Edit tour

Windows Analysis Report
securedoc_20241220T111852.html

Overview

General Information

Sample name:	securedoc_20241220T111852.html
Analysis ID:	1582295
MD5:	cdde5ec378847ecdc83f2bde5c5108a1
SHA1:	4b39e9fdf424aca3cbef8b28ab40c916f7209660
SHA256:	b5d2c495075a82149be6b7259f55756e70c76954e659e5ef75a0be0c0390f465
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

HTML file submission containing password form

Suspicious Javascript code found in HTML file

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241220T111852.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2168,i,16381702986795633507,2437687583789901785,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.10.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/securedoc_20241220T... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of a payload being sent to an external server are also highly concerning. Overall, this script demonstrates a clear intent to perform malicious activities and should be considered a high-risk threat.

Suspicious Javascript code found in HTML file

Source: securedoc_20241220T111852.html	HTTP Parser: document.write
Source: securedoc_20241220T111852.html	HTTP Parser: location.href
Source: securedoc_20241220T111852.html	HTTP Parser: .location
Source: securedoc_20241220T111852.html	HTTP Parser: .location

Source: securedoc_20241220T111852.html	HTTP Parser: Trading <Trading@eex.com>
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: {'name':null,'msgID':'\|1__498cd2fd00000193e393c372ff93ccff640d284c@localhost','keysize':24,'flags':2049,'rid':'dW5kaXNjbG9zZWQtcmVjaXBpZW50czo7','algnames':{'encryption':{'data':'AES'}},'algparams':{'encryption':{'data':{'IV':'LitVkN4unRcxR7MZw9qwvw=='}}},'keyserverhost':'res.cisco.com:443','securereplyhost':'res.cisco.com:443','openerhost':'res.cisco.com:443','toc':[['Body-1734689932148.txt',1,'','',3,[0,1998],'Body-1734689932148.txt','ISO-8859-1'],['MessageBar.html',4,'','',1,[1998,25799],'MessageBar.html','ISO-8859-1']],'salt':'xYzddzHANU/wAw7h1kRfmawyArI=','data':['','','']}

Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html

HTTP Parser: Number of links: 1

Source: securedoc_20241220T111852.html

HTTP Parser: Base64 decoded: Zeppelin rules!

Source: securedoc_20241220T111852.html	HTTP Parser: Title: Secure Registered Envelope:Trayport Emergency Maintenance does not match URL
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: Title: Authentication Frame does not match URL

Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html

HTTP Parser: Has password / email / username input fields

Source: securedoc_20241220T111852.html	HTTP Parser: <input type="password" .../> found
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: <input type="password" .../> found

Source: securedoc_20241220T111852.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: No favicon

Source: securedoc_20241220T111852.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html

