320
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_213.11.dr, chromecache_214.11.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443

System Summary

Found potential malicious PDF (bad image similarity)

Source: PersonnelPolicies.pdf

Static PDF information: Image stream: 21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Window title found: password-change.phishwall.net/xuefgquhvtxlrtkp0vg1fsuhsbfjmt1vnqujisw5ra3pqm0lxowjkslzove1xv1zizkiyek1haznjzgduckrcz3f6zko2bkw5vw45bdmrq29tb0xxbzi5cu5iww9pduvonffhtffloe5uudvxnetrwxhzmdngrxztcgx1zlvqmwjkunn3l0rknxhrvtg3c05mmhdutedcmm85vgxleddnn0f0v05wohmxszlutvk2v1pymnnjrlhpberisznvsgnvdhdoownrpt0tlurkrvfuzwdzuuc0nuxdrjytlwc2zudpmmzbewjovtnmnxndd1n2q2c9pq==?cid=303735780 - google chrome chrome legacy window

Source: classification engine

Classification label: mal88.phis.winPDF@39/66@19/8

Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/XcUdKdVp0aUtvWXBHVko5SnIzekN1WnArYnErcDhEZzJvUi96dVVmTlpmeWFJeGZRMU5SVktNc2RsN2JXalRQOUUrY21wU0pxYlNpWUtJOEgzT0NkSU9nMVdJeWgyUHNRMHRnRTFNVnVFRG52QTFjb0Q2M1E2OHNUUDA4eFZIR3J2Nm5USjBROFF2R2pvWWQ2NTY4akF6NEpyS1ErM1RMenE5czhJemRLNDE5NE1TbG9SMGFCclI0Tm90NXBqQXRaTU11NGZnPT0tLVNvR2RCdTRnR2lianJqNSstLXVQY3RmQ3NCajNPSDQ4dFVqSkxYRGc9PQ==?cid=303735780
Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/XQ1V3N29SdFREMm9XOWFNOU5yUDBmUVYydkxNcG44bEkybnlOMVBacHpMUzZrTGZuaGdHekthcisvMzFQVG1pdzBkM2xMNnVkV0xENWQvRG4zdUdDTlBqR01kN0dEZm5XMmhUZkdsUmJaYlo5VFNrYlpkelFCdkllQVBnOFdXSVNBK1ZRYlFOd1JvU0lCVFArak5DZE9Uc3EwbFNSVnVUL2U0aXJkREN1TkZoVG5yeFlmU2hKOXpUaTdpbU1MNy9CQStNd0t3PT0tLVBIM1RRaVROVGN2ZnFhdlEtLW8xeUUxVUtkL1pGWlhybWNVVEloZnc9PQ==?cid=303735780
Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/xq1v3n29sdfremm9xowfnou5yudbmuvyydkxncg44bekybnlomvbachpmuzzrtgzuagdhekthcisvmzfqvg1pdzbkm2xmnnvkv0xenwqvrg4zduddtlbqr01kn0dezm5xmmhuzkdsumjaylo5vfnrylpkelfcdkllqvbnofdxsvnbk1zrylfod1jvu0lcvfarak5dze9uc3ewbfnsvnvul2u0axjkren1tkzovg5yeflmu2hkoxpuatdpbu1mny9cqstnd0t3pt0tlvbim1rravrovgn2znfhdletlw8xeuuxvutkl1pgwlhybwnvveloznc9pq==?cid=303735780
Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/xuefgquhvtxlrtkp0vg1fsuhsbfjmt1vnqujisw5ra3pqm0lxowjkslzove1xv1zizkiyek1haznjzgduckrcz3f6zko2bkw5vw45bdmrq29tb0xxbzi5cu5iww9pduvonffhtffloe5uudvxnetrwxhzmdngrxztcgx1zlvqmwjkunn3l0rknxhrvtg3c05mmhdutedcmm85vgxleddnn0f0v05wohmxszlutvk2v1pymnnjrlhpberisznvsgnvdhdoownrpt0tlurkrvfuzwdzuuc0nuxdrjytlwc2zudpmmzbewjovtnmnxndd1n2q2c9pq==?cid=303735780
Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780
Source: PersonnelPolicies.pdf	Initial sample: https://password-change.phishwall.net/xcudkdvp0autvwxbhvko5snizekn1wnarynercdhezzjvui96dvvmtlpmewfjegzrmu5svktnc2rsn2jxalrqouury21wu0pxylnpwutjoegzt0nksu9nmvdjewgyuhnrmhrnrtfnvnvfrg52qtfjb0q2m1e2ohnuuda4efzir3j2nm5usjbroff2r2pvwwq2nty4akf6nepys1erm1rmene5czhjemrlnde5ne1tbg9smgfccli0tm90nxbqqxratu11ngznpt0tlvnvr2rcdtrnr2lianjqnsstlxvqy3rmq3ncajnpsdq4dfvqskxyrgc9pq==?cid=303735780

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-30 01-19-34-648.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: PersonnelPolicies.pdf

Virustotal: Detection: 28%

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\PersonnelPolicies.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1352,i,16443109779607777101,13006567146399552993,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,1483281230032166887,8997701478837374874,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1352,i,16443109779607777101,13006567146399552993,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,1483281230032166887,8997701478837374874,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: PersonnelPolicies.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: PersonnelPolicies.pdf

Initial sample: PDF keyword obj count = 54

Source: PersonnelPolicies.pdf

Initial sample: PDF keyword /OpenAction

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
PersonnelPolicies.pdf	29%	Virustotal		Browse
PersonnelPolicies.pdf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	0%	Avira URL Cloud	safe
http://flightschool.acylt.com/devnotes/caret-position-woes/	0%	Avira URL Cloud	safe
https://blog.alexmaccaw.com/css-transitions	0%	Avira URL Cloud	safe
http://pdfmake.org	0%	Avira URL Cloud	safe
https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780	0%	Avira URL Cloud	safe
https://utopia.fyi/type/calculator?c=320	0%	Avira URL Cloud	safe
https://password-change.phishwall.net/XQ1V3N29SdFREMm9XOWFNOU5yUDBmUVYydkxNcG44bEkybnlOMVBacHpMUzZrT	0%	Avira URL Cloud	safe
https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV	0%	Avira URL Cloud	safe
https://modernizr.com/)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	16.182.35.201	true	false	high
landing.eu.knowbe4.com	52.208.202.62	true	false	high
www.google.com	142.250.186.132	true	false	high
training.knowbe4.com	18.173.205.50	true	false	high
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.37	true	false	high
unpkg.com	104.17.245.203	true	false	high
helpimg.s3.amazonaws.com	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high
password-change.phishwall.net	unknown	unknown	true	unknown
secure.encryptedconnection.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://unpkg.com/petite-vue	false		high
https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==	false		high
https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css	false		high
https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780	false	Avira URL Cloud: safe	unknown
https://secure.encryptedconnection.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_213.11.dr, chromecache_214.11.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/slide-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/moment/moment/issues/1423	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/accordion/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://stackoverflow.com/a/32954565/96342	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://stackoverflow.com/a/26707753	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jquery/jquery-color	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/position/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://pdfmake.org	chromecache_213.11.dr, chromecache_214.11.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_205.11.dr, chromecache_206.11.dr	false		high
http://api.jqueryui.com/button/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://blog.alexmaccaw.com/css-transitions	chromecache_213.11.dr, chromecache_214.11.dr	false	Avira URL Cloud: safe	unknown
http://www.datatables.net	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://creativecommons.org/licenses/by/3.0/)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/slider/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://utopia.fyi/type/calculator?c=320	chromecache_209.11.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://stackoverflow.com/q/181348	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_213.11.dr, chromecache_214.11.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/rails/jquery-ujs	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://www.robertpenner.com/easing)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_214.11.dr	false		high
http://jqueryui.com/datepicker/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://datatables.net/license	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/menu/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/checkboxradio/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/controlgroup/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/widget/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://password-change.phishwall.net/XQ1V3N29SdFREMm9XOWFNOU5yUDBmUVYydkxNcG44bEkybnlOMVBacHpMUzZrT	PersonnelPolicies.pdf	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/category/effects-core/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jqueryui.com/tooltip/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/selectmenu/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
http://api.jqueryui.com/shake-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://modernizr.com/)	chromecache_213.11.dr, chromecache_214.11.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://api.jquery.com/jQuery.ajax/)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV	PersonnelPolicies.pdf	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/13378	chromecache_213.11.dr, chromecache_214.11.dr	false		high
http://jsperf.com/thor-indexof-vs-for/5	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/uxsolutions/bootstrap-datepicker)	chromecache_213.11.dr, chromecache_214.11.dr	false		high
https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js	chromecache_213.11.dr, chromecache_214.11.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.173.205.50	training.knowbe4.com	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
18.173.205.114	unknown	United States	3	MIT-GATEWAYSUS	false
52.208.202.62	landing.eu.knowbe4.com	United States	16509	AMAZON-02US	false
16.182.35.201	s3-w.us-east-1.amazonaws.com	United States	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582255
Start date and time:	2024-12-30 07:18:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	PersonnelPolicies.pdf
Detection:	MAL
Classification:	mal88.phis.winPDF@39/66@19/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 88.221.110.59, 88.221.110.99, 184.28.88.176, 3.233.129.217, 52.22.41.97, 52.6.155.20, 3.219.243.226, 162.159.61.3, 172.64.41.3, 92.123.17.129, 217.20.57.37, 2.16.168.107, 2.16.168.105, 192.229.221.95, 2.19.11.117, 2.19.11.122, 142.250.184.195, 142.250.184.238, 142.250.110.84, 142.250.185.206, 142.250.186.78, 142.250.186.106, 142.250.186.42, 142.250.185.106, 142.250.185.138, 216.58.206.42, 142.250.184.202, 142.250.185.74, 172.217.16.202, 142.250.184.234, 216.58.206.74, 172.217.18.10, 216.58.212.170, 142.250.186.138, 142.250.74.202, 142.250.181.234, 142.250.186.74, 142.250.74.206, 142.250.185.78, 216.58.212.174, 172.217.18.14, 142.250.186.174, 142.250.186.163, 216.58.206.78, 142.250.185.110, 184.28.90.27, 23.47.168.24, 4.175.87.197, 13.107.246.45
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:19:45	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://password-change.phishwall.net/XUEFGQUhVTXl... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including the use of an obfuscated URL that redirects to an unknown domain ('secure.encryptedconnection.net'). The obfuscated URL suggests an attempt to hide the true destination, which is a common tactic in malicious scripts. Additionally, the length and complexity of the URL further raise suspicions. Overall, this script demonstrates a high risk of malicious intent and should be investigated further." }
window.location.href = 'https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==';
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This document is encrypted using Adobe Secure Cloud. Click below to securely view contents.", "prominent_button_name": "Secure Open", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUT Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secure.encryptedconnection.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://secure.encryptedconnection.net
URL: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUT Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Adobe" ] }
	{ "brands": [ "Adobe" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	EFT Payment_Transcript__Survitecgroup.html	Get hash	malicious	Unknown	Browse
	installeasyassist.exe	Get hash	malicious	Unknown	Browse
	GPU-Z.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse
	https://gtgyhtrgerftrgr.blob.core.windows.net/frhvhgse/vsgwhk.html	Get hash	malicious	Unknown	Browse
	https://its.piquedigital.com.br/maryland.gov/&adfs/ls/client-request-id=7c724&wa=wsignin10.html	Get hash	malicious	Unknown	Browse
	https://belasting.online-factuur.com	Get hash	malicious	Unknown	Browse
	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse
104.17.245.203	http://www.delinian.com	Get hash	malicious	Unknown	Browse
	Yogi Tea Benefits Open Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse
	https://businessnotice.org/dhl/22450156620/tracking?u=84775-c0bf6be57168918ea5fe039631be6c3a772f4fac11292328fca4a210ba0e8890	Get hash	malicious	Unknown	Browse
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://policy-business-page-service.com/meta-community-standard-s31000650257803499	Get hash	malicious	Unknown	Browse
	Audit(s) & Inspection(s) Due and Overdue Notification for Baez Rossy, Jafeth.eml	Get hash	malicious	Unknown	Browse
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse
	https://important-wholesale-dress.glitch.me#clerk@tkbtc.co.uk	Get hash	malicious	Unknown	Browse
18.173.205.114	https://2fa.com-token-auth.com/XLzgrdk01ellQd1gvQjlDc2VyNTJoRHlpQ0lSMHBKeFZZV0RyZ1Q3YUlVbENaRG50WDFzWjhWZTNmMllYNjZHN283dE8vOG02QklSQUZxNVRFUzZVRkovMnJ0YVZweExPcjhwdHlNdXRpbzhWVWJnZDdSbTVCSkhId0dHcjNzTkovc3F3MFV6eWFjdEZGNkpHTlVPdWxRTlVUOHZ6RUVGN3FlL2VVSzlzY09tVldDN2l2OVlFalZtWW9RPT0tLUpSRGZWdnhOOENBUTNhcGEtLUU0RE5seTEwRHZtK043c1QyOTFrV3c9PQ==?cid=2293130893	Get hash	malicious	KnowBe4	Browse
18.173.205.50	https://employeeportal.net-login.com/XWmdEa2M3cG9qbFFscFFDWFJLaHNDY01aQld4d21wWlQzZmF5ZS9hYVNYZEZIaERhTEkzYzBqUG9QQUNndUlsN3RVVkR6Wm8rTHB6aElCK2trYVZUZTJxZ0MzeVNkclN4VXU1bnM2bWxDWC9nUTlPdmRNaEFVTitwZ3FVV2xTTW5PM280cWh5SndCVmszeS9Gc1plZFpySzNOZ2NRNytNNHZ2NE01bm9oaVc1MkxBYlJUdUNDdEh6a2xnPT0tLTZJVU5NYmFlOWd4aFhGKzktLUREbzR5UTlENTl6b05iaXJWSWdnamc9PQ==?cid=2284870608	Get hash	malicious	KnowBe4	Browse
	https://welsfargo.com-onlinebanking.com/Xb1ExYUR6VXl0bGxmVDdXaVpyTzlKZUtudEIxbGsxOGY1VzhSNFZvZVlFTDk5T0c2Q25PS3hwcEYrL1dZdG8vVzZIUS9mVHczWklvQ1R0U1ZXaVN0L2RuN0VIbklqdzFUWVROV3E4ZnVldDhWUmZ3RDRZWmFKY0ZJOUlTWWlqWHVxNDlVTUYxYVFDQ1dBWTd0bzVKbGIrL25HZVVOTHNSMnNBcGJuaVRrZW82VHY3RVlnYThxbUpLN2lBPT0tLTRmTmYwUzZkLzlIS1VWQ2otLVNXQlpnWjRKZDUxaGNXQmpCWksyN3c9PQ==?cid=2251351141	Get hash	malicious	KnowBe4	Browse
	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse
	https://free-5464198.webadorsite.com/	Get hash	malicious	HTMLPhisher	Browse
	http://free-5464742.webadorsite.com/	Get hash	malicious	Unknown	Browse
	https://hzhdjz.com/modify/	Get hash	malicious	Unknown	Browse
	https://qdjtq.com/modify/	Get hash	malicious	Unknown	Browse
	https://wmreia.com/modify/	Get hash	malicious	Unknown	Browse
	http://free-5481273.webadorsite.com/	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
landing.eu.knowbe4.com	https://eu.onamoc.comano.us/XaFJNdmNsY0JUVzZrd09aZnpEZk9LNXJHSFV1RTlrbFdPMXQ5dzRKTHV4dEdpUEhTM1I1MCszdjdWWm54V01kSEhOSlpOSFpjMUlsaFNTc0l3eXhVeWl3TGVjWm14bGMxUFkzWWFkVUQvbUlNMGEza0pnOFFCK3N4TDBlc3RyYWJkSE9xVU9ETG5TU1lHQkZwdStVdXhGMzdoQzltdFAwRnc0WTJuMmF3Q1VkTzdMb0lwNXhqOFQ3eGRtK0ZuQUpydjMxSWdnPT0tLUFPWFdqaFhtRnVKaEhNK20tLUlJNFZwQjNETFQyTk1iL0UxMUxBTGc9PQ==?cid=300477933	Get hash	malicious	KnowBe4	Browse	52.211.171.55
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.249.122.247
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	18.203.54.200
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.250.213.208
	https://scam-report.malwarebouncer.com/XT2VkOUF6UWhJRkJORWRibzhzMytNYjdrNS9teUZ4OEhhK3BwL2pVdGJ6b3JVOHpQdlFFU1pVSDVwZC9ObHAzN2ptMTRIald2TXl0dXh0VEFrYzlWbTU4eU9qdTAycjN0VVRRalNHOVJzSkIzcm9hTDFRYnhOU2xkSVYrV2RLRjJ2dk9ITUdnRldMR2hKYzJsb0NuQWJTNG1rSjFaeEpyVDBsS1pYcWpsVTh5bThKUENydWxvcjdmbWR1ZkdvbjRzaElWWUFEMXN4R3ZKcXZaa3NzWnZ2N3ZBS3VjUUcwdz0tLXBNenBsNlZQeDgzanJXMEUtLXRsSDVDalFBbzhFdVNOMnltY2sxcUE9PQ==?cid=294625424	Get hash	malicious	KnowBe4	Browse	46.137.49.168
	https://cardpayment.microransom.us/XYmdKR004c2prdTQ3eFRYdTZlUlAwSGhsclU2V3JnMWpuZ2h3Njg2emV0U3ZLY1Z4RkpNZm9HbkpHck9SNjFHb01Yem5jSDVSb2RmaXRIWUNvN2g1UHR4NlNzM05yeWg0R2VJSzhzSFlRVTN6UFZHYWpZSUxBeXpsYmtPMjFua1J5RFlLdm5OUVBGRnl2UWRxSjhpUFRwL1VXS1RqNEJjMmJwNkVPOVkvV2o3S3R0MkYzS1VXOG5uS1hHVll2eDdUb3hmcGtBb2VBTUdHc3hweEtXV25WRVZKdDBwWCtVZGtobzFsamp3PS0tYVREdUlIcWNwNFJ5RjAxci0tQWs2bGpCejYzaGsxMWJqSll4TWFNQT09?cid=293298779	Get hash	malicious	KnowBe4	Browse	52.214.139.140
	https://covid19.auth-verify.com/XUXIrOHR6RjhQNXRDVW5iWmFYNTZaZlB0Z1ZnZHBzcVhlTW1qdU04ZXpTUXRDVmJVWGZzaSsxd05aQUF3emJmeFZyVkhKN3RPM2cwU3NDMWkrMFhSbTcwSEh5N09lN256QnJjRG9sWklQRy9KZm14M1JhMER1NzVYVjFlZUxmeTZnQVc4Z0t1T2pTTnJ5dHN3NVNSTFljQzlxOFJRb2NraUtMVVZ4ckN0eVF1WTFCS3VqVnNZazlaSlUrK3ZjUE1PcVM1eFhrQT0tLUs1UUpQQ3gzcDZ1VzRKVVEtLW44eGZTZUNwWmFkTnlqMFJCODNDZUE9PQ==?cid=289532680	Get hash	malicious	KnowBe4	Browse	52.209.169.238
	SpamLog.pptx	Get hash	malicious	Unknown	Browse	52.16.38.212
	https://add-to.password.land/XNllJMExLQVFyaWl5RE1YdDdhREtzbDBIbUhKUWZTY2ZQVkZiR3Ywa2p5V3k2UkMrNWZ5UzVndXdpaEgvVnQ0QU8wOHpNN3hlNmFRc2EzWUo4ajB3eHp2WE0vVWpoanlDVHlVU05nYytLS0doVmZ4bzdSKzhTMFJLdUlMb1IvMXgrUmtkRzFHWWp3OGJub29qR0paOGovZzgwNjJwN1l0bVJNeS9lcktlUTVKcC9SUGF5N0ZsLS16Q2pVSTZxanFackJzbkFELS02ZFg0VzVRcHhlYVZJTGxKMjZLS2h3PT0=?cid=289916869	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	52.19.48.43
	Account report.docx	Get hash	malicious	Unknown	Browse	34.251.245.69
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	EiO4tqZ3o4.exe	Get hash	malicious	AsyncRAT	Browse	217.20.58.100
	wce.exe	Get hash	malicious	Unknown	Browse	217.20.58.98
	nXNMsYXFFc.exe	Get hash	malicious	Unknown	Browse	217.20.58.100
	5RaYXoKFn9.exe	Get hash	malicious	PureCrypter, PureLog Stealer	Browse	217.20.58.98
	msgde.exe	Get hash	malicious	Quasar	Browse	217.20.58.99
	atw3.dll	Get hash	malicious	Gozi, Ursnif	Browse	217.20.58.100
	WRD1792.docx.doc	Get hash	malicious	Dynamer	Browse	217.20.58.99
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	217.20.58.98
	0442.pdf.exe	Get hash	malicious	Unknown	Browse	217.20.58.100
	#U5b89#U88c5#U7a0b#U5e8f_1.1.0.exe	Get hash	malicious	Unknown	Browse	217.20.58.100
s3-w.us-east-1.amazonaws.com	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	54.231.199.241
	j6ks0Fxu6t.exe	Get hash	malicious	LummaC	Browse	52.216.216.113
	fnCae9FQhg.exe	Get hash	malicious	LummaC	Browse	16.182.108.137
	SFtDA07UDr.exe	Get hash	malicious	LummaC	Browse	16.182.108.137
	Gq48hjKhZf.exe	Get hash	malicious	LodaRAT	Browse	3.5.8.193
	2oM46LNCOo.exe	Get hash	malicious	LummaC	Browse	52.217.14.36
	tTGxYWtjG5.exe	Get hash	malicious	LummaC	Browse	16.15.177.52
	iaLId0uLUw.exe	Get hash	malicious	LummaC	Browse	3.5.17.0
	yuij5p5p3W.exe	Get hash	malicious	LummaC	Browse	54.231.128.9
	http://plnbl.io/review/FSUQBEfTfzwH	Get hash	malicious	Unknown	Browse	54.231.128.17
training.knowbe4.com	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	3.212.32.86
	https://spamchallenge.msftemail.com/XdEd3bDVBUzZOQUwzUmxzRWVLU3huK0JqbXFtZHA3cUlvcXhnRlhWaFBaSDJIMnMyYVN0MGpGNGN3c0Q1NE0xMUpGT3JuT2xOaVZKczlQL2VBWE9sa0pRN2VuUERVTlFWMkdmNjZoUlV4SGhDaFJQR2RQNGg2UVRmaUNIVFM2cVl4WXBaTTNCMTg4eS9XU1RyNEJ1R2VsdVdPN0JBaWZtUWRWb25EN3pIdkgyNGRYaHhjRHFWNnJ6NWFuREk4N3Q5WmdUOXIwNFYxeDA9LS1FQ0krTzhnQnV6bDJBd2tOLS1vZDl3bzRPTTR5Nk4wandOR3dTZDd3PT0=?cid=2315281580	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	3.224.166.12
	https://gmail.net-login.com/Xb1Rnb3pKRC9CUEdpbldIVTREbHhIK1Vza1NvaWlrblBIbkN4aUdCZUt0Y2NlSGJiWmZ2d0M1dTB5dEpRbnRoVDdBVkFTcEJqWGowNVZycWJNWHlIUHlLOG1qS0FvemVPSXpFRFhGcUhmaVU1ekQwMklrVmM0QjVpNmhLaDdoY1I4UlhMcFo1TTJaSFhtaWpiWWFqWGZ5WEg4TnBiOUl4MDI1RFMyWStQRFoyNFo5UFZNUUpmWXBtaUg0Y0FjUG1jejdSVnFVOXJQL2VzdmNLM1lEaWtmRkZnZEk2Vi0tVHFIeU0vOWxTN01YVEtXbS0tTTh5Skh1eEtsc0xTT0J5Rzg2Q2ZJQT09?cid=2330416057%3EOpen	Get hash	malicious	KnowBe4	Browse	3.160.188.40
	https://i.donotreply.biz/XWTZMVjBsbS9FS1Z2NzBoRzFZMy83RkoxVmlXaWlxaHo3VWFucmtuUGw1enh1ZWNEWVVSRmU5SURkU2psUnlGWUVLSzJtc3hJMVRZeXdZQTdKTVMwOTIySXc0dXRmSmkrKzVTSFFkRTlsZ0sycWdFdnhVY3BJNGx5ZnRmWTFhc0tuTTN1bVNUeUdFYkgrRW9rVllXdnIvNEE4aUgwNlR0R291UUxXUmY2L1JsVnZyNmMvbVpoUGJac04xckVKQlBXLS1PZFpzV3ByWmxpaEJybUhrLS1uMXVPRk5IWXlyNFBPNklpRkk0NTB3PT0=?cid=2330206445	Get hash	malicious	KnowBe4	Browse	18.173.166.72
	https://eu.onamoc.comano.us/XaFJNdmNsY0JUVzZrd09aZnpEZk9LNXJHSFV1RTlrbFdPMXQ5dzRKTHV4dEdpUEhTM1I1MCszdjdWWm54V01kSEhOSlpOSFpjMUlsaFNTc0l3eXhVeWl3TGVjWm14bGMxUFkzWWFkVUQvbUlNMGEza0pnOFFCK3N4TDBlc3RyYWJkSE9xVU9ETG5TU1lHQkZwdStVdXhGMzdoQzltdFAwRnc0WTJuMmF3Q1VkTzdMb0lwNXhqOFQ3eGRtK0ZuQUpydjMxSWdnPT0tLUFPWFdqaFhtRnVKaEhNK20tLUlJNFZwQjNETFQyTk1iL0UxMUxBTGc9PQ==?cid=300477933	Get hash	malicious	KnowBe4	Browse	13.227.8.37
	18037.doc	Get hash	malicious	Unknown	Browse	18.164.78.13
	https://welsfargo.com-onlinebanking.com/XTFlySnlzYzQ1UXhqajFTVmtsYW50WkJBemRTamR4ME9mMGtnVWViL3dEU3g5cFRIUkFHOWdJQkxybzhJL1ZUSmJ4cExVZnk0UjVRcnFEc21wK2tXeGYyeG42TzJjREZmN05JQkhyZHViMldUakRRM3REKzU5ZS9HektFNXF4bEx3bXR2dzBnSytmRzIyOG4xU3NyNFc5RVlOY0h5Q2xMTFlLRVhEWnUwTVVQb2o2cUU3QURVMUhjbnJ3ST0tLU50cDlIc1hXNURmNmFNV0ctLXdjQnpKeTJDTUVxeHg3KzJKWVVIOVE9PQ==?cid=2324924114	Get hash	malicious	KnowBe4	Browse	3.82.118.141
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	13.227.8.37
	https://employeeportal.net-login.com/XVlhRL0FtSW5Hdm1iVm1lTTcvSVJGWFVNWjlDRXk3TUZsamJYQmQwMVN6RDNJbWliUE5qdUxIQUthWFduWXIvLzN6dXVZWGs2enhXRUVaZjFnSnZ3RmtOVDhBWmt4VVRKMndIVnMreW1RLzVZVHJXOHhjYk9uWXEyRVB6K1gxNDIyL0JHOC9BRkZ4Q0prazZPVSs5MDlqcm54TFlWYWEvUEsvRXhjUVZhbGh0R0U1UmorbS9rN0VpS2pnPT0tLWxsYTh0UzNVZDNTRlpXNGgtLXUwZFdYbUZuamttcHlxa1hsaWlRRkE9PQ==?cid=2321060051	Get hash	malicious	KnowBe4	Browse	3.82.118.141
	https://token.onelogin.com-token-auth.com/XaG85eisvN2J6eWdNYXJ3OHhob2wwZFRQU0t4UUM5WHRUU0dNZ1dqV2crZ1dhV08xQTdUMW1hVmJaZURncldCRkRMZnJpMEpOWDR0djZiNXNLTGhTTUZBMWVFVDZIMFFXeU5qREJ1TUU2ZGQrVFhKQm8vYVVRMzF4Z0JQWkpibWJ0L3Bxc3NtS3h0dVdUcFBMYjlyTkJPbE5WSHdJcDRzQjJnaDNvLzc0SE52dU84MHQwcms1ZityVDBtYmlXdnB2K2c9PS0tZ2ltaTJwNGIyZ1VQeXpySC0tWTd5ejJuYnVpcFF3MkFkcXhOdUo4Zz09?cid=2323041528	Get hash	malicious	KnowBe4	Browse	3.82.118.141