HTTP Parser: No <meta name="copyright".. found

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 13.32.121.40 13.32.121.40

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=+c5NFIBKUUz/DoE5dasNjogMK+sZVtSbTgr84GbL0pVKwQjBRMHEiuYDPd9EY8yjznk0RTCUKgeNgFUW3IPM06j54Ak6FNwJRgjLjoz/6vsqZbb8EbLQzHP5Y2wS
Source: global traffic	HTTP traffic detected: GET /websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Light.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; AWSALBCORS=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=AC60A683F74E774E90C5C4C13F184EEF; AWSALB=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; AWSALBCORS=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM; AWSALBCORS=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/skins/googleSignIn.png HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/custom.action?cmd=authFrameAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALBCORS=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ
Source: global traffic	HTTP traffic detected: GET /websafe/images/skins/googleSignIn.png HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=AC60A683F74E774E90C5C4C13F184EEF; AWSALB=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ; AWSALBCORS=GmlzQZwOS9y/24JVXjstcHnkPxX3Nbv1cj2CSMkAHHj8SlLdcThm9jTjmnPZdIe8a/Rn8SmrOGOORgvyTSe5lUOMdt1IU7obsxwAQegUmACeBf0mJCldV2aRo1sg
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=hYpGGb3zQ/j47hETV/Th1EFI62yLRBDO0ysEuPb+5LjTyO/Corb2s/ctRtfm2UBgpx5ninVnmuxTMNe+VKO2+BKeab02XYpiek3N+gmYY3PC0/Eu/aPBjMm2RvRA
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/custom.action?cmd=authFrameAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALBCORS=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; AWSALBCORS=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; AWSALBCORS=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; AWSALBCORS=Z6l610kSrrYPhfX9MXYlbf76XObmkAc+T1RJCFfKLywC6j6dbPwhDUtDh6W9zaQ0WtEdeHFvfvkyLPOyy6BfzRpqFMWR46BKGQdDqn3pLWjOff2b8tADZD/YUDp+
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; AWSALBCORS=yIIQMDTuR+msv8/A+AaOIn2IIhalpV665MJleGoY3f3nrMSED8UU31hoG6dtqSfQEF4sMD2TQFGO7F89T8OqUh09q3/fmflQ9ocC0EwTk4ndsyoow9YzH5hCP2Es
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A2049,%0D%0A%27rid%27%3A%27dW5kaXNjbG9zZWQtcmVjaXBpZW50czo7%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27LitVkN4unRcxR7MZw9qwvw%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1734689932148%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,1998%5D,%27Body-1734689932148%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B1998,25799%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27xYzddzHANU%2FwAw7h1kRfmawyArI%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27ngy668qH8qrZLv%2FrMMim3FUg8NbMC%2BDTJt3379tnFEXo5hoFD3t09y8Up0XtEiGIGBzXrOaYxC1EEWdPeVZhMTD5ijry8%2B9OMM%2Bo%2FVNPEQUyRt8lY5n6MNx3Oixpcv6AstqysdqQzR7PrjAQX%2Fc3QpSYYs%2FmwfpEMOd08EmLSQOXdpX%2BGjveOe%2B%2B%2B12DQlamYDGtFb2tsYP%2F%2F6Mpp%2B2VwZLLZJKUt%2F0djNK1pDmZi42Npz4EtrqgfyGC4JsZvg5LQDabnfWC1P9Axqfbhivan2NHTKkF1i5FIe6Nk%2FV%2FAn06wJBFKiX29gnd%2FCtIO402RoOYoOZMnKjdz%2Fn%2FgEyjLDAO0yFb3iWz0mrD%2FIO2gnBPh0SvbzieOq8ODA0qXDbtc3D08tb6jJ%2BY0YqaVHJbCO%2FNI83lHUkZlcKPEzanzlr%2Bqykj3u0DyNB77aIiMhEaVOMwkCj%2BwqH7wRUS6yvInkNF8m9akmYr8DtxJx8eIOUWs%2Bes9e7z%2Bwh%2B%2BYgkeyTnmz3yzHJ03vfMQorAk7Hj9uy3ACYNGGq50ROKwqUiN6hgPMqn0NZFGCn1HRHOC%2FaI%2B9FyiIKyEUZbYTuEmpO%2FjMmQ81feD%2F8q0HBwvSAp2R0xJ5N08qiKEfvBN2WbmiJbYCgJu0pn3Rt4deVRUB1QQMkx76EnMIF7d0MKl5D3nTJUz5TV43eQRcdJ3H%2BDDBgpm87KFTVgHfprvB01qMxVA4X8k5G4qDyvAPHWZ5MDKE85nPDxBMVmFu9rb0JY%2B19uTwyrTsvrDsGuKrUnzKMk%2F%2BAKxApVSLvxySIXJppRtrZ8ZsDpCXZGCiOSnn%2Bgo%2FjRiSXpiui%2B0gkII%2BXWaOD4ueKRaJjZkJiuVeghrOLhMpc9CgTAtqr0wRekpzXu5Jh8%2BWHienUj7xb71MFOmeKMtbVcwHMfJrNTorKs6qBA%2FL6r5fUee14e0ZL0NG4i47Mutof6P9m2XAp%2Fg0CHx6jM9A6nfy7zbHhZ7Itd22x%2FM1c9%2BNBVHVyTfczuoc1MMI5wZUxCKZFJQBDUekAMV02DuuzVPU7yhTzz7BpyTXGZ6O1mr467md8uXf72mS30Mg5HUg%2FR88lYMRnHlc0qZUl5fAn1qHumGryFv1a9SRH9%2BUNiVZZ4HyQEYdDoxdFKHeEZIWiwriUsmVDB10RZKubTHscDkP4b8qh4WcBSD35WpZ7enZ7atSDW7biQKbDajtmgs6phD3lQgQnGDPHdtfKSdl2Wh26JB%2BcrX0P9Ri6%2FMmYJQVPXOp8Mz0O7DaME1U64HonmmGcCTJ9l0%2BDcTBh1hNpj4M069asL74ZIFfL1yh607%2Fv4P%2FiRPLe%2Fg3nf46epRkkhgXFYG7uXNmcHnxNnvekMwMF%2FxkHHzDmsjvQzBlwfc62imvujpWzn3LRLf3DLma8xy%2BbFTvE%2FTHmCcyAr2%2Fozld%2FvQvThIlnO3pK74FZNyealNXcgu6B7exjhNp1bJUBMDcV0Xz%2Bg%2BP9KhDI5BSvWlEVEkwAvFOR0vYzYu8HAaol5C9jt2ykCASXkOm7Tiwb96cXtcgIjAlQRW0LCrCji79f0NHR6yyBsoSN0Np7XsUZ6pnzDzctji301GXpZxGkmKRXLYzqA1AsA5WiuMP8%2BfrCoEwN2n6IUasK%2Bgp7WSqv01BFXJ4KAWQj81N1DReGJwPCa89oQWbWxBLg1LzJ19w4bM3qjGO1MNDuieXJxC5jX6Cu8L6oeXacqG7%
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: static.cres-aws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: res.cisco.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /websafe/custom.action?cmd=authFrame HTTP/1.1Host: res.cisco.comConnection: keep-aliveContent-Length: 917Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6

Source: securedoc_20241220T111852.html	String found in binary or memory: http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9Ld
Source: chromecache_86.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterLightWeightSlant
Source: chromecache_111.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterSemiBoldWeightSlant
Source: chromecache_92.2.dr, chromecache_91.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlant
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlantRegular
Source: securedoc_20241220T111852.html	String found in binary or memory: http://www.deutsche-boerse.com
Source: securedoc_20241220T111852.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: securedoc_20241220T111852.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Source: securedoc_20241220T111852.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Source: securedoc_20241220T111852.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Source: chromecache_86.2.dr, chromecache_111.2.dr	String found in binary or memory: https://github.com/rsms/inter)Inter
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter
Source: chromecache_92.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter
Source: chromecache_95.2.dr, chromecache_96.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=authFrame
Source: chromecache_83.2.dr, chromecache_89.2.dr, chromecache_113.2.dr, chromecache_87.2.dr	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=undisclosed-recipients:;
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com/websafe/images/loginbg.gif
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com/websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/keyserver/Logout
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/keyserver/keyserver
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=AddrNotShown
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=PPNotShown
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=RegEnvelope
Source: securedoc_20241220T111852.html	String found in binary or memory: https://res.cisco.com:443/websafe/pswdForgot.action
Source: securedoc_20241220T111852.html	String found in binary or memory: https://static.cres-aws.com/CRES_login_bg.jpg
Source: securedoc_20241220T111852.html	String found in binary or memory: https://static.cres-aws.com/postx.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: classification engine

Classification label: mal52.phis.winHTML@25/55@28/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241220T111852.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2168,i,16381702986795633507,2437687583789901785,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2168,i,16381702986795633507,2437687583789901785,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html