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIT-GATEWAYSUS	botx.sh4.elf	Get hash	malicious	Mirai	Browse	18.15.100.4
	botx.x86.elf	Get hash	malicious	Mirai	Browse	19.117.204.26
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	19.42.121.99
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	19.137.43.10
	loligang.ppc.elf	Get hash	malicious	Mirai	Browse	19.149.38.20
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	19.237.251.102
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	19.54.197.167
	loligang.x86.elf	Get hash	malicious	Mirai	Browse	19.45.77.18
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	19.195.249.196
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	19.227.82.55
AMAZON-02US	botx.arm5.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	botx.mips.elf	Get hash	malicious	Mirai	Browse	99.86.94.132
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	63.34.98.47
	botx.x86.elf	Get hash	malicious	Mirai	Browse	52.53.164.71
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	35.154.4.108
	botx.arm7.elf	Get hash	malicious	Mirai	Browse	18.138.207.157
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	13.57.169.32
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	34.249.145.219
	dlr.arm.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	34.249.145.219
CLOUDFLARENETUS	botx.arm7.elf	Get hash	malicious	Mirai	Browse	104.17.182.127
	AquaPac.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.205.168
	R3nz_Loader.exe	Get hash	malicious	LummaC	Browse	104.21.32.1
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.80.1
	BasesRow.exe	Get hash	malicious	LummaC	Browse	104.21.64.1
	dsoft.exe	Get hash	malicious	Python Stealer, Creal Stealer	Browse	104.26.13.205
	setup.msi	Get hash	malicious	Unknown	Browse	104.21.0.151
	installer_1.05_36.5.exe	Get hash	malicious	LummaC	Browse	172.67.208.58
	EFT Payment_Transcript__Survitecgroup.html	Get hash	malicious	Unknown	Browse	104.18.26.193
	@Setup.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
MIT-GATEWAYSUS	botx.sh4.elf	Get hash	malicious	Mirai	Browse	18.15.100.4
	botx.x86.elf	Get hash	malicious	Mirai	Browse	19.117.204.26
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	19.42.121.99
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	19.137.43.10
	loligang.ppc.elf	Get hash	malicious	Mirai	Browse	19.149.38.20
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	19.237.251.102
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	19.54.197.167
	loligang.x86.elf	Get hash	malicious	Mirai	Browse	19.45.77.18
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	19.195.249.196
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	19.227.82.55