HTTP Parser: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlant	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterLightWeightSlant	0%	Avira URL Cloud	safe
http://www.deutsche-boerse.com	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlantRegular	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
res.cisco.com	34.199.33.163	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
www.google.com	142.250.185.196	true	false	high
d2qj7djftjbj85.cloudfront.net	13.32.121.110	true	false	unknown
static.cres-aws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	false		high
https://res.cisco.com/keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
https://res.cisco.com/websafe/images/loginbg.gif	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css	false		high
https://res.cisco.com/websafe/images/skins/googleSignIn.png	false		high
https://res.cisco.com/keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
file:///C:/Users/user/Desktop/securedoc_20241220T111852.html	true	Avira URL Cloud: safe	unknown
https://res.cisco.com/keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
https://res.cisco.com/websafe/custom.action?cmd=authFrame	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf	false		high
https://res.cisco.com/keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	false		high
https://static.cres-aws.com/postx.css	false		high
https://static.cres-aws.com/CRES_login_bg.jpg	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js	false		high
https://res.cisco.com/websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	securedoc_20241220T111852.html	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9Ld	securedoc_20241220T111852.html	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_95.2.dr, chromecache_96.2.dr	false		high
https://res.cisco.com:443/websafe/help?topic=RegEnvelope	securedoc_20241220T111852.html	false		high
https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter	chromecache_98.2.dr, chromecache_110.2.dr	false		high
http://www.deutsche-boerse.com	securedoc_20241220T111852.html	false	Avira URL Cloud: safe	unknown
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	chromecache_92.2.dr, chromecache_91.2.dr	false		high
http://scripts.sil.org/OFLWeightSlant	chromecache_92.2.dr, chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=PPNotShown	securedoc_20241220T111852.html	false		high
http://scripts.sil.org/OFLWeightSlantRegular	chromecache_98.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=AddrNotShown	securedoc_20241220T111852.html	false		high
https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp	securedoc_20241220T111852.html	false		high
https://res.cisco.com/websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP	securedoc_20241220T111852.html	false		high
https://res.cisco.com:443/websafe/pswdForgot.action	securedoc_20241220T111852.html	false		high
http://scripts.sil.org/OFLInterLightWeightSlant	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443	securedoc_20241220T111852.html	false		high
https://res.cisco.com:443/keyserver/keyserver	securedoc_20241220T111852.html	false		high
https://github.com/rsms/inter)Inter	chromecache_86.2.dr, chromecache_111.2.dr	false		high
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/keyserver/Logout	securedoc_20241220T111852.html	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.199.33.163	res.cisco.com	United States	14618	AMAZON-AESUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
13.32.121.40	unknown	United States	16509	AMAZON-02US	false
13.32.121.35	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
44.219.110.92	unknown	United States	14618	AMAZON-AESUS	false
13.32.121.110	d2qj7djftjbj85.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582295
Start date and time:	2024-12-30 09:27:28 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	securedoc_20241220T111852.html
Detection:	MAL
Classification:	mal52.phis.winHTML@25/55@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 74.125.133.84, 216.58.206.78, 216.58.206.42, 142.250.74.206, 142.250.186.42, 142.250.185.174, 199.232.210.172, 192.229.221.95, 172.217.23.106, 142.250.185.202, 142.250.184.202, 216.58.206.74, 142.250.185.234, 142.250.185.138, 142.250.186.138, 142.250.186.74, 172.217.16.202, 142.250.185.74, 142.250.184.234, 142.250.185.106, 142.250.181.234, 142.250.185.170, 142.250.186.170, 172.217.18.10, 142.250.186.106, 216.58.212.170, 172.217.18.106, 216.58.212.138, 172.217.16.206, 142.250.185.206, 142.250.185.142, 142.250.186.174, 142.250.186.163, 142.250.185.78, 142.250.185.110, 216.58.212.174, 4.175.87.197, 184.28.90.27, 13.107.246.45
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: file:///C:/Users/user/Desktop/securedoc_20241220T... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including dynamic code execution, potential data exfiltration, and aggressive DOM manipulation. While the intent is not entirely clear, the use of obfuscated code and interactions with unknown domains raise concerns and require further investigation." }
if(am('ff_saved'))alert(er('SavedPage'));var p4;if(p4=am('ff_trash'))p4. innerHTML='\x3cspan id=ff_saved\x3e\x3c/span\x3e';fD('browserLoading', 'BrowserParsing');e5(true);window.onfocus=qT;//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241220T... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission, the use of legacy APIs, and some obfuscation techniques. While there are no clear indications of malicious intent, the overall complexity and lack of transparency in the code warrant further review." }
'$Serial: 6261 $ $Revision: 1.16 $'; 'Copyright (c) 2001-2019, Cisco Systems, Inc. All rights reserved.'; 'Protected by United States patent numbers 6,014,688, 6,304,897,'; '7,533,422, 7,694,297, 7,802,096, 7,814,317, 8,005,920 and others.'; '$Serial: 3328 $ $Revision: 1.7 $';'Version: 2.3'; '$Serial: 6248 $ $Revision: 1.15 $';var ad='EnvelopeTools51',db='PostXBPC', dd='PostXPreferences',dc='PostXCookieCheck',ac='PostXCarbon.',de= 'PostXSessionKey.',df='PostXUserKey.',dk=315360000000,dg='',di= 'Tue, 19-Jan-2038 03:14:07 GMT',dh=315360000000,dj=315360000000,dl= 315360000000; '$Serial: 0478 $ $Revision: 1.9 $';var ae='appletHolder',f0='appletHolder', fE='undefined',aG='object',dv='string';try{if(typeof Array.prototype.push== fE)Array.prototype.push=function(){for(var _=0;_<arguments.length;_++)this[ this.length]=arguments[_];return this.length}}catch(fx){}try{if(typeof String.prototype.trim==fE)String.prototype.trim=function(){return this. replace(/^\s+\|\s+$/g,'')}}catch(fx){} '$Serial: 3888 $ $Revision: 1.23 $';function _w(a8){var gS= /^\sfunction\s+([^(]+)/,cS;if((cS=gS.exec(a8)))return cS[1];return''} function mp(i){i=i.toString(16);if(i.length&1)i='0'+i;return'%'+i}function _N(c,mr){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if( au>='A'&&au<='Z'\|\|au>='a'&&au<='z'\|\|au>='0'&&au<='9'\|\|au=='.'\|\|au=='-'\|\|au== ''\|\|au=='_')aw+=au;else{au=au.charCodeAt(0);if(mr\|\|au<128){aw+=mp(au&255)} else if(au<2048){aw+=mp(192\|au>>>6);aw+=mp(128\|au&63)}else{aw+=mp(224\|au>>> 12);aw+=mp(128\|(au>>>6)&63);aw+=mp(128\|au&63)}}}return aw}function a_(c,mr){ c+='';var au,dE,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);switch(au ){default:aw+=au;break;case'+':aw+=' ';break;case'%':if(c.charAt(_+1)=='u'){ au=c.substr(_+2,4);_+=5;dE=parseInt(au,16)}else{au=c.substr(_+1,2);_+=2;dE= parseInt(au,16);if(mr\|\|dE<128){}else if(dE<224){if(d-_<4\|\|c.charAt(_+1)!='%' ){}else{au=c.substr(_+2,2);_+=3;dE=((dE&31)<<6)\|(parseInt(au,16)&63)}}else{ if(d-_<7\|\|c.charAt(_+1)!='%'\|\|c.charAt(_+4)!='%'){}else{au=c.substr(_+2,2);_ +=3;dE=((dE&15)<<6)\|(parseInt(au,16)&63);au=c.substr(_+2,2);_+=3;dE=(dE<<6)\| (parseInt(au,16)&63)}}}aw+=String.fromCharCode(dE);break}}return aw}function _Y(c){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if(au< ' '\|\|au>'~'\|\|au=='\''\|\|au=='"')aw+='&#'+c.charCodeAt(_)+';';else aw+=au} return aw}function mv(my,mu){var k0=arguments.length,j=[],_;if(k0==3&& arguments[2].elements){var ey=arguments[2],eq;for(_=1;eq=ey['key'+_];_++)if( eq.value!='')j[j.length]=eq.value}else{for(_=2;_<k0;_++)if(arguments[_]!='') j[j.length]=arguments[_]}j=j.join(my);if(mu)j=j.toLowerCase();return j} function go(cN,mq){if(!mq)mq=72;var _,b,d=cN.length;if('\ '=='')return cN;var cS=new Array(Math.floor((d+mq-1)/mq));for(_=b=0;_<d;_+= mq+1,b++)cS[b]=cN.substr(_,mq);cS.length=b;return cS.join('')}var mt=0; function mw(ir){var c;if(fM)c=ir+new Date().getTime()+mt++;else do{c=ir+mt++ }while(document.getElementById(c));return c}function jy(hq){var mo='',_,d=hq .length;for(_=0;_<d;_++){var au=hq.charCodeAt(_);if(au<128)mo+=String. fromCharCode(au);else if(au<2048){mo+=String.fromCharCode(192\|(au>>>6));mo+= String.fromCharCode(128\|(au&63))}else{mo+=String.fromCharCode(224\|(au>>>12)) ;mo+=String.fromCharCode(128\|((au>>>6)&63));mo+=String.fromCharCode(128\|(au& 63))}}return mo}function mz(ge,gM){var iS=ge.indexOf('#');if(iS<0)iS=ge. length;var mn=ge.substring(0,iS),ms='&',mx=mn.indexOf('?');if(mx<0)ms='?'; for(var j in gM){mn+=ms;ms='&';mn+=_N(j);mn+='=';mn+=_N(gM[j])}mn+=ge. substring(iS);return mn}zw=formKey=mv;zj=fixMultilineString=go;zi=genId=mw; attrEsc=_Y; '$Serial: 0611 $ $Revision: 1.6 $';function du(_8){var e=new Date().getTime( );if(!_8)_8=dc;_9(_8,e,'','/');if((e=(al(_8)==e)))aj(_8,'/');return e} function al(_8){_8=_N(_8);var c=document.cookie,dr=c.indexOf(_8+'=');if(dr== -1)return null;var ds=dr+_8.length+1,dp=c.indexOf(';',ds);if(dp==-1)dp=c. length;return a_(c.substring(ds,dp))}function _9(_8,_H,dm,_S,dn,dt){var c=_N (_8)+'='+_N(_
URL: file:///C:/Users/user/Desktop/securedoc_20241220T... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. It includes features for dynamic form manipulation, potential data exfiltration, and interaction with external domains. While some of these behaviors may be legitimate, the overall complexity and lack of transparency warrant further review." }