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.184027177923505
Encrypted:	false
SSDEEP:	6:5zecH+q2Pwkn2nKuAl9OmbnIFUt8Mzec9XZmw+Mzec93VkwOwkn2nKuAl9OmbjLJ:hH+vYfHAahFUt8Q9X/+Q93V5JfHAaSJ
MD5:	48A0533BD08AF228872015B383B3BDEA
SHA1:	3D26120AB4F21D3B76890F7E362188C532967142
SHA-256:	314D7FC4C295FEF6EB7F8EB01457DF65E47B3E8A12E5F8DD1407BE2A626A65CC
SHA-512:	9D287FAFC5B1D6EEEC3E3B52CBC38FB05C531A3E559236F14764248DD51D3C9C6307429A726EEFE3A765063A0A87F2F9680DC07A4C8B9CF97A4B2068132E8C5D
Malicious:	false
Reputation:	low
Preview:	2024/12/30-01:19:34.979 1e9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/30-01:19:34.982 1e9c Recovering log #3.2024/12/30-01:19:34.982 1e9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.184027177923505
Encrypted:	false
SSDEEP:	6:5zecH+q2Pwkn2nKuAl9OmbnIFUt8Mzec9XZmw+Mzec93VkwOwkn2nKuAl9OmbjLJ:hH+vYfHAahFUt8Q9X/+Q93V5JfHAaSJ
MD5:	48A0533BD08AF228872015B383B3BDEA
SHA1:	3D26120AB4F21D3B76890F7E362188C532967142
SHA-256:	314D7FC4C295FEF6EB7F8EB01457DF65E47B3E8A12E5F8DD1407BE2A626A65CC
SHA-512:	9D287FAFC5B1D6EEEC3E3B52CBC38FB05C531A3E559236F14764248DD51D3C9C6307429A726EEFE3A765063A0A87F2F9680DC07A4C8B9CF97A4B2068132E8C5D
Malicious:	false
Reputation:	low
Preview:	2024/12/30-01:19:34.979 1e9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/30-01:19:34.982 1e9c Recovering log #3.2024/12/30-01:19:34.982 1e9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.150518249841015
Encrypted:	false
SSDEEP:	6:5zR5GAq2Pwkn2nKuAl9Ombzo2jMGIFUt8MzRcXZmw+MzRFvkwOwkn2nKuAl9OmbX:DgAvYfHAa8uFUt8ucX/+uFv5JfHAa8RJ
MD5:	6EE2EB1CD2A91E76A98064A8F4037758
SHA1:	E1B382B84276341B958DF380899D83A174B832DA
SHA-256:	BB4A86AF886090B153A502B3C9567D640E161FA0DAF28349F77465EFFA4381AB
SHA-512:	90EC3C9299B85BBEFB551ADD1410C587B232BE7751AA60ED79290F9FFF30D125BD639990C99C5083A1F3B0877D28D950C120BF9734344C6B1D72134C504CE61A
Malicious:	false
Reputation:	low
Preview:	2024/12/30-01:19:35.039 1fb0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/30-01:19:35.040 1fb0 Recovering log #3.2024/12/30-01:19:35.041 1fb0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.150518249841015
Encrypted:	false
SSDEEP:	6:5zR5GAq2Pwkn2nKuAl9Ombzo2jMGIFUt8MzRcXZmw+MzRFvkwOwkn2nKuAl9OmbX:DgAvYfHAa8uFUt8ucX/+uFv5JfHAa8RJ
MD5:	6EE2EB1CD2A91E76A98064A8F4037758
SHA1:	E1B382B84276341B958DF380899D83A174B832DA
SHA-256:	BB4A86AF886090B153A502B3C9567D640E161FA0DAF28349F77465EFFA4381AB
SHA-512:	90EC3C9299B85BBEFB551ADD1410C587B232BE7751AA60ED79290F9FFF30D125BD639990C99C5083A1F3B0877D28D950C120BF9734344C6B1D72134C504CE61A
Malicious:	false
Reputation:	low
Preview:	2024/12/30-01:19:35.039 1fb0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/30-01:19:35.040 1fb0 Recovering log #3.2024/12/30-01:19:35.041 1fb0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\9baaf7b3-ba6a-401c-bc61-ff72448eba05.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.965604377944479
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqosBdOg2HPcaq3QYiubInP7E4T3y:Y2sRds0dMH+3QYhbG7nby
MD5:	B96A7DC54627335B55D033E134A4DC09
SHA1:	811AB83E285A3AEF32640CE5522A0712E490695F
SHA-256:	23085269456DD81B02114FD974098F698452828288DA06A9AD86C57D54150B88
SHA-512:	C5CE9ED7B0D2D2BC309A5946543E656FCE2FFA57B027134057EB127ECD3FD58580DA66FA46CFB9E8AE7FF7D95E0ABFAC3C7EB953238B00E73BDB18AC65DB459B
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13380099584998581","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":115437},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.965604377944479
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqosBdOg2HPcaq3QYiubInP7E4T3y:Y2sRds0dMH+3QYhbG7nby
MD5:	B96A7DC54627335B55D033E134A4DC09
SHA1:	811AB83E285A3AEF32640CE5522A0712E490695F
SHA-256:	23085269456DD81B02114FD974098F698452828288DA06A9AD86C57D54150B88
SHA-512:	C5CE9ED7B0D2D2BC309A5946543E656FCE2FFA57B027134057EB127ECD3FD58580DA66FA46CFB9E8AE7FF7D95E0ABFAC3C7EB953238B00E73BDB18AC65DB459B
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13380099584998581","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":115437},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.2525913362655885
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7RXs09MsUZ:etJCV4FiN/jTN/2r8Mta02fEhgO73gow
MD5:	07342E24F3935801FEFAF654BD74C269
SHA1:	768A6DBAC8903DF8ED6D5B5CA7C4A2B24A1F7568
SHA-256:	7964795F46C1A941A2B232A712679700D0120FDAB4ED8F7113C05E11532DB1D6
SHA-512:	59C3BD61A7F9B8F16399FE429F407618C39B666963E43EA68E1757CAB9888524FC6FB9A648145D7B8502231D124C27442C16238A80C630170BCA44F14A9B2F70
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.154141547510663
Encrypted:	false
SSDEEP:	6:5zRHq2Pwkn2nKuAl9OmbzNMxIFUt8MzRchZmw+MzRc7kwOwkn2nKuAl9OmbzNMFd:DHvYfHAa8jFUt8uch/+uc75JfHAa84J
MD5:	91FAE7609993B0D51A008EA3403C512D
SHA1:	F4D8A6D37BDC967CDD7ECF6FCE181B53239433A2
SHA-256:	25EDA967497F5F907340BC33B319028AB06CFDF078F75F2FDC5D29D1045B37DF
SHA-512:	92065FD82C45B22916586B9C643909573DB29C34D44DA5A725A6525E8D664E34CDFA05E3F0FB8D8E1A6B35DF615D55FC8E9079D32E6C5C428B51996578AD8621
Malicious:	false
Preview:	2024/12/30-01:19:35.231 1fb0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/30-01:19:35.233 1fb0 Recovering log #3.2024/12/30-01:19:35.233 1fb0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.154141547510663
Encrypted:	false
SSDEEP:	6:5zRHq2Pwkn2nKuAl9OmbzNMxIFUt8MzRchZmw+MzRc7kwOwkn2nKuAl9OmbzNMFd:DHvYfHAa8jFUt8uch/+uc75JfHAa84J
MD5:	91FAE7609993B0D51A008EA3403C512D
SHA1:	F4D8A6D37BDC967CDD7ECF6FCE181B53239433A2
SHA-256:	25EDA967497F5F907340BC33B319028AB06CFDF078F75F2FDC5D29D1045B37DF
SHA-512:	92065FD82C45B22916586B9C643909573DB29C34D44DA5A725A6525E8D664E34CDFA05E3F0FB8D8E1A6B35DF615D55FC8E9079D32E6C5C428B51996578AD8621
Malicious:	false
Preview:	2024/12/30-01:19:35.231 1fb0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/30-01:19:35.233 1fb0 Recovering log #3.2024/12/30-01:19:35.233 1fb0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241230061937Z-177.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	2.338682311988844
Encrypted:	false
SSDEEP:	384:CMBiqxTK4Mkwsovk3bPNFX/m00El6m20Bmgu1SuRKN6/Ls3m:CMBiizlw1MzsElZziSucN6r
MD5:	8728457C021B84949313963AD3935AF0
SHA1:	2A168D21FDC43A97948D173C218C34F511A17BAD
SHA-256:	E7FDF43ED0439F878CB6942B8F8DE670F7DA27C026E5D0F635EF1F9CE6F64DF2
SHA-512:	7CFACFB1FEAA09EFFFE57A1152844E1641165016EF2D8B288EECD396F9C41CF3C48E01C5E82202FB15BE8F7DFD9AE5CBFC685D4091D9B9BE286ECBE8476A2384
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.4450295984712
Encrypted:	false
SSDEEP:	384:yezci5tOTr3HiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rOTr3ss3OazzU89UTTgUL
MD5:	30D372CBD455C5AAD459F8C5AF212634
SHA1:	EB6767303C49A99AD535B1D308A13095E2EDFAE7
SHA-256:	D82691B92D73E96187CE835739FCBA1D940F781AA82D6DFF2443F8EC2A9E4892
SHA-512:	5D7B9257095DAFFC12FEC5E07A943BFFC32B7B04D434421E67B8F1200A2F67FE1F98D0FA5777A4ECDC0F9E72A888F6AFBD2AAE4446511855EC3B236CE3D9B149
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7746166516168844
Encrypted:	false
SSDEEP:	48:7M7p/E2ioyVZeioy9oWoy1Cwoy18NKOioy1noy1AYoy1Wioy1hioybioyu/oy1nW:7MpjuZeFL/XKQ9tdb9IVXEBodRBkm
MD5:	A040800FB9D4A236CA7D7E5C2A83AF29
SHA1:	98BF5A62E0DFEE878FE4712A2E6F328FE30AD641
SHA-256:	E2889DF0336DE0A5366638B57C739DEE3B17B4E23C52B159711119C1464DDC00
SHA-512:	8E9486A32EF905E9B8E1E2BFCBD2CAD906F15F834448DC0DF7D9898CBA50DFF48F0B8B3EBB4289F78BBB2E4A44F53829B6A8EEF5A0FD5F8024D0F9502BEFD1CE
Malicious:	false
Preview:	.... .c......*Fu...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7895108629891827
Encrypted:	false
SSDEEP:	3:kkFkld8DDNllXfllXlE/HT8koTz1NNX8RolJuRdxLlGB9lQRYwpDdt:kKVn3lIT8VNMa8RdWBwRd
MD5:	F667156CBB902F6740898F379B0CD84E
SHA1:	0DA9969C95FD82CDD1C2EDF764E3E462B9FC7D43
SHA-256:	74144C2C995B0680EAB4B41E4F42038D04EDF91D0B62606950FEF489ACA8FC11
SHA-512:	3E4930BDC75752860A9782F841A0B80F931ECF53C2E37CE2848810ABF6DA9DE2CE94CAC40B4982D3D54C0A1427C98EA203850DA52D2A0D6257A357CCE381419C
Malicious:	false
Preview:	p...... ............Z..(....................................................... ..........W.....C..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.141785112603811
Encrypted:	false
SSDEEP:	6:kKa3l99UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:y3lkDnLNkPlE99SNxAhUe/3
MD5:	97A0B0BDA152CB17D794EEEE1126ED67
SHA1:	C28D10882EC95B9606B74FD646E5C594DB67EF2A
SHA-256:	AD9BC4F81046E08F2AF3BAAC16242224DCFA6043BF65E843E6265773FF987D94
SHA-512:	3A1114D01CE2EE69F8A6372ACD2199E7AAC27DD7A8BA9E4E8DFC8C76EFDD9C0A9E614941D7064B62F8D44AEE47371357172AAA7F8984F52F93E5B2AECD5E3DA7
Malicious:	false
Preview:	p...... ........."9..Z..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.375985210506537
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJM3g98kUwPeUkwRe9:YvXKXLa7zZc0vQ6sGMbLUkee9
MD5:	4AF7201345909DA55BB0297714BC1B94
SHA1:	F7426961F71324D736A5A2801F5BECAEA9C52EFC
SHA-256:	DDD5F962D3148CFE177F3E8A89A2B77ED458207C0E96FFB4E976EEE83DD7E563
SHA-512:	503ED0179742F13B0012C6A8122E2AF931BB66ABAAD1B7A0A45EA2B8C579C53FD8FF23C9E8652D8EE6D5E46320F86658A25910FCC023D719151D01D5EDD83C3B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.327701185833899
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfBoTfXpnrPeUkwRe9:YvXKXLa7zZc0vQ6sGWTfXcUkee9
MD5:	7AE2A56D77041546CED9D3F6FDCBB246
SHA1:	08DA25836356BBE457766E82078BC639DCE01E6A
SHA-256:	F7124C5C3BFDE32C65E07F49A22798B870F76FA2304FFCB1C628C4C63DB538B6
SHA-512:	DFB9559F84D8B7BFC5876E0B95ECA7BE4A211315F4947B647B027067DECD63251056C0B5B417D047DF76270A00927846F0D2364D98DF3AA4E116543641D3128E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.306898933803103
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfBD2G6UpnrPeUkwRe9:YvXKXLa7zZc0vQ6sGR22cUkee9
MD5:	2C5015BDECADFB68B8BB068C2BB0A1E9
SHA1:	50D4C8E3C7BF0F1147DDD66FAD695F1E16264C19
SHA-256:	BB323473366743C85BFB477A964EACF1D6FE29D0DFC9E19FAFE84C932149E980
SHA-512:	1E180241202FA1F52D36D426653B5F4CB078655016A84FD4DC5D8C3571564DF8F3D126C145AD3610DAEB26658C8DDF74828FF5516C3716AD7C6E6E3A5CB6B536
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.363438587725883
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfPmwrPeUkwRe9:YvXKXLa7zZc0vQ6sGH56Ukee9
MD5:	5A063127100B7B3EC390544DA85869D8
SHA1:	7767FFDD5ACCABA82B78EF78984123950751C158
SHA-256:	66E72E3DD795A2A94C0FF724FCA5AF57CCA3851538949C3C8690EF22E513092E
SHA-512:	053F97FF831DFC1D5DE034C1D23B516926C832941854F04A6121888159846B929D438A81A2BE06BF66B36671127138AE528E3A35F36217F891A9A27D04B4D49E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.69267006187973
Encrypted:	false
SSDEEP:	24:Yv6XLszvRpLgE9cQx8LennAvzBvkn0RCmK8czOCCS3:YvqU5hgy6SAFv5Ah8cv/3
MD5:	6AB4EF802AE33F039FAEBDBB0308796B
SHA1:	EA13BAE44FE84F48F26706ADD1228309E5B383DF
SHA-256:	ADE0BD4FC06F030C7629CDD4AEA3E851E9E9FF68EAE474BF6BD430B8653814D0
SHA-512:	773842D9DD6397E99DB3EAEA9665F14DD2E4A8C24382B2102C6703978DB4FBEDD85259B38790F00639C7A461F94865A516C6FD361E02021985C9C9FD0CBF8AA5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.309451927300972
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJf8dPeUkwRe9:YvXKXLa7zZc0vQ6sGU8Ukee9
MD5:	FF17144B43A92F222A27B6805926F1CE
SHA1:	39C76207F6780408507C3C3274077F31CF55F43A
SHA-256:	5BE5DDF630DF30A6EF24EB7BD4812CDEE8C76A3043E9AB7EB1C07DD62D55E687
SHA-512:	10175C691A5223559A22BC0C29308C5CF87A0137503D5C0E99B769685EF870F4C1F1C7072CBDC23DCA4C68CCAB4406DFAA66B98F9F0D44DE6C97602387258BF9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.313837052873927
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfQ1rPeUkwRe9:YvXKXLa7zZc0vQ6sGY16Ukee9
MD5:	03A236B3E87A4AEB3D63B59AD2FC7292
SHA1:	ADAF419869773BBC9A7DF2A22424BC995F8CE81D
SHA-256:	586D8015D45D582D9B7D72660F645A48920CBC22D7E61F97D4B811FE8FC39201
SHA-512:	983028820AA601AF73103679D9FDE850CC0EDA61DBC7971973204C45354E70B3683914D1A23DA1B59AF490E3E0C21F2B7DE35DAF4F2063B06A135A1D440D51E9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.316863257852009
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfFldPeUkwRe9:YvXKXLa7zZc0vQ6sGz8Ukee9
MD5:	EADBB47F6FDC1AC43D98E0B044312009
SHA1:	E3B35DE6AA67C22DABFF0CFF4CE2A9AC14F3C0CA
SHA-256:	1084A69C4F905E4D49E786B02FAB0C010028AC06CA6EB9F42FFCC2CBED29B0F5
SHA-512:	C2BDD3FC2941B1E2899D06D3D73B004AFBBC7A67EAE3BBE1885E40A9CE247985C87874271E2D2D094C65F3E3B334153128F9AC981BE77AA4507D5BD4333F1404
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.333760455599927
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfzdPeUkwRe9:YvXKXLa7zZc0vQ6sGb8Ukee9
MD5:	706247F2822F4D976A47E6FA74FCC198
SHA1:	54197FC6EB7E269083705FEB9AD12E2404646969
SHA-256:	A81544183B63573F42A03C067C7171E01234D748EA5B20053584C9006717A6AB
SHA-512:	4E3DAD0D6B7572262139B8A83130820EA93725D4FB740959B8D3D56ECC16FE4CEC693462E33641529E317E7CA762802F3B749FB72C81AEA3AF43918E9F357B8F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.314980572120497
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfYdPeUkwRe9:YvXKXLa7zZc0vQ6sGg8Ukee9
MD5:	7C0882639A0FFFD82B352A4914AAD456
SHA1:	794DD7B909ABA3F5E42BD4384E444D8F08CFAA0D
SHA-256:	8312086E0C4A58064C34C7F6BCCF9FBBCB3829B5364E6955991555B6C8592D04
SHA-512:	93BD9C50B603CD16FDB14C929830B64A561E4B0B0986040B92180051598585F1FEFBECB7D5A16567D6BB375F3F8C8391A764BC28D7BA9B08D17859B9B9543E9F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.301294687410279
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJf+dPeUkwRe9:YvXKXLa7zZc0vQ6sG28Ukee9
MD5:	A83A405DDEB79AA20930057B6D15F719
SHA1:	BD748C3E167B49F65308D89C9DE82181BBD99A42
SHA-256:	88764E5B93D7AA381BDBE86C54DB782FC73E7DCCD7CB67F65E7E90780208A441
SHA-512:	C1F1AE3D457BAB4DC1C6F26196B66FB7EC44A4C941BC61CD9CD7F928C1B035053B838E73D471F6020968B43EF1574DE2B8292D0D24EF7C8B7C7860168F5A3D83
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.298424710535799
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfbPtdPeUkwRe9:YvXKXLa7zZc0vQ6sGDV8Ukee9
MD5:	AE10F90578F3EB3B3820F97ED9CFA1EA
SHA1:	FAD064F2282851BE572C6DED12DFF4F0E5F37605
SHA-256:	19B777118EAFF365F68C15AB41C88A6D2204877B8E5DED3406AE1108070D5342
SHA-512:	AA0187B93AE8C896BCD33ECF9D0A8836ECC1B632AC296715F25FE41B0ABF457D1EDB80BDF9D36FCCF50C9A8F2099AA1D022FD4F4D5DF5191962B961BBB9EB877
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.303579382248323
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJf21rPeUkwRe9:YvXKXLa7zZc0vQ6sG+16Ukee9
MD5:	CF6AE4F37DCB87BCFC405FE513AB957D
SHA1:	EC0488B214A49D5838487D4B202AC4E507DB7F72
SHA-256:	6FD0843D29E48B058767C943F133F2237AB01288F56C27D043B385986A1CFA7C
SHA-512:	95942B2782ABE10A3663634AB52476D01D06AB584CA3D9766AD816AC91158B3C74B638E33324763034CCB3E5E59DAD0D8472CA6C46F9A5FB0411E93094AB7C59
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.670757839691533
Encrypted:	false
SSDEEP:	24:Yv6XLszvxamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BS3:YvqUVBgkDMUJUAh8cvM3
MD5:	F4D9A4058DDABEFA40C8918BEAEDD811
SHA1:	64B6131BC9D53F4AEC9FDC9C2B9B4CF4E7D4BC0E
SHA-256:	FAC99D5CAA60B43FB94EBC1341EF9C0B2D76D00672A231433E409DC7AE325171
SHA-512:	C04158C10BEF39D15BE808813367F75F65EBBAB4CB82E45CDB8EDCE9BEA81A648119F1FE0B13F716CC772295083BCEBC02A588C32833786FEA0B7152F4A2A87F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.277836039644415
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJfshHHrPeUkwRe9:YvXKXLa7zZc0vQ6sGUUUkee9
MD5:	6E0BA0469989C66A5417402C435CF826
SHA1:	A926BC8C41519F4FFB6C03EB93397BC8474EBB8A
SHA-256:	1840E9020921DF3B469272C42EE00341827FB4A352080BD5F97310147C983901
SHA-512:	C7058EE113268354AADF0AAEF605E8070DAFC92264B0E71259182E9255A42BD4CCD7F1235570B5FC3F4D9B164EC584864A1CCBACE1766CD6C923FCF618E04BB7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.287200350106571
Encrypted:	false
SSDEEP:	6:YEQXJ2HXLa7ydVoZcg1vRcR0Yl6EeoAvJTqgFCrPeUkwRe9:YvXKXLa7zZc0vQ6sGTq16Ukee9
MD5:	6E13A3450909C3AE505804A23BB857D0
SHA1:	7073D0CBA10191360D1B88C5DD8C039CF074E029
SHA-256:	0CA675739FB07B44BFD541565C11296E196C7ADB5105C7AC4DEFF3783FF29450
SHA-512:	2441540CB94A450DD4DF8FBF6E17D9E254B2B31C08C6E567CEB2BC7B7C0776AB2F5FB46D5234677DA013538B15ACE715074366BF44496C36C2672BE7756E890E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"aa232888-6857-4ed9-a231-d810f75b40d7","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1735717375908,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.1403651596392015
Encrypted:	false
SSDEEP:	48:YCVA16g23cigoUv8Dh6v1/ToAYffZm79FU:NVE6p3cigPkDK5YfBUFU
MD5:	D8ECB5A611BDACF4EDE679A49F1DF5F7
SHA1:	01F9A5D354A5BF66FBBCCF80F9A509372220BE75
SHA-256:	2F4A6CFC5D7A3EEA54B58350D95349D467B4467CAF5E050C619B2A13D0626E93
SHA-512:	6BA5BCB451B9F02D6B7AB8FBF77764649D58E7545D3D207B59F3B4F137AF9859CA8F0F1D3ED8DD8D024A5E9DCF5FD60805E64515678E184CEF735095CFF100F6
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"86741258961340ac5fefb34ef1a80d35","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1735539579000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"09717cff7c78e72acdff4212b76ddec3","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1735539579000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"832b78086d200626d818536334feab35","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1735539579000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"8f384220c63a4e020237ec4055dc5dee","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1735539579000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"c8d1569733c388bf44c6bb3677015894","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1735539579000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"d16010d2d206b60f3786dd996af3119a","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1861961961910334
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUrKoSvR9H9vxFGiDIAEkGVvpfKG:lNVmswUUUUUUUU1+FGSItB
MD5:	7DBF1D1B95A544766F18B65105418FAE
SHA1:	4DBE058094FD2B22E38DE65B1A7962F2F7C9767F
SHA-256:	B335D89A6BF50D93837046107F25FAADEE2CD42D1331C4067635980C2F726691
SHA-512:	29E9138626F9E674B0865D0A0C2C89638150A0C53BAA5025E83C360C1BDBD4E797A24DC1D9BB7142B1E1D6620803AA70A4C7686ABEFDA72EEEC6CA8A91CF81EC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6059410303739354
Encrypted:	false
SSDEEP:	48:7MwKUUUUUUUUUUrKqvR9H9vxFGiDIAEkGVvhqFl2GL7msw:7AUUUUUUUUUUJFGSItLKVmsw
MD5:	9F2889119FE8B2B20F020E6342DD862B
SHA1:	B8364E7CD772308E6E907B0B0BF3F785DFE6BA9F
SHA-256:	F16D463597CF4A6664E9EE2DFA7E3C409B080507F8D8978E03FA4F319D08D130
SHA-512:	FE560A7FD74A3F0A86A73B1EF5DE98F1FEB5F67547C4227AB56237C1B5C06328DB0F8025E61225899D7079C42233645B9A75C7C7CD15EB11DDEB4C37EA1B71B3
Malicious:	false
Preview:	.... .c......".{......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgT4Qe+tzsU/PBFYduvH587D0Yyu:6a6TZ44ADEZe+tzsAYmo0K
MD5:	D0E46BEB29F3E97A688F13E2E0DAF797
SHA1:	CE42E48393CE77FA66BF392AA0FC4BD9BD79B576
SHA-256:	1A43A670602DFD20C14443988C965D840E8B4C440658A98C9678BF0B07DCD873
SHA-512:	BA31690D455F6833DD659B23CB48BDFBB099600404A246CB6865C844371B6AB35C55CB3731D89D4B80A25F5B3A264AA208B058080FDFB78BCF8D24A5A31BEF0D
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI3178d.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5162684137903053
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K846iIw:Qw946cPbiOxDlbYnuRKOw
MD5:	65E9E56EA8EEBFAF138E88A4B3B0FC67
SHA1:	17CFE4E0884675C474F3DDF5057305977692C6EA
SHA-256:	191BB9B90D3004303DC09EE76E8A41F9353C010562546F02D361716871475BD5
SHA-512:	49E15B10500CAF471CD4AFDDA1742A487D9435806621ABDC20ECC4E78B7C3EFDE28E7D9388E1739931E2F27CCBEC55D946A7CAC526F75E2BBCEA6B1158DC6AC4
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.0./.1.2./.2.0.2.4. . .0.1.:.1.9.:.3.9. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-30 01-19-34-648.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.35092804049667
Encrypted:	false
SSDEEP:	384:4Quh2gTpy7eoWytGLsqjHZx4cbRF+VBVFVbVZVMVrHxtBhIQrdsp3AoHN56d63GX:GkRT7Rfar
MD5:	B83FEC657F4161267AA93FEB2B85266F
SHA1:	94B13B734AB0B312253032E49828134ADBB9E917
SHA-256:	C6C9CD164FFE9DE4D65DE311EE8504F388708239C4A3F65249B2EF1565FC2881
SHA-512:	83FD965FCCD1CFF77E9CD5F2391DD627BFF6D06E474862928FC7CEF8AD96F8EC87A697255B8E7CBB954678B46FD60F491FF058686EAA9DADF16493B1220FC1E0
Malicious:	false
Preview:	SessionID=0200c31f-989c-4fdd-aaef-edd2de354206.1735539574665 Timestamp=2024-12-30T01:19:34:665-0500 ThreadID=7740 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=0200c31f-989c-4fdd-aaef-edd2de354206.1735539574665 Timestamp=2024-12-30T01:19:34:666-0500 ThreadID=7740 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=0200c31f-989c-4fdd-aaef-edd2de354206.1735539574665 Timestamp=2024-12-30T01:19:34:666-0500 ThreadID=7740 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=0200c31f-989c-4fdd-aaef-edd2de354206.1735539574665 Timestamp=2024-12-30T01:19:34:666-0500 ThreadID=7740 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=0200c31f-989c-4fdd-aaef-edd2de354206.1735539574665 Timestamp=2024-12-30T01:19:34:666-0500 ThreadID=7740 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.390234143281591
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rL:P
MD5:	505DCD34D6F40B41295FB76B858B478F
SHA1:	D42DCA3C970D988F9696819FA42A3C8F8FD3E7BB
SHA-256:	BCCD249FA0F47E94FD4CAC3650E38607F05D1516AC3CC64EF8D30B2916162673
SHA-512:	FF9B1E039887D713480F8FD4498A1BB19E9330AC9C0A4D87E62DC4D6E76C3751F807A9C4207636BA415DB05FB93764354F5BA345B7F7158A0A2C6E98B66BBE35
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\13569c0c-96eb-43a4-b584-f5f2ae40448e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\b7721060-6ddd-419d-ab63-ef6a11a9461e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/M7oMOWLaGZ4ZwYIGNP8dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:RVWLaGZ4ZwZGm3mlind9i4ufFXpAXkru
MD5:	E787F9888A1628BE8234F19E8EE26D68
SHA1:	44D5180C06ADBBDAADDBCE350CE4DEC997CD83E5
SHA-256:	3A09F3799148DA49F039A35AEDD22F368FB35B8D6022C4691C10606F704DAF80
SHA-512:	EE9B602898706CC0F33AA570E29A79A58ED748E1B738D74DF0C8C8DF193E23421B47AC8C862623ED774289D94FA90662A4CC436B80479D6420433D81752E9CA9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\c54f2887-8efc-4abd-88c1-e453b07a78e5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\d307e66c-d4fd-49a8-be6b-52579b488bf4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (382)
Category:	downloaded
Size (bytes):	75074
Entropy (8bit):	6.138406589178574
Encrypted:	false
SSDEEP:	1536:crpvhGe1FSmB10lpn/n3Bzx0rEO3pQpE03ejrfodzWUc:mxhGe1FSmB10lpn/nRzx0AO3pQHejrfZ
MD5:	D8798AAE777F6C93C53155F081A8C8EA
SHA1:	81B8A61366B8F08C3D3A8A2E1CFE499CEC5521B8
SHA-256:	69FEB31D20F8340079383EB02BD89606E55D53476E2C1A9D70646E3A19FE4A25
SHA-512:	495DAB5208A42596D39852997A20433395648AE68D384EE13AB648D5EBF8C936B2E903F19CA8918E6E70D8DEEF1D036AC6962EA5C58B696A5D7F07146E274239
Malicious:	false
URL:	https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />.. </head>. .......<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">... Stylesheet for default styles -->...<link rel="stylesheet" href="https://helpimg

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
URL:	https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
URL:	https://secure.encryptedconnection.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	dropped
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5649
Entropy (8bit):	5.250605215538956
Encrypted:	false
SSDEEP:	96:KGJW/OplIczjJxwvcS2dOCERJ7EnXKEh9sk4QfkOtjt:T1Ickv9RJ7SKesk4Qfk+
MD5:	B13B4F098D80AC49DCC6BED4E459D560
SHA1:	81FFB3DD594A82F9453D1C45DA812DFC008CAA65
SHA-256:	5FC2013E8D4F5A97667A0A5BFEF9A2E148363D89A46BE49F14CB2C60B1461CA9
SHA-512:	4FEAEA5336B3E1B7B1D26C5D576C655208955D4C7657B967D11A9D58A3086EB0D087DE53606E0AC4E0F3AEFD9993E616BD7B9B343AE23DEB20477BD7EFD75ECC
Malicious:	false
URL:	https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Preview:	:root {..--clr-neutral-100: #ffffff;..--clr-neutral-200: #f5f5f5;..--clr-neutral-300: #d5d5d5;..--clr-neutral-400: #ababab;..--clr-neutral-500: #707070;..--clr-neutral-600: #2c2c2c;.../* Padding /..--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);..--padding-sm: clamp(1rem, 3%, 1.5rem);..--padding-md: clamp(1.5rem, 6%, 3rem);..--padding-lg: clamp(3rem, 12%, 6rem);.../ Margin /..--block-flow-xs: min(1rem, 2vh);..--block-flow-sm: min(2rem, 4vh);..--block-flow-md: min(4rem, 8vh);..--block-flow-lg: min(8rem, 16vh);.../ Font Sizes /.../ @link https://utopia.fyi/type/calculator?c=320,18,1.2,1240,20,1.25,5,2,&s=0.75\|0.5\|0.25,1.5\|2\|3\|4\|6,s-l&g=s,l,xl,12 /.../ Step -1: 15px . 12.003px /..--step--1: clamp(0.7502rem, 1.0027rem + -0.3258vi, 0.9375rem);../ Step 0: 18px . 16px /..--step-0: clamp(1rem, 1.1685rem + -0.2174vi, 1.125rem);../ Step 1: 21.6px . 21.328px /..--step-1: clamp(1.333rem, 1.3559rem + -0.0296vi, 1.35rem);../ Step 2: 25.92px . 28.4302px */..--step-2: clamp(1.62rem,

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
URL:	https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (435)
Category:	downloaded
Size (bytes):	489
Entropy (8bit):	5.814823066742784
Encrypted:	false
SSDEEP:	12:3R+xnunlNrxHozh5XHR07UNFdVod3PYZXEsHEKL44AEdeIQL:3EulRxIzLHR07UXfod3kXuJNEkj
MD5:	6B5A9E294A3C55EF099B1664B876E938
SHA1:	0741E6A915E5B5ABE2A38DAB77722DB5FC274D2F
SHA-256:	273B7C69E6CBA02B7C3C6FFBBD6977A363E3E16E2FBF9E22E27DA75BF92B0E5D
SHA-512:	B12D6FCF0B504C313943AD0C6227E296AF50334A02AD5524C3C39C26E0EDF8B5EB60D835FD010B2FF1AFEA9DFF0D3C7E1C1F26C9A6CEC0E50CCFCD1CF44DF34B
Malicious:	false
URL:	https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780
Preview:	<html>. <head>. <script>window.location.href = 'https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	1762
Entropy (8bit):	4.935533253428407
Encrypted:	false
SSDEEP:	48:0EY3OZgl2mrk+zWrDNl613A3h7tm0FiC7WA8u:zY3OZglVavT61wR7TFiC7su
MD5:	D5E3158E82340391E333DE30349BB337
SHA1:	DB24B9953F3A9B48E538CE37F48757A3AE60466E
SHA-256:	54225BCAE249AB0F55827A5C3A50A5AEFD58BBC5501E5ECDCFF9E9C2AC4972CF
SHA-512:	8138232E4702EBDA8D4FF2D0FB207CC2051A244CC55435F6C76F2ADEAD5CF333E92BD414A1E1D8757308E52D8C57F0133F8BC2E4E5F19C9007DC5C86AA6004D1
Malicious:	false
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.css" rel="stylesheet"/><link href="/ui/fonts/notosans.css" rel="stylesheet"/><title>KnowBe4</title><style media="screen">.loader {. margin: 40vh auto;. display: block;. position: relative;. width: 64px;. height: 64px;. }.. .loader div {. box-sizing: border-box;. display: block;. position: absolute;. width: 51px;. height: 51px;. margin: 3px;. border: 3px solid #bdbdbf;. border-radius: 50%;. animation: loader 1.2s cubic-bezier(0.5, 0, 0.5, 1) infinite;. border-color: #bdbdbf transparent transparent;. }.. .loader div:nth-child(1) {. animation-delay: -0.45s;. }.. .loader div:nth-child(2) {. ani

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
URL:	https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
URL:	https://secure.encryptedconnection.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Static File Info

General

File type:	PDF document, version 1.6, 0 pages
Entropy (8bit):	7.173583772760332
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	PersonnelPolicies.pdf
File size:	109'631 bytes
MD5:	fe604262089e53638bc238bcbdaf09b9
SHA1:	a08b736da0d8d447ff5231eab8c67cf1ee5c3e21
SHA256:	ec34a788bb130955dfae4d1c9c75b2166ccc02baf172d2b34f342e30385e8640
SHA512:	495fc5e2be7e43c5da88c12206277e0e176a015656dbaefed734a5df74623bd1199fb8704e13630312c79c89a3ade541d1d6e9f4be155cdcf8c5fad8aff0432a
SSDEEP:	3072:4ZhfbBd/zLdy38AU+1SBU+wT3KUBmOPXp:4ZhfbBJ1AUKshwT3FPXp
TLSH:	88B35915EC06FCC4B045CBA176B9794D411D310364AB2DABF69C8FCADFC35889E8A16B
File Content Preview:	%PDF-1.6.%.....%QDF-1.0..%% Original object ID: 14 0.1 0 obj.<<. /AcroForm 3 0 R. /Metadata 4 0 R. /OpenAction 6 0 R. /Outlines 7 0 R. /Pages 8 0 R. /Type /Catalog.>>.endobj..%% Original object ID: 12 0.2 0 obj.<<. /CreationDate (D:20180612094110-0

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.6
Total Entropy:	7.173584
Total Bytes:	109631
Stream Entropy:	7.767167
Stream Bytes:	82425
Entropy outside Streams:	3.786561
Bytes outside Streams:	27206
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	54
endobj	54
stream	14
endstream	14
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	6
/JS	1
/JavaScript	1
/AA	0
/OpenAction	1
/AcroForm	1
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
21	c6c6874b6b62f0e2	7d0ee0aed29d30b2155af6893379f1f7
23	4a4d08a957113862	127ed9be986e6e9bf0e5a75b9ea98c45
25	494519d4cc49554d	90f15dad1a7916b8c4ddf3784dc5ba38