var registeration_url;window.addEventListener('message',function(event){if(document.getElementById ('forgotPasswordForm')!=null){document.getElementById('forgotPasswordForm'). remove()}var pj=event.data.email,ez=event.data.href,oR=event.data.titleText, _H=event.data.value,qc=document.getElementById('forgotPwdDiv');qc. appendChild(pb(pj,oR,ez,_H))});function pb(pj,oR,ez,_H){if(oR==null){oR= 'Click here to recover a lost password.'}if(_H==null){_H='Forgot password?'} var oA=document.createElement('input');oA.name='forgotPasswordSubmit';oA.id= 'forgotPwdSubmit';oA.title=oR;oA.type='submit';oA.value=_H;if(window. navigator.userAgent.indexOf('Firefox')!=-1){oA.style='margin-top: 10px;'}if( window.navigator.userAgent.indexOf('Edge')!=-1){oA.style='margin-top: 5px;'} var o6=document.createElement('input');o6.name='forgotPswdEmail';o6.value=pj ;o6.type='hidden';var ey=document.createElement('form');ey.action=ez;ey. method='POST';ey.name='forgotPassword';ey.id='forgotPasswordForm';ey. autocomplete='off';ey.appendChild(oA);ey.appendChild(o6);return ey} function pbnew(pj, oR, ez, _H) {if (oR == null) {oR = 'Click here to recover a lost password.'} if (_H == null) {_H = 'Forgot password?'}var afp = document.createElement('a'); afp.title = oR;afp.name = 'forgotPwd';afp.href = ez + '?forgotPswdEmail=' + pj; afp.innerHTML = _H;return afp} function qQ(_l,ey,qu){mm(_l,{'error':p7,'success':p7},{'form':ey,'signature':qu})} function p7(status,qP,eu){if(!eu)eu=gUserArg;if(eu){var f5=eu.signature;if( status==ib\|\|status==ic){e3(eu.form,0);if(f5)et(f5, '\x3cspan class="error mds-text mds-text-p3 mds-text-weight-regular mds-text-color-regular mds-notification-content mds-notification mds-notification-negative"\x3eBad '+(status==ib?'postmark':'signature')+ '\x3c/span\x3e')}else if(f5){var c=qP,b=-1;for(_=0;_<3;_++)if((b=c.indexOf( ' ',b+1))==-1)break;if(b!=-1)c=c.substring(0,b)+'<br>'+c.substring(b+1);et( f5,c)}}}function pE(_l,iY,la,iG,eu,qV){var c;if(iG==jn&&_l.userKey){fa(fw,eu );gB(_l.userkeyname);_l.userKey='';oM(_l,true)}else if(iG== RPC_STATUS_NO_RECORD_FOUND){c=er('RPCMessageKeyRemoved','',iG,_l.msgID)}else if(iG!=iZ)c=er('RPCError','',iG,_l.msgID);if(c)alert(c)}var js,ok='passMsg', ol='',oC='initMsg',pm='',po='';function pv(dq){ if(!dq)dq=window.event;if(dq){if(dq.type=='keydown')window.onkeydown='';else if(js&&dq.type=='load')return;js={'ctrlKey':dq.ctrlKey?1:0,'altKey':dq. altKey?1:0,'shiftKey':dq.shiftKey?1:0}}} function qt(){pR();fp('passwordRow1');fp ('forgotPasswordRow');pl();fD(oC,'RPCWaiting')}function qJ(ey,eC, _l,ge,oj){if(OSMacOS9&&(_l.flags&iF)&&!(_l.flags&iM)){fa(fv);return;}window. onkeydown='';_l.rpc={'url':ge};_l.form.index=ey;_l.form.focusField=eC;_l. secureReplyAlg='';if(!oj)oj=js\|\|window.event; if(c=am( 'timeStampLocation'))if(payload.signature)c.innerHTML= '\x3cspan class=timestamp id=signature\x3e'+'\x3ca href="javascript:'+"qQ"+ '('+"payload"+',\''+ey+'\',\'signature\')'+ '"\x3eVerify this envelope\x3c/a\x3e'+'\x3c/span\x3e';else c.innerHTML= '\x3cspan class=timestamp\x3e12/20/2024'+ '\x3cbr\x3e10:18:52 AM GMT\x3c/span\x3e';if(_l.sessionKey)document.forms[ey ].sessionkey.value=_h.encodeToString(_l.sessionKey);if((_l.userKey\|\|_l. sessionKey)&&(_l.flags&hP)&&(!oj\|\|!oj.altKey))oK(document.forms[ey],_l,'',oj );else if(_l.userKey\|\|_l.sessionKey\|\|_l.encryptedSessionKey){ ew(oC,'');if(_l.selectedID)o7(_l.selectedID);oM(_l)}else pi();} function eB(qv){var dq,c,_l=payload; if(oF&&am('authFrame')&&(c=eU('iframeLocation')))c .appendChild(oF);pR();if(c=am('emailTo')){if(dq=am('toSelect')){ _l.selectNode=dq;c.removeChild(dq)}if(qv&&_l.selectedID)ew(c,_l.selectedID); else ew(c,'Undisclosed-Recipients:;')}ew(oC,'');fp('bccRow');fp('passwordRow1');fp( 'forgotPasswordRow');ew('openButtonLocation','');ew('saveButtonLocation','') ;oq(0);if(c=ew('checkboxesLocation',''))fp('checkboxRow', 'addressSentinelRow')}function oM(_l,pd){px(_l);pw(_l,pd);ov(oE); oq(oU\|or);py();e4(_l.form.index,_l.form .focusField);oz=jl}var oE=1,p_=2,oS
URL: file:///C:/Users/user/Desktop/securedoc_20241220T... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of a payload being sent to an external server are also highly concerning. Overall, this script demonstrates a clear intent to perform malicious activities and should be considered a high-risk threat." }
ew('browserLoading','');if(typeof ag=='function')ag();window.onload=pv; window.onkeydown=pv;var ey=document.forms[0];ey.method='POST'; ey.onsubmit=function(){return qg(ey,payload)};ey.onkeyup= function(oj){ql(ey,oj)};p5();if(!fP){qt();setTimeout(function(){i9(0,'payloadValue','payloadImage', 'metaPayloadValue','metaPayloadImage',"qJ(0,'key1',payload,"+ '"https://res.cisco.com:443/keyserver/keyserver")' ,{'progressFn':fq,'progressArgs':{'progressBar':{'bgColor':'#808080', 'borderColor':'#000000'}}})},125)}//-->
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "Submit", "text_input_field_labels": "Undisclosed-Recipients:;", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "Submit", "text_input_field_labels": "Undisclosed-Recipients:;", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "Open", "text_input_field_labels": [ "To", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "Open", "text_input_field_labels": [ "To", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: file:///C:/Users/user/Desktop/securedoc_20241220T111852.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.32.121.35	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse