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 07:19:36.211524010 CET	49675	443	192.168.2.4	173.222.162.32
Dec 30, 2024 07:20:08.968884945 CET	80	49724	84.201.210.39	192.168.2.4
Dec 30, 2024 07:20:08.969259977 CET	49724	80	192.168.2.4	84.201.210.39
Dec 30, 2024 07:20:08.969260931 CET	49724	80	192.168.2.4	84.201.210.39
Dec 30, 2024 07:20:08.974138021 CET	80	49724	84.201.210.39	192.168.2.4
Dec 30, 2024 07:20:43.239276886 CET	49723	80	192.168.2.4	2.22.50.144
Dec 30, 2024 07:20:43.244334936 CET	80	49723	2.22.50.144	192.168.2.4
Dec 30, 2024 07:20:43.244421959 CET	49723	80	192.168.2.4	2.22.50.144
Dec 30, 2024 07:20:58.422827005 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:58.422847986 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:58.422892094 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:58.424459934 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:58.424472094 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.272352934 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.272788048 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.272795916 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.273804903 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.273860931 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.275125027 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.275192022 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.275316000 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.275324106 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.319900036 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.670073032 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.670283079 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.670491934 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.670974970 CET	49940	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.670989037 CET	443	49940	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.749084949 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.749169111 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.749243021 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.749593019 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.749617100 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.749815941 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.750072002 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.750082016 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:20:59.750382900 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:20:59.750422001 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.607038021 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.607332945 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.607342005 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.608365059 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.608441114 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.609319925 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.609376907 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.609535933 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.609544039 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.634790897 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.635021925 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.635045052 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.636183977 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.636255980 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.636550903 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.636621952 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.665052891 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.681416035 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:00.681426048 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:00.727068901 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:02.713671923 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:02.713711023 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:02.713803053 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:02.714021921 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:02.714035988 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.067476988 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067523956 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067531109 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067590952 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.067596912 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067647934 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067676067 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067703962 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.067719936 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.067719936 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.067765951 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.067787886 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.072254896 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.072271109 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.072340965 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.072355032 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.072464943 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.136713982 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.136800051 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.136902094 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.139004946 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.139642954 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.139678001 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.151618004 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.151634932 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.151683092 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.151695967 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.151750088 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.151750088 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.152421951 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.152452946 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.152518988 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.152606010 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.152626038 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.152688980 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153007030 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153019905 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.153177023 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153191090 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.153219938 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153327942 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153340101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.153455973 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.153465033 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.155993938 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156006098 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156069994 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.156076908 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156115055 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.156618118 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156672955 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156677008 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.156697035 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156707048 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.156740904 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.156955004 CET	49953	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.156963110 CET	443	49953	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.167254925 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.167264938 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.167447090 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.167783022 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.167794943 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.179358006 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.344702005 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.344943047 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:03.344954967 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.345910072 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.345973969 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:03.346920967 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:03.346980095 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.388829947 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:03.388835907 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:03.429275990 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:03.439928055 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.439949989 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.440017939 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.440144062 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.440144062 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.440737963 CET	49952	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.440773010 CET	443	49952	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.690630913 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.738364935 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.745475054 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.780982018 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.784713030 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.784722090 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.784915924 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.784931898 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.785377026 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.785703897 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.785783052 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.785882950 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:03.785907030 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.785919905 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.785970926 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.786849976 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.786917925 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.787192106 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.787199974 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.831331968 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:03.835155010 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.837364912 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.840162992 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.851790905 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.862798929 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.862806082 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.862891912 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.862919092 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.863719940 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.863775015 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.863816023 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.863866091 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.865577936 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.865583897 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.866667986 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.866734028 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.895855904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.895952940 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.896214962 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.896289110 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.897059917 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.897128105 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.897795916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.897810936 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.897922993 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.897936106 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.898005009 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.898015976 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:03.898848057 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.899158001 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.899168015 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.899208069 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.899216890 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.899240971 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.899482012 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.899528027 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.905895948 CET	49984	443	192.168.2.4	16.182.35.201
Dec 30, 2024 07:21:03.905905008 CET	443	49984	16.182.35.201	192.168.2.4
Dec 30, 2024 07:21:03.944443941 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.944444895 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:03.944444895 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.080857038 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.080879927 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.080921888 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.080957890 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.081046104 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.081072092 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.081156015 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.082839012 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.082854986 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.082925081 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.082942963 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.134325027 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.165148020 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.165155888 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.165204048 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.165230989 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.165249109 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.165277958 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.165316105 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.166399002 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.166414022 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.166470051 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.166484118 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.166537046 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.168288946 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.168303013 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.168370008 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.168385029 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.168437958 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.248596907 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248608112 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248640060 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248651028 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248650074 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.248662949 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248677015 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248689890 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.248719931 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.248729944 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248743057 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.248776913 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.249030113 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249043941 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249084949 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.249105930 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249131918 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.249150038 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.249739885 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249753952 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249797106 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.249809980 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.249862909 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.249862909 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.250423908 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.250437021 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.250475883 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.250489950 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.250518084 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.250554085 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.251272917 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.251286030 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.251349926 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.251364946 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.251476049 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.251837969 CET	49982	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.251847029 CET	443	49982	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.252111912 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.252126932 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.252172947 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.252186060 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.252214909 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.252232075 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.253937960 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.253952980 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.253994942 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.254008055 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.254036903 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.254056931 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.275360107 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.275379896 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.275427103 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.275804043 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.275814056 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.333359957 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333375931 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333434105 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.333462000 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333512068 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.333699942 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333713055 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333753109 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.333767891 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.333800077 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.333821058 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.334331036 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334342957 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334388018 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.334408045 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334433079 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.334453106 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.334578991 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334592104 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334640026 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.334654093 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.334705114 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.335361004 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.335374117 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.335433006 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.335445881 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.335494041 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.336236954 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336250067 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336306095 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.336321115 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336340904 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336369038 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.336384058 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336414099 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.336442947 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.336442947 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.336468935 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.337178946 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.337191105 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.337239981 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.337275028 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.337306023 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.337327003 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420366049 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420386076 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420442104 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420471907 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420502901 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420504093 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420526981 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420528889 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420541048 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420556068 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420612097 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420667887 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420681000 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420732975 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420747042 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420800924 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420813084 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420830965 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420867920 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420911074 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.420923948 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420952082 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.420953035 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.421006918 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.425705910 CET	49980	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.425721884 CET	443	49980	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.502194881 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.502206087 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.502230883 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.502239943 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.502266884 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.502270937 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.502322912 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.512854099 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.512862921 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.512882948 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.512893915 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.512906075 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.512928009 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.512968063 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.527057886 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.527080059 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.527137995 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.527381897 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:04.527395010 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:04.579258919 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.579276085 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.579329967 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.579344034 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.579358101 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.579407930 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.583264112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.583278894 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.583333969 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.583343029 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.583671093 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.589404106 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.589422941 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.589463949 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.589471102 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.589502096 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.589517117 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.593082905 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.593097925 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.593148947 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.593156099 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.593199015 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.662003040 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662017107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662090063 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.662097931 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662842035 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662875891 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662924051 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.662933111 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.662946939 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.662967920 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.663383961 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.663434982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.664623022 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.664637089 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.664714098 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.664721012 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.664844036 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.666645050 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.666660070 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.666723013 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.666731119 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.668850899 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.670883894 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.670901060 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.670933008 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.670957088 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.670964003 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.670999050 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.671006918 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.671011925 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.671232939 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.671240091 CET	443	49983	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.671257019 CET	49983	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.676239014 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.676249981 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.676316977 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.676481009 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.676492929 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.682106972 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:04.682132006 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:04.682189941 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:04.682365894 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:04.682379007 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:04.745448112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.745461941 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.745609045 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.745620012 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.745768070 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.745903015 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.745917082 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.745976925 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.745984077 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.746471882 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.746490955 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.746524096 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.746531010 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.746545076 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.746572971 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.747395992 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.747412920 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.747472048 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.747478008 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.747522116 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.750217915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750231981 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750287056 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.750294924 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750540972 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750571966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750597000 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.750603914 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.750642061 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.751120090 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.751133919 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.751187086 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.751194954 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.751799107 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.752383947 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.752398968 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.752454996 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.752461910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.752844095 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.828921080 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.828936100 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829081059 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829093933 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829201937 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829210043 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829225063 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829315901 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829323053 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829402924 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829555988 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829576015 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829613924 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829621077 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829749107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829765081 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829806089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.829813004 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.829992056 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.830009937 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.830043077 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.830053091 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.830068111 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.830085039 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.831197977 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.831212044 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.831238031 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.831269026 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.831276894 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.831300020 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.831331015 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.834016085 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.834029913 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.834088087 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.834094048 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.834713936 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.837853909 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.837866068 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.837932110 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.837938070 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.838587046 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.912513018 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.912527084 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.912638903 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.912672043 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.912681103 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.912688971 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.912830114 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913006067 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913021088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913110971 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913117886 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913292885 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913310051 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913347006 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913353920 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913368940 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913397074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913428068 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913443089 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913486004 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913492918 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.913512945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.913536072 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.914535999 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.914550066 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.914612055 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.914618969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.916520119 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.917274952 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.917295933 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.917354107 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.917361021 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.917402983 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.921195984 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.921210051 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.921314955 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.921323061 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.921402931 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.961988926 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.962306023 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.962323904 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.963191032 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.963249922 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.963516951 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.963573933 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:04.963630915 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:04.996017933 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996031046 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996081114 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996090889 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996134996 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996205091 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996238947 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996252060 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996257067 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996278048 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996608019 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996620893 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996656895 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996664047 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996685982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996712923 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996727943 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996764898 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996773005 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996887922 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996901035 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996934891 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.996942997 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.996963978 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.998028040 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.998042107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.998064041 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.998095989 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:04.998104095 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:04.998131037 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.000684023 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.000705004 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.000739098 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.000746965 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.000899076 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.004683971 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.004698038 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.004749060 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.004756927 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.007358074 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.008805037 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.008810997 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.055191994 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.055192947 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.079488993 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079504013 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079626083 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.079637051 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079735994 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.079849005 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079864025 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079962969 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.079969883 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.079986095 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080005884 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080075979 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.080082893 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080157995 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080172062 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080214024 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.080221891 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080322027 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080339909 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080367088 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.080374956 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.080384016 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.080411911 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.081353903 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.081367970 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.081433058 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.081440926 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.082384109 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.084062099 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.084076881 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.084129095 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.084135056 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.084511042 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.119431973 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.119625092 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.119635105 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.120490074 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.120553970 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.121536970 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.121593952 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.121730089 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.121737003 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.122615099 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.123564005 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.123572111 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.124520063 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.124583960 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.124864101 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.124924898 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.124989986 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.124996901 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.162863016 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.162878036 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.162935019 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.162950993 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.162972927 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.162991047 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163033009 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163039923 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163079977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163549900 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163566113 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163610935 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163619041 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163666964 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163780928 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163794994 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163849115 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163856030 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163902044 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.163937092 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.163949966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.164017916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.164025068 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.164124966 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.164150000 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.164819002 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.164834023 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.164885044 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.164891958 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.164978981 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.167145014 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.167164087 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.167203903 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.167216063 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.167248964 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.167265892 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.168965101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.168981075 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.169044971 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.169050932 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.169106960 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.179255962 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.246059895 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246092081 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246185064 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.246195078 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246263027 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.246512890 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246529102 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246597052 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.246603966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246812105 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246829987 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246859074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.246865988 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.246877909 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.246901035 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.247116089 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.247131109 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.247165918 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.247173071 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.247188091 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.247210979 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.247448921 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.247462988 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.247508049 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.247514009 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.248122931 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.248140097 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.248172045 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.248179913 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.248193979 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.248214006 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.250571012 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.250586033 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.250634909 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.250643015 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.251084089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.252454996 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.252470970 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.252506971 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.252515078 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.252525091 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.252557993 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.259553909 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.259653091 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.259727001 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.260016918 CET	49998	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.260025024 CET	443	49998	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.262439013 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.262465954 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.262538910 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.262748003 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.262763023 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.329541922 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.329564095 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.329668999 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.329679966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.329782963 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.329859972 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.329874039 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.329976082 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.329982996 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330065966 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330272913 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330286980 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330326080 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330332041 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330507994 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330528021 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330555916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330562115 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330578089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330600977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330774069 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330789089 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330822945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330828905 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.330837965 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.330868006 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.331567049 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.331582069 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.331640005 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.331645966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.332694054 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.334021091 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.334034920 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.334085941 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.334093094 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.334733009 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.335722923 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.335738897 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.335799932 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.335808039 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.336605072 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.355381012 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355391979 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355422020 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355429888 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355446100 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.355462074 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355470896 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355477095 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.355503082 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.355513096 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355560064 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.355683088 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.355921030 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.355931044 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.356794119 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.356842041 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.357249975 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.357302904 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.357353926 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.357494116 CET	49990	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.357507944 CET	443	49990	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.399375916 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.400414944 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.400423050 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.412842989 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.412858009 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.413094044 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.413103104 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.413177013 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.413662910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.413677931 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.413723946 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.413731098 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.413744926 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.413759947 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414028883 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414042950 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414087057 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414093018 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414187908 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414213896 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414242983 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414251089 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414259911 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414283991 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414570093 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414582968 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414630890 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414638042 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414649010 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414673090 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414931059 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414946079 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.414988995 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.414994955 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.416264057 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.417335987 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.417351961 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.417409897 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.417418003 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.417995930 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.419162035 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.419177055 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.419243097 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.419249058 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.419620037 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.448647976 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.462177992 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462255001 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462261915 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462292910 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462307930 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462315083 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462316036 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.462328911 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.462544918 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.462544918 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.463093042 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.463108063 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.463150978 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.463157892 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.496285915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.496313095 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.496473074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.496473074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.496483088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.496843100 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497009039 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497021914 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497071028 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497077942 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497291088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497308969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497339964 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497344971 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497368097 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497389078 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497612953 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497627020 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497673035 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497679949 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497879982 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497898102 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.497946978 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.497953892 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.498184919 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.498198032 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.498245001 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.498251915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.499069929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.500721931 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.500735998 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.500793934 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.500801086 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.500844955 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.502487898 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.502501965 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.502552032 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.502557993 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.502978086 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.508960962 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.546478033 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.546489954 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.546508074 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.546540022 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.546627045 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.546638012 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.546684027 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.548155069 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.548167944 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.548217058 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.548224926 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.548269033 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.549101114 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.549113035 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.549165964 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.549173117 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.549211025 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.550709009 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.550720930 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.550770998 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.550776958 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.550820112 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.579778910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.579796076 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.579866886 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.579881907 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580028057 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580604076 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580617905 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580670118 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580677032 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580713034 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580738068 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580753088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580795050 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580801010 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580811024 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580842972 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580940008 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580957890 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.580991983 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.580997944 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581018925 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581031084 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581237078 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581250906 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581298113 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581305027 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581337929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581551075 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581568956 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581600904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581608057 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.581631899 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.581645966 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.584095955 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.584110975 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.584163904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.584170103 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.584207058 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.585803986 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.585824966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.585869074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.585875034 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.585915089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.620954037 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.620965004 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.620990038 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.620999098 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.621011019 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.621136904 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.621136904 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.631436110 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.631448984 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.631607056 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.631613970 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.631659985 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.632317066 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.632330894 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.632395029 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.632401943 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.632441998 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.633256912 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.633275986 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.633338928 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.633346081 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.633380890 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.634165049 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.634177923 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.634334087 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.634341002 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.634382963 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.635169983 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.635185003 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.635241985 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.635248899 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.635284901 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.635987997 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.635999918 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.636048079 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.636054039 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.636087894 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.669687986 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.669703960 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.669934988 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.669945955 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.670020103 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.670706987 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.670723915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.670778036 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.670785904 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.670823097 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.671777964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.671793938 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.671840906 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.671852112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.671895981 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.672060966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672076941 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672116995 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.672125101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672158003 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.672394991 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672410965 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672456026 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.672462940 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672504902 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.672926903 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672941923 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.672992945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.673000097 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.673039913 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.677655935 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.677670956 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.677731991 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.677741051 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.677782059 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.681197882 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.681214094 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.681278944 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.681284904 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.681328058 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.696233034 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.696572065 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.696578979 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.696852922 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.697154999 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.697207928 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.697269917 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.697571993 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.697578907 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.697604895 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.697623968 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.697633028 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.697640896 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.697665930 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.697685957 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.701639891 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.701653004 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.701706886 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.701714993 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.701751947 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.715550900 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.715565920 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.715708017 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.715723038 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.715817928 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.715960979 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.715979099 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.716069937 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.716078043 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.716141939 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.716439009 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.716453075 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.716496944 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.716502905 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.716543913 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.717989922 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.718003035 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.718054056 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.718060970 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.718100071 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.720202923 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.720216036 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.720268011 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.720273972 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.720314980 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.721901894 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.721915960 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.721963882 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.721971035 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.721991062 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722009897 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722017050 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.722023010 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722038984 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.722064972 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722071886 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.722079992 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722090006 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722109079 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.722130060 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.722135067 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.722172976 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.739332914 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.753207922 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.753236055 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.753365993 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.753376007 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.753603935 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.754190922 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.754210949 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.754250050 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.754256964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.754285097 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.754298925 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755275011 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755296946 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755333900 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755350113 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755362034 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755388975 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755450964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755470991 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755503893 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755511045 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755534887 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755553007 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755795956 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755815983 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755850077 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755857944 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.755884886 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.755898952 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.756320000 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.756340981 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.756380081 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.756386995 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.756408930 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.756424904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.761234999 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.761255026 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.761349916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.761362076 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.761404991 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.767213106 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.767236948 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.767277002 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.767282963 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.767309904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.767323017 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.779758930 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779784918 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779841900 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.779849052 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779860020 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779881001 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.779903889 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.779907942 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779925108 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.779951096 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.779975891 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.780150890 CET	49997	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:05.780158997 CET	443	49997	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:05.799783945 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.799799919 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.799870968 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.799880028 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.799920082 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800008059 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800023079 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800064087 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800070047 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800097942 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800107956 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800170898 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800184011 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800219059 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800225019 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800231934 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800259113 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800296068 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.800339937 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800792933 CET	49996	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:05.800797939 CET	443	49996	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:05.837063074 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.837090015 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.837147951 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.837161064 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.837183952 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.837196112 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.838212967 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.838232994 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.838277102 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.838284969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.838311911 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.838330030 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839373112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839391947 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839432001 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839437962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839468956 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839488029 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839813948 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839833021 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839858055 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839864969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.839883089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.839905024 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.840131998 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.840152979 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.840183973 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.840189934 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.840214014 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.840229034 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.840933084 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.840954065 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.841001987 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.841008902 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.841042995 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.842389107 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.842510939 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.842554092 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.842679977 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.842690945 CET	443	50004	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.842700005 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.842745066 CET	50004	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.844382048 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.844392061 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.844456911 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.844649076 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:05.844660044 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:05.845117092 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.845136881 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.845180035 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.845186949 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.845213890 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.845235109 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.848341942 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.848364115 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.848417997 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.848424911 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.848465919 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.928620100 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.928642035 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.928900003 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.928921938 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.928937912 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.928953886 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929006100 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929124117 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929141998 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929169893 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929176092 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929192066 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929356098 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929380894 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929404974 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929413080 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929435015 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929819107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929843903 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929877043 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929883003 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.929892063 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.929992914 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930016994 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930048943 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.930054903 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930064917 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.930232048 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930248976 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930284977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.930291891 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.930301905 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.932668924 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.932693958 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.932733059 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.932740927 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:05.932755947 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:05.976289988 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.011888981 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.011909962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012106895 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012118101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012161970 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012378931 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012449026 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012482882 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012489080 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012511969 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012530088 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012664080 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012684107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012717009 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012723923 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.012751102 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.012758017 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013118029 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013138056 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013173103 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013180971 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013196945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013214111 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013398886 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013417959 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013444901 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013451099 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013473988 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013487101 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013897896 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013916969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013955116 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013959885 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.013983011 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.013995886 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.014359951 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.014379978 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.014427900 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.014434099 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.014472008 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.016380072 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.016398907 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.016464949 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.016472101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.016510963 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.095460892 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095487118 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095735073 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.095746040 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095757961 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095781088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095797062 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.095803976 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.095839024 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.095858097 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096210957 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096230984 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096271992 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096280098 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096302032 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096322060 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096545935 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096565962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096599102 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096606970 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096628904 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096648932 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096914053 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096932888 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096968889 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.096975088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.096999884 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097009897 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097363949 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097383022 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097433090 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097440004 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097480059 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097825050 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097846985 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097882032 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097887993 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.097914934 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.097929955 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.099606037 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.099627018 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.099667072 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.099673033 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.099711895 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178677082 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178704977 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178750992 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178766966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178792000 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178814888 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178817034 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178841114 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178847075 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.178859949 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178889990 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.178980112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179001093 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179034948 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179047108 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179058075 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179085016 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179241896 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179260969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179291964 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179296970 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179331064 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179338932 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179563046 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179585934 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179620028 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179626942 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179651976 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179671049 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179754972 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179775000 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.179805040 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179893017 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.179897070 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.180023909 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.180104017 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.180123091 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.180160046 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.180165052 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.180188894 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.180208921 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.181689024 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.181715012 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.181759119 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.181766987 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.181802034 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.262101889 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262121916 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262254000 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262288094 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262423038 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.262435913 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262470007 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.262481928 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262501001 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262599945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.262613058 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262739897 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262763023 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262797117 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.262804031 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.262814045 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263072014 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263091087 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263118982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263128042 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263135910 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263247013 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263268948 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263297081 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263303041 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263315916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263608932 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263626099 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263659954 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.263665915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.263681889 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.265079975 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.265101910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.265151024 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.265158892 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.265171051 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.286519051 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.286864042 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.286875963 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.287180901 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.287559032 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.287575006 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.287579060 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.287631035 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.305073977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.336078882 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.345460892 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345480919 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345599890 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.345608950 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345736980 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345760107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345813990 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.345819950 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345846891 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.345946074 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.345968962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.345988989 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346039057 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346046925 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346087933 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346262932 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346283913 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346317053 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346323013 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346332073 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346354961 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346462011 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346481085 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346509933 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346515894 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346537113 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346550941 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346756935 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346775055 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346801043 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346807003 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.346823931 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.346843958 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.347099066 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.347126961 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.347152948 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.347158909 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.347177982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.347193003 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.348462105 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.348490000 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.348532915 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.348541021 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.348584890 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.349267960 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.349324942 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429260015 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429287910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429354906 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429379940 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429441929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429441929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429441929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429452896 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429481983 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429528952 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429548025 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429577112 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429584980 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429609060 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429863930 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429888964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429910898 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.429922104 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.429929972 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430134058 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430151939 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430182934 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430190086 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430198908 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430399895 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430423975 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430450916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430457115 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430465937 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430613995 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430630922 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430664062 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.430670977 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.430679083 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.432641029 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.432665110 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.432707071 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.432713985 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.432724953 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.433434010 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.433470964 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.433500051 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.433509111 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.433518887 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.433552980 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.433559895 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.434015036 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.434046030 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.434056044 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.434062958 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.434099913 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.434106112 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.438236952 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.438270092 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.438288927 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.438298941 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.438344955 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.438352108 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.475893974 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.491194963 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.512676001 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512701988 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512742043 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.512752056 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512774944 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.512789011 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.512836933 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512859106 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512890100 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.512895107 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.512921095 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.512938976 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513067007 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513087988 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513114929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513120890 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513140917 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513149977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513302088 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513345003 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513364077 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513371944 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513384104 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513672113 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513691902 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513782024 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513802052 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513816118 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513816118 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513828039 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.513838053 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513853073 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513875961 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.513998985 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.514019966 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.514050007 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.514056921 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.514067888 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.514091969 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.515245914 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.515280008 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.515316963 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.515324116 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.515350103 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.517497063 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.517577887 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.517636061 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.517872095 CET	50007	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.517878056 CET	443	50007	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.528095007 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.528120995 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.528182983 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.528376102 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.528387070 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.568496943 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.595937014 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.595968962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596190929 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596199036 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596283913 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596318007 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596338987 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596438885 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596446037 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596501112 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596504927 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596515894 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596538067 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596563101 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596569061 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596595049 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596609116 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596611977 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596621990 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596637964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596658945 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596664906 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596683025 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.596945047 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596962929 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.596996069 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597003937 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597031116 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597162962 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597181082 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597223043 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597229958 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597245932 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597388029 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597405910 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597436905 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597443104 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597453117 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597661972 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597681999 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597716093 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597724915 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.597734928 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.597760916 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.599570990 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.599591017 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.599659920 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.599668026 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.599706888 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.680378914 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680413961 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680483103 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.680490971 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680526018 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.680811882 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680833101 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680866003 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.680871964 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.680903912 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.680912971 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681241989 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681267023 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681304932 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681312084 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681338072 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681349993 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681566954 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681592941 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681626081 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681632996 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681662083 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681667089 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681910038 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681931019 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.681974888 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.681981087 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682008982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.682008982 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.682286024 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682307005 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682341099 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.682347059 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682384014 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.682384014 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.682391882 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682420969 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.682461023 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.683075905 CET	49981	443	192.168.2.4	18.173.205.50
Dec 30, 2024 07:21:06.683084965 CET	443	49981	18.173.205.50	192.168.2.4
Dec 30, 2024 07:21:06.691644907 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:06.691665888 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:06.691731930 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:06.691939116 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:06.691952944 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:06.936866999 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:06.936880112 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:06.936956882 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:06.937226057 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:06.937237978 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:06.961987972 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.962204933 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.962227106 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.963078022 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.963145018 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.963409901 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.963462114 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:06.963521004 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:06.963526964 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.008806944 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.094618082 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094660044 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094693899 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094724894 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094753027 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094779968 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094790936 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.094798088 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.094929934 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.094937086 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.095000982 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.095391989 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.099706888 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.099735022 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.099822998 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.099829912 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.099931002 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.177378893 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.177489042 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.177542925 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.178128958 CET	50011	443	192.168.2.4	104.17.245.203
Dec 30, 2024 07:21:07.178144932 CET	443	50011	104.17.245.203	192.168.2.4
Dec 30, 2024 07:21:07.394903898 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.395194054 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.395204067 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.395510912 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.395765066 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.395822048 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.395884037 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.443331957 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.531075954 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.531554937 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.531567097 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.531877995 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.532124996 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.532190084 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.532260895 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.575341940 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.664238930 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.664248943 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.664347887 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.744653940 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.744671106 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.744785070 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.744795084 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.744901896 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.748367071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.748382092 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.748435020 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.748444080 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.748491049 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.790205002 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.790304899 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.790386915 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.790832996 CET	50018	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.790842056 CET	443	50018	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.793585062 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.793673038 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.793771029 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.793971062 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:07.794019938 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:07.830504894 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.830522060 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.830737114 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.830744982 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.830837011 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.831285954 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.831300020 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.831337929 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.831346989 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.831361055 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.831382990 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.832669973 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.832684994 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.832750082 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.832757950 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.832796097 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.836815119 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.836832047 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.836894989 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.836901903 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.836941957 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.916951895 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.916974068 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.917098999 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.917104959 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.917221069 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.917617083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.917644024 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.917712927 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.917720079 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.917763948 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.918292999 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.918308020 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.918358088 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.918365002 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.918407917 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.919281006 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.919296980 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.919352055 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.919358969 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.919398069 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.920131922 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.920146942 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.920197010 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.920203924 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.920248985 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.922427893 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.922441959 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.922496080 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.922502041 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.922539949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.923455954 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.923470974 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.923522949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.923530102 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.923574924 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.924484968 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.924499035 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.924549103 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.924556971 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.924593925 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.958905935 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.958920002 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.959028006 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:07.959036112 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:07.959144115 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004002094 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004048109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004080057 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004087925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004116058 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004131079 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004450083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004468918 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004508972 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004515886 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004542112 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004558086 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.004959106 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.004973888 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005023003 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005028009 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.005036116 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005059958 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.005357981 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005381107 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005413055 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.005419970 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005453110 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.005856991 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005882025 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005908966 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.005914927 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.005939960 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.017824888 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.017872095 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.017920017 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.017926931 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.017955065 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.018249989 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.018261909 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.018305063 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.018311024 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.018362045 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.044866085 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.044879913 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.044951916 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.044960022 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.044997931 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.101108074 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.101129055 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.101181984 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.101190090 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.101227999 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.101875067 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.101888895 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.101963043 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.101972103 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.102010012 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.102554083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.102567911 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.102623940 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.102629900 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.102669001 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.102961063 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.102974892 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.103025913 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.103032112 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.103068113 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.105869055 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.105882883 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.105937958 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.105942965 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.105979919 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.109148026 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.109163046 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.109244108 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.109251022 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.109313965 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.111952066 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.111990929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.112027884 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.112034082 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.112059116 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.112076998 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.145512104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.145529032 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.145714998 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.145723104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.145822048 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199002981 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199018955 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199069977 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199078083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199110985 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199127913 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199295044 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199309111 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199337959 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199345112 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199368954 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199384928 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199589014 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199609995 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199634075 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.199641943 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.199662924 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200018883 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200032949 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200062990 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200069904 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200098038 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200352907 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200366974 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200397015 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200403929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200428963 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200593948 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200607061 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.200648069 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.200655937 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201004982 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201019049 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201056004 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.201062918 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201085091 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.201276064 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201288939 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.201330900 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.201339006 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.257390976 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.285630941 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285650969 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285768986 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.285777092 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285819054 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.285860062 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285875082 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285912037 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.285917997 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.285942078 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.285957098 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286175966 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286187887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286232948 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286241055 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286283016 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286475897 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286488056 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286549091 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286554098 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286597013 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286815882 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286828995 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286889076 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.286895037 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.286931038 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287116051 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287127972 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287170887 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287175894 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287214994 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287471056 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287484884 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287530899 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287539005 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287575960 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287861109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287874937 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287918091 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287926912 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.287945986 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.287960052 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.309048891 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372270107 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372284889 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372417927 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372427940 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372437000 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372479916 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372509003 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372756004 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372767925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372813940 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372822046 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.372832060 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.372986078 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373006105 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373033047 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.373039007 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373049974 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.373351097 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373362064 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373390913 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.373398066 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373414040 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.373624086 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373640060 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373671055 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.373681068 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.373692989 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.374006987 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374017954 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374051094 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.374058008 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374068022 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.374417067 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374439001 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374458075 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.374464989 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.374480009 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.405039072 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.407845020 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:08.407867908 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.408222914 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.413642883 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.413805008 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:08.413861990 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.413937092 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:08.458841085 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.458857059 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.458915949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.458924055 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.458962917 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.458985090 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.458998919 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459029913 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459037066 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459048033 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459074020 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459347010 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.459386110 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459398985 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459428072 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459434986 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459454060 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459469080 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459793091 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459805965 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459841013 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459847927 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.459870100 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459878922 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.459992886 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460006952 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460047007 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460052967 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460089922 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460299969 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460313082 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460345984 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460352898 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460392952 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460469007 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460544109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460556984 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460588932 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460593939 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460613012 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460630894 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460865974 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460877895 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460908890 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460915089 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.460938931 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.460946083 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.545634031 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.545653105 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.545722961 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.545730114 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.545778036 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546225071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546238899 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546288967 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546297073 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546336889 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546644926 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546660900 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546699047 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546705008 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.546731949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546750069 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.546994925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547008991 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547058105 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547064066 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547103882 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547454119 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547477961 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547508001 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547513962 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547543049 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547559023 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547811985 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547825098 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547858953 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547866106 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.547894955 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.547910929 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.548268080 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548283100 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548322916 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.548331976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548368931 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.548614025 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548629045 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548671961 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.548677921 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.548716068 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.549218893 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637248993 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637264967 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637300014 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637307882 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637347937 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637526035 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637540102 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637572050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637578964 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637588024 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637609959 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637810946 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637825966 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637861967 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637868881 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.637901068 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.637916088 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638106108 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638123989 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638150930 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638155937 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638179064 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638190985 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638470888 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638484955 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638526917 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638535023 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638570070 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638835907 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638864994 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638897896 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638904095 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.638930082 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.638943911 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639085054 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639105082 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639127016 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639132023 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639158964 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639172077 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639367104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639380932 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639414072 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639420033 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.639436960 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.639456034 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.661885023 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.661941051 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.661994934 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:08.662374973 CET	50024	443	192.168.2.4	52.208.202.62
Dec 30, 2024 07:21:08.662405014 CET	443	50024	52.208.202.62	192.168.2.4
Dec 30, 2024 07:21:08.723953009 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.723983049 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724006891 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724013090 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724045992 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724061966 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724225044 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724240065 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724276066 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724282980 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724318981 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724526882 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724539995 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724575043 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724581957 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724618912 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724824905 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724857092 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724877119 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724881887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.724905014 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.724930048 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725150108 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725178957 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725189924 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725215912 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725220919 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725258112 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725362062 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725375891 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725409031 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725415945 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725426912 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725444078 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725698948 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725712061 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725773096 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.725781918 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.725819111 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.726078987 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.726093054 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.726162910 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.726169109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.726205111 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.810695887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810712099 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810760975 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.810769081 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810807943 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.810836077 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810848951 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810879946 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.810887098 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.810909986 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.810918093 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811100960 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811114073 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811148882 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811155081 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811188936 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811408997 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811438084 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811446905 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811454058 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811479092 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811500072 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811783075 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811803102 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811830044 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811835051 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.811856985 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.811871052 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812103987 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812134981 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812174082 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812181950 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812220097 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812390089 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812407017 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812432051 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812441111 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812453032 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812474966 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812572002 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812586069 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812613964 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812619925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.812647104 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.812653065 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897294044 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897319078 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897384882 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897393942 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897443056 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897528887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897552967 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897581100 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897587061 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897613049 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897625923 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897736073 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897753000 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897783041 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897789001 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.897811890 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.897825956 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898020983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898035049 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898080111 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898087025 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898119926 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898441076 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898454905 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898508072 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898514032 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898557901 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898827076 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898839951 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898890972 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898897886 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898942947 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.898988008 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.898999929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.899064064 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.899071932 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.899108887 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.899192095 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.899204016 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.899245977 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.899252892 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.899291039 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.983866930 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.983881950 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.983942032 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.983947992 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.983998060 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984000921 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984010935 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984034061 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984051943 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984059095 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984083891 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984092951 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984323978 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984339952 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984374046 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984379053 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984404087 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984411955 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984564066 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984575987 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984627962 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984633923 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984671116 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984869003 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984882116 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984929085 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.984935999 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.984980106 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.985251904 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985264063 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985316992 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.985323906 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985366106 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.985626936 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985641956 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985686064 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.985691071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985728979 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.985935926 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985948086 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.985996962 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:08.986004114 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:08.986047029 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070343971 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070357084 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070420027 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070430994 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070478916 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070498943 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070512056 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070553064 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070558071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070593119 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070832968 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070844889 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070887089 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.070893049 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.070929050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071134090 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071146965 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071182013 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071187973 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071213007 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071222067 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071517944 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071532011 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071584940 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071590900 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071628094 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071734905 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071748018 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071791887 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.071799994 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.071849108 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.072304010 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072318077 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072371006 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.072377920 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072412968 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.072462082 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072484970 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072509050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.072514057 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.072532892 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.072551012 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.156990051 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157002926 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157111883 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157119989 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157186985 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157211065 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157213926 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157232046 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157320976 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157463074 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157476902 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157568932 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157576084 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157613993 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157752991 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157766104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157808065 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.157814980 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.157851934 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158051968 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158065081 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158094883 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158099890 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158122063 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158134937 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158375025 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158387899 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158431053 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158438921 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158477068 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158735991 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158749104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158818960 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.158826113 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.158864021 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.159017086 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.159029961 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.159082890 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.159092903 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.159131050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.243693113 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.243714094 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.243843079 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.243864059 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.243872881 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.243882895 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.243927956 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.244184017 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244198084 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244249105 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.244256020 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244566917 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244589090 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244617939 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.244623899 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244652033 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.244813919 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244844913 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244864941 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.244872093 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.244895935 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.245090008 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245106936 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245135069 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.245141029 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245162964 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.245340109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245352983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245398998 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.245407104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245626926 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245646954 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245675087 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.245681047 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.245704889 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.288712025 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330288887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330305099 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330354929 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330363035 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330390930 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330399036 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330437899 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330456018 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330503941 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330511093 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330545902 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330734968 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330748081 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330796003 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.330802917 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.330833912 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331161976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331175089 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331224918 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331232071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331274986 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331429005 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331443071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331482887 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331490040 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331506968 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331532001 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331686974 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331700087 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331738949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331743956 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331782103 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.331959009 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.331974983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.332006931 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.332012892 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.332036018 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.332237005 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.332253933 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.332271099 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.332276106 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.332285881 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.332319975 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.416780949 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.416801929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.416892052 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.416899920 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417046070 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417056084 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417062998 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417082071 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417154074 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417390108 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417402983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417435884 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417442083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417458057 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417469025 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417819023 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417830944 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417874098 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417881012 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417913914 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.417982101 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.417994976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418035030 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418041945 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418068886 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418131113 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418143034 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418175936 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418183088 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418221951 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418539047 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418551922 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418591022 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418597937 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418637991 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418821096 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418834925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418870926 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.418876886 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.418914080 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503381968 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503396988 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503454924 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503463984 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503499985 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503680944 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503695011 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503736973 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503742933 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503778934 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503896952 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503909111 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503947973 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.503957033 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.503993034 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504425049 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504445076 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504479885 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504487038 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504498959 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504523993 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504645109 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504657984 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504688978 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504693985 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.504718065 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504729033 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.504993916 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505007029 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505054951 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.505063057 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505095959 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.505206108 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505218983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505283117 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.505290031 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505325079 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.505479097 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505492926 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505532980 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.505541086 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.505575895 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.590099096 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590234995 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.590379953 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590452909 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590466976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590475082 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.590481997 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590559959 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.590611935 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590625048 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.590703011 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.590709925 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591008902 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591028929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591058016 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591063976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591090918 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591109991 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591248035 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591260910 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591298103 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591305017 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591494083 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591509104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591542006 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591550112 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591569901 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591593027 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591733932 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591746092 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.591794014 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.591800928 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.592036009 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.592051983 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.592061996 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.592067003 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.592092991 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.592113018 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.676973104 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.676989079 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677072048 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677093029 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677114010 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677122116 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677241087 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677253008 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677275896 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677284002 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677386999 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677521944 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677535057 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677598000 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677606106 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677784920 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677798986 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677834034 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677840948 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677853107 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677854061 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677900076 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.677906990 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.677942038 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678199053 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678210974 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678255081 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678261042 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678283930 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678301096 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678426027 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678443909 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678476095 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678481102 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.678503990 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.678513050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.706963062 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.706976891 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.707129955 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.707138062 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.707232952 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.763520002 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763535976 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763602972 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.763608932 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763886929 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763909101 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763941050 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.763947964 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.763967037 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.763991117 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764113903 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764127970 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764168978 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764174938 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764204025 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764224052 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764249086 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764255047 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764280081 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764303923 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764513969 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764528036 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764568090 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764574051 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764590025 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764612913 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764779091 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764794111 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.764842033 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.764852047 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.765191078 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.765192986 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.765204906 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.765228033 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.765235901 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.765269041 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.765274048 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.765607119 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.793737888 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.793751001 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.793804884 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.793812990 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.793838024 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.793848991 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.849946022 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.849960089 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850013971 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850047112 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850054979 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850101948 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850208998 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850224018 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850271940 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850276947 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850514889 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850532055 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850562096 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850568056 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850594044 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850850105 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850862980 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.850915909 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.850923061 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851130009 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851146936 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851181030 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.851186991 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851212978 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.851512909 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851573944 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.851581097 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851769924 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851823092 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.851829052 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851840019 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851862907 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851891041 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.851896048 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.851922989 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.880322933 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.880341053 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.880465031 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.880471945 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.929297924 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.936623096 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.936640978 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.936702967 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.936711073 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.936759949 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.936873913 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.936889887 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.936939955 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.936945915 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937192917 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937211037 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937247992 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937253952 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937269926 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937298059 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937397957 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937412977 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937464952 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937472105 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937732935 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937755108 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937786102 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937792063 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937803984 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937823057 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937846899 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.937853098 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937896967 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:09.937938929 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.938545942 CET	50017	443	192.168.2.4	18.173.205.114
Dec 30, 2024 07:21:09.938555956 CET	443	50017	18.173.205.114	192.168.2.4
Dec 30, 2024 07:21:13.270798922 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:13.270857096 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:21:13.270900011 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:14.408399105 CET	49974	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:21:14.408427954 CET	443	49974	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:02.758889914 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:02.758927107 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:02.759047031 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:02.759260893 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:02.759275913 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:03.386101007 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:03.386533976 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:03.386578083 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:03.386914968 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:03.387223959 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:03.387298107 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:03.429591894 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:13.319931984 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:13.320003986 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:22:13.320091009 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:15.026139021 CET	50047	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:22:15.026211977 CET	443	50047	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:02.823602915 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:02.823649883 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:02.823776007 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:02.824517965 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:02.824531078 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:03.444210052 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:03.444848061 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:03.444871902 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:03.445185900 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:03.445837975 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:03.445894003 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:03.492160082 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:13.372941017 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:13.373008966 CET	443	50049	142.250.186.132	192.168.2.4
Dec 30, 2024 07:23:13.373079062 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:15.008160114 CET	50049	443	192.168.2.4	142.250.186.132
Dec 30, 2024 07:23:15.008191109 CET	443	50049	142.250.186.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 07:19:45.917973995 CET	56665	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:19:54.824261904 CET	138	138	192.168.2.4	192.168.2.255
Dec 30, 2024 07:20:58.218079090 CET	52131	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:20:58.218508005 CET	50590	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:20:58.226350069 CET	53	63854	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:58.258878946 CET	53	50590	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:58.400295019 CET	53	52131	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:58.407589912 CET	53	56199	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:59.383295059 CET	53	53861	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:59.716130018 CET	63516	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:20:59.716475964 CET	65376	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:20:59.747601986 CET	53	65376	1.1.1.1	192.168.2.4
Dec 30, 2024 07:20:59.747811079 CET	53	63516	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:02.701910973 CET	57704	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:02.701934099 CET	51868	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:02.708678961 CET	53	57704	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:02.708910942 CET	53	51868	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:03.137792110 CET	64943	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:03.137945890 CET	61839	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:03.138608932 CET	59177	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:03.138777971 CET	52487	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:03.145718098 CET	53	59177	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:03.153407097 CET	53	52487	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:03.157215118 CET	53	61839	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:03.164263010 CET	53	64943	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.260185957 CET	60867	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.260436058 CET	54189	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.267505884 CET	53	60867	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.277499914 CET	53	54189	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.435724974 CET	54738	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.436836958 CET	63521	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.454771042 CET	53	63521	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.526552916 CET	53	54738	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.674433947 CET	63561	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.674573898 CET	55524	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:04.681118965 CET	53	63561	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:04.681807995 CET	53	55524	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:06.520850897 CET	56517	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:06.520991087 CET	51929	53	192.168.2.4	1.1.1.1
Dec 30, 2024 07:21:06.527384043 CET	53	56517	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:06.527738094 CET	53	51929	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:10.609296083 CET	53	56656	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:16.374766111 CET	53	52029	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:35.344880104 CET	53	57518	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:57.784636021 CET	53	61794	1.1.1.1	192.168.2.4
Dec 30, 2024 07:21:57.990818977 CET	53	58171	1.1.1.1	192.168.2.4
Dec 30, 2024 07:22:28.526833057 CET	53	58076	1.1.1.1	192.168.2.4
Dec 30, 2024 07:23:15.015636921 CET	53	64726	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 30, 2024 07:21:03.153470993 CET	192.168.2.4	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable
Dec 30, 2024 07:21:04.277549982 CET	192.168.2.4	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 30, 2024 07:19:45.917973995 CET	192.168.2.4	1.1.1.1	0x4ced	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:58.218079090 CET	192.168.2.4	1.1.1.1	0x170e	Standard query (0)	password-change.phishwall.net	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:58.218508005 CET	192.168.2.4	1.1.1.1	0x205f	Standard query (0)	password-change.phishwall.net	65	IN (0x0001)	false
Dec 30, 2024 07:20:59.716130018 CET	192.168.2.4	1.1.1.1	0x47a5	Standard query (0)	secure.encryptedconnection.net	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:59.716475964 CET	192.168.2.4	1.1.1.1	0x7190	Standard query (0)	secure.encryptedconnection.net	65	IN (0x0001)	false
Dec 30, 2024 07:21:02.701910973 CET	192.168.2.4	1.1.1.1	0x45f9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:02.701934099 CET	192.168.2.4	1.1.1.1	0x2c81	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 30, 2024 07:21:03.137792110 CET	192.168.2.4	1.1.1.1	0x94a3	Standard query (0)	helpimg.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.137945890 CET	192.168.2.4	1.1.1.1	0xf84	Standard query (0)	helpimg.s3.amazonaws.com	65	IN (0x0001)	false
Dec 30, 2024 07:21:03.138608932 CET	192.168.2.4	1.1.1.1	0xe6bd	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.138777971 CET	192.168.2.4	1.1.1.1	0x6ec7	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Dec 30, 2024 07:21:04.260185957 CET	192.168.2.4	1.1.1.1	0x6469	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.260436058 CET	192.168.2.4	1.1.1.1	0x2698	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Dec 30, 2024 07:21:04.435724974 CET	192.168.2.4	1.1.1.1	0x6743	Standard query (0)	secure.encryptedconnection.net	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.436836958 CET	192.168.2.4	1.1.1.1	0x66a	Standard query (0)	secure.encryptedconnection.net	65	IN (0x0001)	false
Dec 30, 2024 07:21:04.674433947 CET	192.168.2.4	1.1.1.1	0x1817	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.674573898 CET	192.168.2.4	1.1.1.1	0xaf82	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 30, 2024 07:21:06.520850897 CET	192.168.2.4	1.1.1.1	0xcaad	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.520991087 CET	192.168.2.4	1.1.1.1	0x1ae0	Standard query (0)	unpkg.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 30, 2024 07:19:45.925993919 CET	1.1.1.1	192.168.2.4	0x4ced	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.26	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.18	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.36	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.19	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.27	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.21	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:19:46.552284002 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.38	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:58.258878946 CET	1.1.1.1	192.168.2.4	0x205f	No error (0)	password-change.phishwall.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:20:58.400295019 CET	1.1.1.1	192.168.2.4	0x170e	No error (0)	password-change.phishwall.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:20:58.400295019 CET	1.1.1.1	192.168.2.4	0x170e	No error (0)	landing.eu.knowbe4.com		52.208.202.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:58.400295019 CET	1.1.1.1	192.168.2.4	0x170e	No error (0)	landing.eu.knowbe4.com		54.220.82.154	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:59.747601986 CET	1.1.1.1	192.168.2.4	0x7190	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:20:59.747811079 CET	1.1.1.1	192.168.2.4	0x47a5	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:20:59.747811079 CET	1.1.1.1	192.168.2.4	0x47a5	No error (0)	landing.eu.knowbe4.com		52.208.202.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:20:59.747811079 CET	1.1.1.1	192.168.2.4	0x47a5	No error (0)	landing.eu.knowbe4.com		54.220.82.154	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:02.708678961 CET	1.1.1.1	192.168.2.4	0x45f9	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:02.708910942 CET	1.1.1.1	192.168.2.4	0x2c81	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 30, 2024 07:21:03.145718098 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.145718098 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.145718098 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.145718098 CET	1.1.1.1	192.168.2.4	0xe6bd	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.157215118 CET	1.1.1.1	192.168.2.4	0xf84	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:03.157215118 CET	1.1.1.1	192.168.2.4	0xf84	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.35.201	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.37.49	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.110	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.159.17	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.128.129	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.174	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.8.106	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:03.164263010 CET	1.1.1.1	192.168.2.4	0x94a3	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.152	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.267505884 CET	1.1.1.1	192.168.2.4	0x6469	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.267505884 CET	1.1.1.1	192.168.2.4	0x6469	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.267505884 CET	1.1.1.1	192.168.2.4	0x6469	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.267505884 CET	1.1.1.1	192.168.2.4	0x6469	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.454771042 CET	1.1.1.1	192.168.2.4	0x66a	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:04.526552916 CET	1.1.1.1	192.168.2.4	0x6743	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 07:21:04.526552916 CET	1.1.1.1	192.168.2.4	0x6743	No error (0)	landing.eu.knowbe4.com		52.208.202.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.526552916 CET	1.1.1.1	192.168.2.4	0x6743	No error (0)	landing.eu.knowbe4.com		54.220.82.154	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681118965 CET	1.1.1.1	192.168.2.4	0x1817	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681118965 CET	1.1.1.1	192.168.2.4	0x1817	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681118965 CET	1.1.1.1	192.168.2.4	0x1817	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681118965 CET	1.1.1.1	192.168.2.4	0x1817	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681118965 CET	1.1.1.1	192.168.2.4	0x1817	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:04.681807995 CET	1.1.1.1	192.168.2.4	0xaf82	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 30, 2024 07:21:06.527384043 CET	1.1.1.1	192.168.2.4	0xcaad	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.527384043 CET	1.1.1.1	192.168.2.4	0xcaad	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.527384043 CET	1.1.1.1	192.168.2.4	0xcaad	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.527384043 CET	1.1.1.1	192.168.2.4	0xcaad	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.527384043 CET	1.1.1.1	192.168.2.4	0xcaad	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 30, 2024 07:21:06.527738094 CET	1.1.1.1	192.168.2.4	0x1ae0	No error (0)	unpkg.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