	https://gofile.me/7wODs/99hfK37gz	Get hash	malicious	Annabelle	Browse
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
13.32.121.40	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse
	https://www.dubber.net/	Get hash	malicious	Unknown	Browse
	https://stackby.com/view/vwshr17265453204549a34ea	Get hash	malicious	HTMLPhisher	Browse
	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6InN2ZXJiZXJuZUBod2xvY2huZXIuY29tIiwicmVxdWVzdElkIjoiNzgwMDFlMWUtY2NmYy00M2ZhLTQxYmItMjk2M2EyNGZhMWVmIiwibGluayI6Imh0dHBzOi8vYWNyb2JhdC5hZG9iZS5jb20vaWQvdXJuOmFhaWQ6c2M6VVM6OTk1YjVjZmEtMGYyZC00ZTljLTgwOWYtYzc5YzUxN2RlNjFkIiwibGFiZWwiOiIxMiIsImxvY2FsZSI6ImVuX1VTIn0.0EWW2z_mxehDkMMQ98vMToXInjMXe5XMr7nBZXvNhumnuPscVlD99QQVhtOQEqMfyqFH2INPck0-ahuKra8sJg	Get hash	malicious	LummaC Stealer	Browse
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse
	https://my.visme.co/v/pvmd79je-dj6mqv	Get hash	malicious	Unknown	Browse
	https://www.taskade.com/d/crGK9SMfKv57uuo3?share=view&view=k886FJ9ztA29Uxye&as=list	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d2qj7djftjbj85.cloudfront.net	securedoc_20241220T070409.html	Get hash	malicious	Unknown	Browse	18.66.161.47
	securedoc_20241217T163143.html	Get hash	malicious	Unknown	Browse	18.66.161.47
	securedoc_20241216T121346.html	Get hash	malicious	Unknown	Browse	18.66.161.34
	securedoc_20241209T071703.html	Get hash	malicious	Unknown	Browse	18.66.161.34
	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse	13.32.121.62
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse	13.32.121.40
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse	18.66.27.82
	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.160.225.62
res.cisco.com	securedoc_20241220T070409.html	Get hash	malicious	Unknown	Browse	52.86.107.71
	securedoc_20241217T163143.html	Get hash	malicious	Unknown	Browse	54.161.144.184
	securedoc_20241216T121346.html	Get hash	malicious	Unknown	Browse	184.73.13.143
	securedoc_20241209T071703.html	Get hash	malicious	Unknown	Browse	54.208.49.75
	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse	54.161.165.135
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse	34.235.221.210
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse	50.17.52.147
	https://07d6b6-35.myshopify.com/pages/enternal/#1aWdvYmVsaUBoaWxjb3JwLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	35.168.85.253
	https://fb1f1d-d3.myshopify.com/pages/fb1f1d-d3-scanning#0YnJhbmRpLnRyeW9uQGFjYWRlbWljcGFydG5lcnNoaXBzLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	54.243.162.14
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse	3.210.249.249
cdnjs.cloudflare.com	https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	EFT Payment_Transcript__Survitecgroup.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	FB.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://track.rbfcu.org/y.z?l=https://google.com/amp/s/t.ly/5SpZS&r=14387614172&d=18473&p=2&t=h	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	phish_alert_iocp_v1.4.48 - 2024-12-27T140703.193.eml	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://track.rbfcu.org/y.z?l=https://google.com/amp/s/t.ly/5SpZS&r=14387614172&d=18473&p=2&t=h	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=N_pyUL0QJkeR_KiXHZsVlyTB1Qoy7S9IkE8Ogzl8coFUMFBJSDkxQ0w3VVZMNFJFUlNDRVkyU05CUi4u	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	phish_alert_iocp_v1.4.48 - 2024-12-26T095152.060.eml	Get hash	malicious	Unknown	Browse	104.17.25.14
	phish_alert_iocp_v1.4.48 - 2024-12-26T092852.527.eml	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://contractnerds.com/	Get hash	malicious	Unknown	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	lumma.ps1	Get hash	malicious	LummaC	Browse	104.21.72.190
	vlid_acid.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.190.223
	sysmonconfig.xml	Get hash	malicious	Unknown	Browse	172.64.41.3
	https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	Get hash	malicious	Unknown	Browse	172.67.134.110
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	104.18.1.101
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	104.18.1.101
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.245.203
	botx.arm7.elf	Get hash	malicious	Mirai	Browse	104.17.182.127
	AquaPac.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.205.168
	R3nz_Loader.exe	Get hash	malicious	LummaC	Browse	104.21.32.1
AMAZON-AESUS	botx.mips.elf	Get hash	malicious	Mirai	Browse	52.0.196.218
	botx.x86.elf	Get hash	malicious	Mirai	Browse	34.206.198.108
	botx.m68k.elf	Get hash	malicious	Mirai	Browse	54.87.199.101
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	54.56.4.115
	botx.arm7.elf	Get hash	malicious	Mirai	Browse	54.89.155.219
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	54.42.166.207
	loligang.sh4.elf	Get hash	malicious	Mirai	Browse	23.22.171.190
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	34.206.119.94