password-change.phishwall.net

https:

secure.encryptedconnection.net

helpimg.s3.amazonaws.com

training.knowbe4.com

unpkg.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49940	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:20:59 UTC	1015	OUT	GET /XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780 HTTP/1.1 Host: password-change.phishwall.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:20:59 UTC	574	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:20:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 489 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"273b7c69e6cba02b7c3c6ffbbd6977a3" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 323ceb33-13e9-41ce-910c-4a1e96e08704 X-Runtime: 0.094335 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-30 06:20:59 UTC	489	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 65 6e 63 72 79 70 74 65 64 63 6f 6e 6e 65 63 74 69 6f 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 63 33 39 35 35 62 31 63 34 38 61 2f 58 55 45 46 47 51 55 68 56 54 58 6c 72 54 6b 70 30 56 47 31 46 53 55 68 73 62 46 4a 4d 54 31 56 6e 51 55 4a 69 53 57 35 72 61 33 70 71 4d 30 6c 58 4f 57 4a 4b 53 6c 5a 6f 56 45 31 58 56 31 5a 69 5a 6b 49 79 65 6b 31 68 61 7a 4e 4a 5a 47 64 55 63 6b 52 43 5a 33 46 36 5a 6b 6f 32 62 6b 77 35 56 57 34 35 62 44 4d 72 51 32 39 74 62 30 78 78 62 7a 49 35 63 55 35 49 57 57 39 70 64 55 56 4f 4e 46 46 68 54 46 46 6c 4f 45 35 75 55 44 56 Data Ascii: <html> <head> <script>window.location.href = 'https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49953	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:00 UTC	1398	OUT	GET /pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:03 UTC	833	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 75074 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"69feb31d20f8340079383eb02bd89606" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 7a8cb12a-fc20-43dc-b732-ec78c12a069c X-Runtime: 2.070272 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-30 06:21:03 UTC	15551	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2024-12-30 06:21:03 UTC	16384	IN	Data Raw: 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 68 65 5f 69 6c 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 48 65 62 72 65 77 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d7 a2 d7 91 d7 a8 d7 99 d7 aa 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 61 72 5f 6d 6f 64 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 41 72 61 62 69 63 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 Data Ascii: },{id: 'he_il',name_english: 'Hebrew',name_localized: '',rtl: true,},{id: 'ar_mod',name_english: 'Arabic',name_localized: '',rtl: true,},{
2024-12-30 06:21:03 UTC	56	IN	Data Raw: 65 33 3a 0a 09 09 09 09 09 09 09 27 56 c3 a9 72 69 66 69 65 7a 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 Data Ascii: e3:'Vrifiez les courriels suspects auprs de
2024-12-30 06:21:03 UTC	16384	IN	Data Raw: 6c 65 75 72 20 65 78 70 c3 a9 64 69 74 65 75 72 20 c3 a0 20 6c e2 80 99 61 69 64 65 20 64 e2 80 99 75 6e 20 61 75 74 72 65 20 6d 6f 79 65 6e 20 64 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 27 2c 0a 09 09 09 09 09 09 72 65 70 6f 72 74 3a 0a 09 09 09 09 09 09 09 27 53 6f 75 76 65 6e 65 7a 2d 76 6f 75 73 20 3a 20 53 69 67 6e 61 6c 65 7a 20 74 6f 75 6a 6f 75 72 73 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 76 6f 74 72 65 20 73 75 70 65 72 76 69 73 65 75 72 20 6f 75 20 64 65 20 76 6f 74 72 65 20 c3 a9 71 75 69 70 65 20 64 65 73 20 54 49 2e 20 4c 65 73 20 63 72 69 6d 69 6e 65 6c 73 20 64 65 20 6c e2 80 99 49 6e 74 65 72 6e 65 74 20 74 65 6e 74 65 72 6f 6e 74 20 64 65 20 76 6f 75 73 20 65 73 63 Data Ascii: leur expditeur laide dun autre moyen de communication.',report:'Souvenez-vous : Signalez toujours les courriels suspects auprs de votre superviseur ou de votre quipe des TI. Les criminels de lInternet tenteront de vous esc
2024-12-30 06:21:03 UTC	16384	IN	Data Raw: 65 72 61 74 20 6e c3 a4 74 66 69 73 6b 65 74 65 73 74 21 27 2c 0a 09 09 09 09 09 09 72 65 6d 65 6d 62 65 72 3a 0a 09 09 09 09 09 09 09 27 4b 6f 6d 20 69 68 c3 a5 67 20 64 65 73 73 61 20 74 72 65 20 72 65 67 6c 65 72 20 66 c3 b6 72 20 61 74 74 20 6e 61 76 69 67 65 72 61 20 73 c3 a4 6b 65 72 74 20 70 c3 a5 20 6e c3 a4 74 65 74 3a 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 31 3a 20 27 53 74 61 6e 6e 61 20 75 70 70 2c 20 74 69 74 74 61 20 6f 63 68 20 74 c3 a4 6e 6b 20 65 66 74 65 72 20 69 6e 6e 61 6e 20 64 75 20 6b 6c 69 63 6b 61 72 21 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 32 3a 0a 09 09 09 09 09 09 09 27 54 69 74 74 61 20 65 66 74 65 72 20 76 61 72 6e 69 6e 67 73 73 69 67 6e 61 6c 65 72 20 73 6f 6d 20 69 6e 64 69 6b 65 72 61 72 20 61 74 74 20 65 6e 20 6e c3 a4 Data Ascii: erat ntfisketest!',remember:'Kom ihg dessa tre regler fr att navigera skert p ntet:',rule1: 'Stanna upp, titta och tnk efter innan du klickar!',rule2:'Titta efter varningssignaler som indikerar att en n
2024-12-30 06:21:03 UTC	10315	IN	Data Raw: b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 b8 b3 e0 b8 a5 e0 b8 ad e0 b8 87 21 27 2c 0a 09 09 09 09 09 09 6c 61 6e 67 75 61 67 65 3a 20 27 e0 b9 80 e0 b8 a5 e0 b8 b7 e0 b8 ad e0 b8 81 e0 b8 a0 e0 b8 b2 e0 b8 a9 e0 b8 b2 e0 b8 88 e0 b8 b2 e0 b8 81 e0 b9 80 e0 b8 a1 e0 b8 99 e0 b8 b9 e0 b8 94 e0 b8 a3 e0 b9 87 e0 b8 ad e0 b8 9b e0 b8 94 e0 b8 b2 e0 b8 a7 e0 b8 99 e0 b9 8c 27 2c 0a 09 09 09 09 09 09 6f 6f 70 73 3a 20 27 e0 b8 82 e0 b8 ad e0 b8 ad e0 b8 a0 e0 b8 b1 e0 b8 a2 21 27 2c 0a 09 09 09 09 09 09 63 6c 69 63 6b 65 64 3a 20 27 e0 b8 84 e0 b8 b8 e0 b8 93 e0 b8 84 e0 b8 a5 e0 b8 b4 e0 b8 81 e0 b8 9a e0 b8 97 e0 b8 97 e0 b8 94 e0 b8 aa e0 b8 ad e0 b8 9a e0 b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 Data Ascii: !',language: '',oops: '!',clicked: '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49952	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	999	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:03 UTC	263	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:03 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-30 06:21:03 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49980	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	978	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:04 UTC	279	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:03 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-30 06:21:04 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-30 06:21:04 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49984	16.182.35.201	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	928	OUT	GET /landing_pages/oops/styles.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:03 UTC	502	IN	HTTP/1.1 200 OK x-amz-id-2: 0IFfr3rdfXoYjZGpYQkYKf/aj7zA8AGN/AQbQoUXpxSbI9xhvOuyZZL/rsJoUIhTKd95RVMmQjs= x-amz-request-id: E7CFN0QH45DQ9TP6 Date: Mon, 30 Dec 2024 06:21:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 05 Dec 2024 22:09:56 GMT ETag: "b13b4f098d80ac49dcc6bed4e459d560" x-amz-server-side-encryption: AES256 x-amz-version-id: euN8e1egT0HP5Qpqr.UG1XrfZxMZiG5f Accept-Ranges: bytes Content-Type: text/css Content-Length: 5649 Server: AmazonS3 Connection: close
2024-12-30 06:21:03 UTC	5649	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 66 66 66 66 66 66 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 32 30 30 3a 20 23 66 35 66 35 66 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 33 30 30 3a 20 23 64 35 64 35 64 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 34 30 30 3a 20 23 61 62 61 62 61 62 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 3a 20 23 37 30 37 30 37 30 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 36 30 30 3a 20 23 32 63 32 63 32 63 3b 0a 0a 09 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 73 Data Ascii: :root {--clr-neutral-100: #ffffff;--clr-neutral-200: #f5f5f5;--clr-neutral-300: #d5d5d5;--clr-neutral-400: #ababab;--clr-neutral-500: #707070;--clr-neutral-600: #2c2c2c;/* Padding */--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);--padding-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49981	18.173.205.50	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	967	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:04 UTC	14594	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Last-Modified: Thu, 23 May 2024 17:09:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:05 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e23d0cd26e88be416569e15d7299b25c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 6gnp4Yesl06M4rcGHJHPTGWmnPqeyythnMTXdGkooFAWhl0lN1ed-Q==
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c 0a Data Ascii: \$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 Data Ascii: orAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbugg
2024-12-30 06:21:04 UTC	11610	IN	Data Raw: 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 Data Ascii: = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {ou
2024-12-30 06:21:04 UTC	1810	IN	Data Raw: 20 32 20 5d 20 3d 20 6d 61 74 63 68 65 72 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 29 20 29 20 7b 0a 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 4d 61 74 63 68 65 72 28 20 6d 61 74 63 68 65 72 73 20 29 20 7b 0a 09 72 65 74 75 72 6e 20 6d 61 74 63 68 65 72 73 2e 6c 65 6e 67 74 68 20 3e 20 31 20 3f 0a 09 09 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 76 61 72 20 69 20 3d 20 6d 61 74 63 68 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 77 68 69 6c 65 20 28 20 69 2d 2d 20 29 20 7b Data Ascii: 2 ] = matcher( elem, context, xml )) ) {return true;}}}}}};}function elementMatcher( matchers ) {return matchers.length > 1 ?function( elem, context, xml ) {var i = matchers.length;while ( i-- ) {
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 73 65 65 64 2c 20 6f 72 20 6e 6f 6e 2d 73 65 65 64 20 70 6f 73 74 46 69 6c 74 65 72 20 6f 72 20 70 72 65 65 78 69 73 74 69 6e 67 20 72 65 73 75 6c 74 73 2c 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 20 7c 7c 20 28 20 73 65 65 64 20 3f 20 70 72 65 46 69 6c 74 65 72 20 3a 20 70 72 65 65 78 69 73 74 69 6e 67 20 7c 7c 20 70 6f 73 74 46 69 6c 74 65 72 20 29 20 3f 0a 0a 09 09 09 09 09 2f 2f 20 2e 2e 2e 69 6e 74 65 72 6d 65 64 69 61 74 65 20 70 72 6f 63 65 73 73 69 6e 67 20 69 73 20 6e 65 63 65 73 73 61 72 79 0a 09 09 09 09 09 5b 5d 20 3a 0a 0a 09 09 09 09 09 2f 2f 20 2e 2e 2e 6f 74 68 65 72 77 69 73 65 20 75 73 65 20 72 65 73 75 6c 74 73 20 64 69 72 65 63 74 6c 79 0a 09 09 09 09 09 72 65 73 75 6c 74 73 20 3a 0a 09 09 09 09 6d 61 74 63 68 65 72 49 6e 3b 0a 0a Data Ascii: seed, or non-seed postFilter or preexisting results,postFinder \|\| ( seed ? preFilter : preexisting \|\| postFilter ) ?// ...intermediate processing is necessary[] :// ...otherwise use results directlyresults :matcherIn;
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 22 20 26 26 0a 09 09 09 09 73 65 6c 65 63 74 6f 72 2e 63 68 61 72 41 74 28 20 73 65 6c 65 63 74 6f 72 2e 6c 65 6e 67 74 68 20 2d 20 31 20 29 20 3d 3d 3d 20 22 3e 22 20 26 26 0a 09 09 09 09 73 65 6c 65 63 74 6f 72 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 20 29 20 7b 0a 0a 09 09 09 09 2f 2f 20 41 73 73 75 6d 65 20 74 68 61 74 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 3c 3e 20 61 72 65 20 48 54 4d 4c 20 61 6e 64 20 73 6b 69 70 20 74 68 65 20 72 65 67 65 78 20 63 68 65 63 6b 0a 09 09 09 09 6d 61 74 63 68 20 3d 20 5b 20 6e 75 6c 6c 2c 20 73 65 6c 65 63 74 6f 72 2c 20 6e 75 6c 6c 20 5d 3b 0a 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 6d 61 74 63 68 20 3d 20 72 71 75 69 63 6b 45 78 70 72 2e 65 78 65 63 Data Ascii: " &&selector.charAt( selector.length - 1 ) === ">" &&selector.length >= 3 ) {// Assume that strings that start and end with <> are HTML and skip the regex checkmatch = [ null, selector, null ];} else {match = rquickExpr.exec
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 20 69 66 20 77 65 27 72 65 20 6e 6f 74 20 77 61 69 74 69 6e 67 20 6f 6e 20 61 6e 79 74 68 69 6e 67 2c 20 72 65 73 6f 6c 76 65 20 74 68 65 20 6d 61 73 74 65 72 0a 09 09 69 66 20 28 20 21 72 65 6d 61 69 6e 69 6e 67 20 29 20 7b 0a 09 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 56 61 6c 75 65 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 64 65 66 65 72 72 65 64 2e 70 72 6f 6d 69 73 65 28 29 3b 0a 09 7d 0a 7d 20 29 3b 0a 0a 0a 2f 2f 20 54 68 65 20 64 65 66 65 72 72 65 64 20 75 73 65 64 20 6f 6e 20 44 4f 4d 20 72 65 61 64 79 0a 76 61 72 20 72 65 61 64 79 4c 69 73 74 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 72 65 Data Ascii: }}// if we're not waiting on anything, resolve the masterif ( !remaining ) {deferred.resolveWith( resolveContexts, resolveValues );}return deferred.promise();}} );// The deferred used on DOM readyvar readyList;jQuery.fn.re
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 71 75 65 75 65 20 3d 20 6a 51 75 65 72 79 2e 71 75 65 75 65 28 20 74 68 69 73 2c 20 74 79 70 65 2c 20 64 61 74 61 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 65 6e 73 75 72 65 20 61 20 68 6f 6f 6b 73 20 66 6f 72 20 74 68 69 73 20 71 75 65 75 65 0a 09 09 09 09 6a 51 75 65 72 79 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 20 74 68 69 73 2c 20 74 79 70 65 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 74 79 70 65 20 3d 3d 3d 20 22 66 78 22 20 26 26 20 71 75 65 75 65 5b 20 30 20 5d 20 21 3d 3d 20 22 69 6e 70 72 6f 67 72 65 73 73 22 20 29 20 7b 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 64 65 71 75 65 75 65 28 20 74 68 69 73 2c 20 74 79 70 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 29 3b 0a 09 7d 2c Data Ascii: ach( function() {var queue = jQuery.queue( this, type, data );// ensure a hooks for this queuejQuery._queueHooks( this, type );if ( type === "fx" && queue[ 0 ] !== "inprogress" ) {jQuery.dequeue( this, type );}} );},
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 20 6e 6f 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 75 62 6c 69 63 20 69 6e 74 65 72 66 61 63 65 2e 0a 20 2a 20 50 72 6f 70 73 20 74 6f 20 44 65 61 6e 20 45 64 77 61 72 64 73 27 20 61 64 64 45 76 65 6e 74 20 6c 69 62 72 61 72 79 20 66 6f 72 20 6d 61 6e 79 20 6f 66 20 74 68 65 20 69 64 65 61 73 2e 0a 20 2a 2f 0a 6a 51 75 65 72 79 2e 65 76 65 6e 74 20 3d 20 7b 0a 0a 09 67 6c 6f 62 61 6c 3a 20 7b 7d 2c 0a 0a 09 61 64 64 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 74 79 70 65 73 2c 20 68 61 6e 64 6c 65 72 2c 20 64 61 74 61 2c 20 73 65 6c 65 63 74 6f 72 20 29 20 7b 0a 09 09 76 61 72 20 74 6d 70 2c 20 65 76 65 6e 74 73 2c 20 74 2c 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2c 0a 09 09 09 73 70 65 63 69 61 6c 2c 20 65 76 65 6e 74 48 61 6e 64 6c 65 2c 20 68 Data Ascii: not part of the public interface. * Props to Dean Edwards' addEvent library for many of the ideas. */jQuery.event = {global: {},add: function( elem, types, handler, data, selector ) {var tmp, events, t, handleObjIn,special, eventHandle, h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49982	18.173.205.50	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	920	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:04 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 19 Dec 2024 17:48:28 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FyPJp3w4jkxkJyEC2B08wkOZntFsxSPq Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:04 GMT ETag: "d5e3158e82340391e333de30349bb337" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 ed5042a23d5905bfac08effe99f4b1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: jzBqzp5KahSLm4m6B7zo0aYmiwc1mLVidrokyYsd72vkIrzxXbR9Dg== Age: 9
2024-12-30 06:21:04 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49983	18.173.205.50	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:03 UTC	965	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:04 UTC	14592	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Last-Modified: Thu, 23 May 2024 17:10:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:05 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4966f878e5166e8661305465727dd124.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: alLI1WOUK-RL5kzmOXN7adTmqpSsPntz4DIkC-sqFbdXCiST_XhJug==
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 65 64 44 42 0a 20 20 20 20 2f 2f 20 46 6f 72 20 73 70 65 65 64 2c 20 77 65 20 64 6f 6e 27 74 20 74 65 73 74 20 74 68 65 20 6c 65 67 61 63 79 20 28 61 6e 64 20 62 65 74 61 2d 6f 6e 6c 79 29 20 69 6e 64 65 78 65 64 44 42 0a 20 20 20 20 74 65 73 74 73 5b 27 69 6e 64 65 78 65 64 44 42 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 74 65 73 74 50 72 6f 70 73 41 6c 6c 28 22 69 6e 64 65 78 65 64 44 42 22 2c 20 77 69 6e 64 6f 77 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 59 55 49 20 74 6f 20 66 69 6c 74 65 72 20 6f 75 74 20 49 45 38 20 43 6f 6d 70 61 74 20 4d 6f 64 65 0a 20 20 20 20 2f 2f 20 20 20 77 68 69 63 68 20 66 61 6c 73 65 Data Ascii: edDB // For speed, we don't test the legacy (and beta-only) indexedDB tests['indexedDB'] = function() { return !!testPropsAll("indexedDB", window); }; // documentMode logic from YUI to filter out IE8 Compat Mode // which false
2024-12-30 06:21:04 UTC	16384	IN	Data Raw: 73 6f 20 69 74 20 64 6f 65 73 6e 27 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 65 76 65 6e 20 6d 61 6b 65 20 69 74 20 68 65 72 65 2e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 2f 5e 28 75 72 6c 7c 65 6d 61 69 6c 29 24 2f 2e 74 65 73 74 28 69 6e 70 75 74 45 6c 65 6d 54 79 70 65 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 52 65 61 6c 20 75 72 6c 20 61 6e 64 20 65 6d 61 69 6c 20 73 75 70 70 6f 72 74 20 63 6f 6d 65 73 20 77 69 74 68 20 70 72 65 62 61 6b 65 64 20 76 61 6c 69 64 61 74 69 6f 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 6f 6c 20 3d 20 69 6e 70 75 74 45 6c 65 6d 2e Data Ascii: so it doesn't // even make it here. } else if ( /^(url\|email)$/.test(inputElemType) ) { // Real url and email support comes with prebaked validation. bool = inputElem.
2024-12-30 06:21:04 UTC	2212	IN	Data Raw: 61 6d 65 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 63 61 6d 65 6c 43 61 73 65 20 76 61 72 69 61 6e 74 2e 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 41 6c 6c 50 72 6f 70 73 28 27 62 6f 78 53 69 7a 69 6e 67 27 29 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 41 6c 6c 50 72 6f 70 73 20 20 3d 20 74 65 73 74 50 72 6f 70 73 41 6c 6c 3b 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 61 6c 6c 70 72 6f 70 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 73 74 79 6c 65 73 2a 2f 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 53 74 79 6c 65 73 28 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 61 64 64 20 63 75 73 74 6f 6d 20 73 74 79 6c 65 73 20 74 6f 20 74 68 65 20 64 6f 63 75 6d Data Ascii: ames must be provided in the camelCase variant. // Modernizr.testAllProps('boxSizing') Modernizr.testAllProps = testPropsAll; />>testallprops/ />>teststyles/ // Modernizr.testStyles() allows you to add custom styles to the docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49990	18.173.205.114	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:04 UTC	383	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:05 UTC	14589	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 19 Dec 2024 17:48:28 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FyPJp3w4jkxkJyEC2B08wkOZntFsxSPq Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:04 GMT ETag: "d5e3158e82340391e333de30349bb337" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e787a68a5271d06ea7b7e56fa6886dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: _G_66kpwPs-SIvbj8Jp-4dPnVg-tmJQ_YUjSeyM8ouVYdJuEHYNHcg== Age: 10
2024-12-30 06:21:05 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49998	104.17.245.203	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:05 UTC	880	OUT	GET /petite-vue HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:05 UTC	524	IN	HTTP/1.1 302 Found Date: Mon, 30 Dec 2024 06:21:05 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /petite-vue@0.4.1 vary: Accept via: 1.1 fly.io fly-request-id: 01JGB3DECKTP636FYDWKD3PHD4-lga CF-Cache-Status: HIT Age: 192 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f9fed7b8bfe186d-EWR
2024-12-30 06:21:05 UTC	45	IN	Data Raw: 32 37 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 0d 0a Data Ascii: 27Found. Redirecting to /petite-vue@0.4.1
2024-12-30 06:21:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49996	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:05 UTC	440	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:05 UTC	279	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:05 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-30 06:21:05 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-30 06:21:05 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49997	18.173.205.114	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:05 UTC	428	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:05 UTC	14593	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Last-Modified: Thu, 23 May 2024 17:10:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:05 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 044b6ab929e12b48b2113c346ddcec30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: P1iUBLLFryT8MHDJKY0Pne2iI8x5NiBhNQBexk5Ar1W3y0b4yOGNJQ== Age: 1
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 65 64 44 42 0a 20 20 20 20 2f 2f 20 46 6f 72 20 73 70 65 65 64 2c 20 77 65 20 64 6f 6e 27 74 20 74 65 73 74 20 74 68 65 20 6c 65 67 61 63 79 20 28 61 6e 64 20 62 65 74 61 2d 6f 6e 6c 79 29 20 69 6e 64 65 78 65 64 44 42 0a 20 20 20 20 74 65 73 74 73 5b 27 69 6e 64 65 78 65 64 44 42 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 74 65 73 74 50 72 6f 70 73 41 6c 6c 28 22 69 6e 64 65 78 65 64 44 42 22 2c 20 77 69 6e 64 6f 77 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 59 55 49 20 74 6f 20 66 69 6c 74 65 72 20 6f 75 74 20 49 45 38 20 43 6f 6d 70 61 74 20 4d 6f 64 65 0a 20 20 20 20 2f 2f 20 20 20 77 68 69 63 68 20 66 61 6c 73 65 Data Ascii: edDB // For speed, we don't test the legacy (and beta-only) indexedDB tests['indexedDB'] = function() { return !!testPropsAll("indexedDB", window); }; // documentMode logic from YUI to filter out IE8 Compat Mode // which false
2024-12-30 06:21:05 UTC	16384	IN	Data Raw: 73 6f 20 69 74 20 64 6f 65 73 6e 27 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 65 76 65 6e 20 6d 61 6b 65 20 69 74 20 68 65 72 65 2e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 2f 5e 28 75 72 6c 7c 65 6d 61 69 6c 29 24 2f 2e 74 65 73 74 28 69 6e 70 75 74 45 6c 65 6d 54 79 70 65 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 52 65 61 6c 20 75 72 6c 20 61 6e 64 20 65 6d 61 69 6c 20 73 75 70 70 6f 72 74 20 63 6f 6d 65 73 20 77 69 74 68 20 70 72 65 62 61 6b 65 64 20 76 61 6c 69 64 61 74 69 6f 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 6f 6c 20 3d 20 69 6e 70 75 74 45 6c 65 6d 2e Data Ascii: so it doesn't // even make it here. } else if ( /^(url\|email)$/.test(inputElemType) ) { // Real url and email support comes with prebaked validation. bool = inputElem.
2024-12-30 06:21:05 UTC	2212	IN	Data Raw: 61 6d 65 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 63 61 6d 65 6c 43 61 73 65 20 76 61 72 69 61 6e 74 2e 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 41 6c 6c 50 72 6f 70 73 28 27 62 6f 78 53 69 7a 69 6e 67 27 29 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 41 6c 6c 50 72 6f 70 73 20 20 3d 20 74 65 73 74 50 72 6f 70 73 41 6c 6c 3b 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 61 6c 6c 70 72 6f 70 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 73 74 79 6c 65 73 2a 2f 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 53 74 79 6c 65 73 28 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 61 64 64 20 63 75 73 74 6f 6d 20 73 74 79 6c 65 73 20 74 6f 20 74 68 65 20 64 6f 63 75 6d Data Ascii: ames must be provided in the camelCase variant. // Modernizr.testAllProps('boxSizing') Modernizr.testAllProps = testPropsAll; />>testallprops/ />>teststyles/ // Modernizr.testStyles() allows you to add custom styles to the docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50004	104.17.245.203	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:05 UTC	886	OUT	GET /petite-vue@0.4.1 HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:05 UTC	544	IN	HTTP/1.1 302 Found Date: Mon, 30 Dec 2024 06:21:05 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 location: /petite-vue@0.4.1/dist/petite-vue.iife.js vary: Accept via: 1.1 fly.io fly-request-id: 01JBPBV1J08R1Z3M7YCBKXECQG-lga CF-Cache-Status: HIT Age: 4990969 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f9fed7f2c0142d1-EWR
2024-12-30 06:21:05 UTC	69	IN	Data Raw: 33 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 2f 64 69 73 74 2f 70 65 74 69 74 65 2d 76 75 65 2e 69 69 66 65 2e 6a 73 0d 0a Data Ascii: 3fFound. Redirecting to /petite-vue@0.4.1/dist/petite-vue.iife.js
2024-12-30 06:21:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50007	104.17.245.203	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:06 UTC	910	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:06 UTC	575	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 526781 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f9fed82dff90f98-EWR
2024-12-30 06:21:06 UTC	794	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: me();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retur
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b 6a Data Ascii: udes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];j
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c 5f Data Ascii: (e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,_
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 65 Data Ascii: r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(e
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 6c Data Ascii: n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");el
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d 65 Data Ascii: e.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextme
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 Data Ascii: .type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{cons
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 72 Data Ascii: [\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].tr
2024-12-30 06:21:06 UTC	1369	IN	Data Raw: 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 29 Data Ascii: !==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50011	104.17.245.203	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:06 UTC	373	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:07 UTC	575	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 526782 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f9fed86fb327cf3-EWR
2024-12-30 06:21:07 UTC	794	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: me();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retur
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b 6a Data Ascii: udes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];j
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c 5f Data Ascii: (e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,_
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 65 Data Ascii: r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(e
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 6c Data Ascii: n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");el
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d 65 Data Ascii: e.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextme
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 Data Ascii: .type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{cons
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 72 Data Ascii: [\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].tr
2024-12-30 06:21:07 UTC	1369	IN	Data Raw: 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 29 Data Ascii: !==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50017	18.173.205.114	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:07 UTC	430	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:07 UTC	14595	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Last-Modified: Thu, 23 May 2024 17:09:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Mon, 30 Dec 2024 06:21:05 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2148953aab7910c366395376a0db1450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 8pve3xZFVDuxL-NL1_25394v5toRF-T1OI7attotwWIC2qm0MzlMPg== Age: 3
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c 0a Data Ascii: \$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 Data Ascii: orAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbugg
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 Data Ascii: = 0) \|\| start.pop()) ) {if ( ( ofType ?node.nodeName.toLowerCase() === name :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {ou
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e 67 20 61 20 70 6f 73 69 74 69 6f 6e 61 6c 20 6d 61 74 63 68 65 72 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 65 72 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 2f 2f 20 46 69 6e 64 20 74 68 65 20 6e 65 78 74 20 72 65 6c 61 74 69 76 65 20 6f 70 65 72 61 74 6f 72 20 28 69 66 20 61 6e 79 29 20 66 6f 72 20 70 72 6f 70 65 72 20 68 61 6e 64 6c 69 6e 67 0a 09 09 09 09 6a 20 3d 20 2b 2b 69 3b 0a 09 09 09 09 66 6f 72 20 28 20 3b 20 6a 20 3c 20 6c 65 6e 3b 20 6a 2b 2b 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 6a 5d 2e 74 79 70 65 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 Data Ascii: // Return special upon seeing a positional matcherif ( matcher[ expando ] ) {// Find the next relative operator (if any) for proper handlingj = ++i;for ( ; j < len; j++ ) {if ( Expr.relative[ tokens[j].type ] ) {break;
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 72 6f 64 75 63 65 20 61 20 75 6e 69 71 75 65 20 73 65 74 20 77 68 65 6e 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 61 20 75 6e 69 71 75 65 20 73 65 74 0a 09 67 75 61 72 61 6e 74 65 65 64 55 6e 69 71 75 65 20 3d 20 7b 0a 09 09 63 68 69 6c 64 72 65 6e 3a 20 74 72 75 65 2c 0a 09 09 63 6f 6e 74 65 6e 74 73 3a 20 74 72 75 65 2c 0a 09 09 6e 65 78 74 3a 20 74 72 75 65 2c 0a 09 09 70 72 65 76 3a 20 74 72 75 65 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 20 7b 0a 09 68 61 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 7b 0a 09 09 76 61 72 20 69 2c 0a 09 09 09 74 61 72 67 65 74 73 20 3d 20 6a 51 75 65 72 79 28 20 74 61 72 67 65 Data Ascii: /,// methods guaranteed to produce a unique set when starting from a unique setguaranteedUnique = {children: true,contents: true,next: true,prev: true};jQuery.fn.extend( {has: function( target ) {var i,targets = jQuery( targe
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 65 20 61 6c 73 6f 20 66 6f 72 20 69 66 72 61 6d 65 73 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 41 20 66 61 6c 6c 62 61 63 6b 20 74 6f 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 2c 20 74 68 61 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 77 6f 72 6b 0a 09 09 09 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 6c 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 49 45 20 61 6e 64 20 6e 6f 74 20 61 20 66 72 61 6d 65 0a 09 09 09 2f 2f 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 74 68 65 20 64 6f 63 75 6d Data Ascii: e also for iframesdocument.attachEvent( "onreadystatechange", completed );// A fallback to window.onload, that will always workwindow.attachEvent( "onload", completed );// If IE and not a frame// continually check to see if the docum
2024-12-30 06:21:07 UTC	10034	IN	Data Raw: 20 74 77 65 65 6e 20 29 20 7b 0a 09 76 61 72 20 61 64 6a 75 73 74 65 64 2c 0a 09 09 73 63 61 6c 65 20 3d 20 31 2c 0a 09 09 6d 61 78 49 74 65 72 61 74 69 6f 6e 73 20 3d 20 32 30 2c 0a 09 09 63 75 72 72 65 6e 74 56 61 6c 75 65 20 3d 20 74 77 65 65 6e 20 3f 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 74 77 65 65 6e 2e 63 75 72 28 29 3b 20 7d 20 3a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 63 73 73 28 20 65 6c 65 6d 2c 20 70 72 6f 70 2c 20 22 22 20 29 3b 20 7d 2c 0a 09 09 69 6e 69 74 69 61 6c 20 3d 20 63 75 72 72 65 6e 74 56 61 6c 75 65 28 29 2c 0a 09 09 75 6e 69 74 20 3d 20 76 61 6c 75 65 50 61 72 74 73 20 26 26 20 76 61 6c 75 65 50 61 72 74 73 5b 20 33 20 5d 20 7c 7c 20 28 20 6a Data Ascii: tween ) {var adjusted,scale = 1,maxIterations = 20,currentValue = tween ?function() { return tween.cur(); } :function() { return jQuery.css( elem, prop, "" ); },initial = currentValue(),unit = valueParts && valueParts[ 3 ] \|\| ( j
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 52 65 6d 65 6d 62 65 72 20 74 68 65 20 74 6f 70 2d 6c 65 76 65 6c 20 63 6f 6e 74 61 69 6e 65 72 20 66 6f 72 20 70 72 6f 70 65 72 20 63 6c 65 61 6e 75 70 0a 09 09 09 09 74 6d 70 20 3d 20 73 61 66 65 2e 6c 61 73 74 43 68 69 6c 64 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 46 69 78 20 23 31 31 33 35 36 3a 20 43 6c 65 61 72 20 65 6c 65 6d 65 6e 74 73 20 66 72 6f 6d 20 66 72 61 67 6d 65 6e 74 0a 09 69 66 20 28 20 74 6d 70 20 29 20 7b 0a 09 09 73 61 66 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 74 6d 70 20 29 3b 0a 09 7d 0a 0a 09 2f 2f 20 52 65 73 65 74 20 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 20 66 6f 72 20 61 6e 79 20 72 61 64 69 6f 73 20 61 6e 64 20 63 68 65 63 6b 62 6f 78 65 73 0a 09 2f 2f 20 61 62 6f 75 74 20 74 6f 20 62 65 20 61 70 70 Data Ascii: Remember the top-level container for proper cleanuptmp = safe.lastChild;}}}// Fix #11356: Clear elements from fragmentif ( tmp ) {safe.removeChild( tmp );}// Reset defaultChecked for any radios and checkboxes// about to be app
2024-12-30 06:21:07 UTC	16384	IN	Data Raw: 73 68 69 6e 74 20 65 71 65 71 65 71 3a 20 74 72 75 65 20 2a 2f 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 63 68 65 63 6b 20 6e 6f 6e 2d 65 6c 65 6d 65 6e 74 73 20 28 23 31 33 32 30 38 29 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 70 72 6f 63 65 73 73 20 63 6c 69 63 6b 73 20 6f 6e 20 64 69 73 61 62 6c 65 64 20 65 6c 65 6d 65 6e 74 73 20 28 23 36 39 31 31 2c 20 23 38 31 36 35 2c 20 23 31 31 33 38 32 2c 20 23 31 31 37 36 34 29 0a 09 09 09 09 69 66 20 28 20 63 75 72 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 28 20 63 75 72 2e 64 69 73 61 62 6c 65 64 20 21 3d 3d 20 74 72 75 65 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 21 3d 3d 20 22 63 6c 69 63 6b 22 20 29 20 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 65 73 20 3d 20 5b 5d 3b 0a 09 09 09 09 09 Data Ascii: shint eqeqeq: true */// Don't check non-elements (#13208)// Don't process clicks on disabled elements (#6911, #8165, #11382, #11764)if ( cur.nodeType === 1 && ( cur.disabled !== true \|\| event.type !== "click" ) ) {matches = [];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50018	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:07 UTC	963	OUT	GET /favicon.ico HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:07 UTC	253	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:07 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 19 Dec 2024 18:39:49 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50024	52.208.202.62	443	6752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 06:21:08 UTC	365	OUT	GET /favicon.ico HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 06:21:08 UTC	253	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 06:21:08 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 19 Dec 2024 18:39:49 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Target ID:	0
Start time:	01:19:31
Start date:	30/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\PersonnelPolicies.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	01:19:34
Start date:	30/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:19:34
Start date:	30/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1352,i,16443109779607777101,13006567146399552993,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	01:20:55
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://password-change.phishwall.net/XUEFGQUhVTXlrTkp0VG1FSUhsbFJMT1VnQUJiSW5ra3pqM0lXOWJKSlZoVE1XV1ZiZkIyek1hazNJZGdUckRCZ3F6Zko2bkw5VW45bDMrQ29tb0xxbzI5cU5IWW9pdUVONFFhTFFlOE5uUDVXNEtrWXhZMDNGRXZtcGx1ZlVqMWJKUnN3L0RKNXhrVTg3c05MMHdUTEdCMm85VGxLeDdNN0F0V05WOHMxSzluTVk2V1pyMnNjRlhpbERISzNvSGNVdHdoOWNRPT0tLURkRVFuZWdzUUc0NUxDRjYtLWc2ZUdpMmZBeWJoVTNMNXNDd1N2Q2c9PQ==?cid=303735780"
Imagebase:	0x7ff71e800000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	01:20:56
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,1483281230032166887,8997701478837374874,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PersonnelPolicies.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\9baaf7b3-ba6a-401c-bc61-ff72448eba05.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241230061937Z-177.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
PersonnelPolicies.pdf