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	54.44.28.10
	loligang.x86.elf	Get hash	malicious	Mirai	Browse	18.204.25.216
AMAZON-02US	vcimanagement.x86.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	vcimanagement.m68k.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	34.209.252.91
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	34.209.252.91
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	52.208.202.62
	botx.arm5.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	botx.mips.elf	Get hash	malicious	Mirai	Browse	99.86.94.132
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	63.34.98.47
	botx.x86.elf	Get hash	malicious	Mirai	Browse	52.53.164.71
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	35.154.4.108
AMAZON-02US	vcimanagement.x86.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	vcimanagement.m68k.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	34.209.252.91
	https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fshm.to%2fpolice&umid=0d23e2e5-f76c-4734-8c53-52692e5df704&auth=771bc9afedacaf21ff6267a075d4e92f38a56cd1-76eb9d39a6a3c5ec361f1d32692c8a467e476d6a	Get hash	malicious	Unknown	Browse	34.209.252.91
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	52.208.202.62
	botx.arm5.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	botx.mips.elf	Get hash	malicious	Mirai	Browse	99.86.94.132
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	63.34.98.47
	botx.x86.elf	Get hash	malicious	Mirai	Browse	52.53.164.71
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	35.154.4.108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 410 x 410, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62336
Entropy (8bit):	7.979381724755323
Encrypted:	false
SSDEEP:	1536:5YBs6JfJtdMVvpsTq2TDVJWfju6eyQLOku9Yec8U9L1ZQ:5YW0RtQvCTtDVIjMk59Yec8U9xa
MD5:	CFF524DE6437DC8824753BEDCF6901B3
SHA1:	78E043DDD5A72F02904B4C77505AA777991A1D60
SHA-256:	8FFE73610C4C1E7D09BAA8134741165F2DE6848F191C4D637AFFDAAA253CF519
SHA-512:	CC9CBCD84114EA25C26339032B7FB70BF7042FE3E11EAE74F2CD4A3110F4BA7A342099ACC68358076BF26306334BEA2F53E93042066B9F6E44F07C75AB749C58
Malicious:	false
Preview:	.PNG........IHDR.............6..c....iCCPICC Profile..H..W.XS...[R..-..)...] .. .l.$@(.....]Tp."...+"......]Y.{.(.....l..I.]_........9g.3...........T..\a.(&$.....$.............GGG.(#....M.H.kv.X.:._E...s.@.!N........... .C...<)..XS...@.8C...8M.me6q1l.Y.....(...)of!7..Q.rt...B.7C..... ...mn...U..[.}.'.o1.Fcr8..X..L..q^.g.....[rs$#s..F....Hs..;{F..S!n..EFA.....Of/.w3%....~.....0.\|.<N`8.z.3$........\|.=.)(..S.4..E\|.P......,..6.......tAp....#E.q.r..BAB$..w..c.....2.#6"I...).o.E.1r.L;W<..f.......2.B.X._..1.....s.x\|a.....+ F.[.......9!1.u....cG\|........8.3!Z1....897........H`K.3@..t.7.._.`.."....N...H....3...?!..._.l......V.....B.G6x.q......x.\|.`s.=p..?.... b 1..L......s`.........r....-..)...p..M.....Y...tA....L0.t.h......7..]......q.....q0.........3..r...?.'e.}>.......E..a.Z.......`...%..;...Na.....0..X......Jx"....bd.a....c.c......(....?.@.1.g....22...p7.3.\{[....'..].u.a..l.q......R......p.)..w.t&.a....x'W"...1 ...U.U...`.,a>...x.....@....`.\.L..9..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	5.148175628634177
Encrypted:	false
SSDEEP:	12:yVfreAJL6CRiQMd4QkJRJ5Qfw0dKKOP01s6:yVff2Vm3LPW3f
MD5:	0C93D60194CCB7DD6A896EFB85FF8343
SHA1:	77CE555FC392813146A33C415EAE1C336736B2A4
SHA-256:	607AD1EC03824AEB72310773F09864DE62F5AB6B6661B2F29E7A15C8A55C3EB9
SHA-512:	A51016FB53562982302FB3229E3CC0DAC1529FB02B2707084112CD91A1093313ACA5901F555D353A635333CB71BAA4198931901E4C66677856932BB5BA3DE626
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qp..,'action':'open'..,'status':17..,'message':''..,'state':9..,'locale':'en'..,'reqTime':1735547329350..,'reqNumber':4..,'success':true..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'recipient':'undisclosed-recipients:;'..,'cacheFlags':0..,'openOnline':false..,'requestState':2..,'offerLogout':true..,'event':'{\'ctrlKey\':0,\'altKey\':0,\'shiftKey\':0}'..,'credentialsExpiredWarning':'false'..,'credentialsExpiredDays':'-1'..});..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	125394
Entropy (8bit):	5.069062799454485
Encrypted:	false
SSDEEP:	1536:ZrCMDD2MR/9fU2j2L292qgJYq1x2KLLn+mbkQ7ThzeSRwJWL0V8bK/FMGFOFlLn5:HDFfU2j2L292qgZxxv+mAQXhzeSRwzQ
MD5:	A0B4FF216E038470B000B63F5AA39816
SHA1:	319D6BB77F2115DA9F977569477AC010F87E6386
SHA-256:	7A61694ACF36F22050B90F751DBAFC330D5025471F83F5C08F663CD2633448F7
SHA-512:	A3B38E3CC9B204D809DBAEEB1417E878EFA9A2D8AAF9E311051FF6FEDD1C1F92F89901274EBD43A163F03D42567D6586063333A3ECDDC128A64773315BB1B094
Malicious:	false
URL:	https://static.cres-aws.com/postx.css
Preview:	/* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBol

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14965)
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	484
Entropy (8bit):	5.15074817511731
Encrypted:	false
SSDEEP:	12:yVfreAJL6CRiQMrAQkJRJ5Qfw0dKKOP01s6:yVff2VrcLPW3f
MD5:	53A3978121C9F0F9DFD8BCEC5D586042
SHA1:	0A9D13AC6432BE0C5DE46AED73CA6552E6199666
SHA-256:	777085C862EB0B72350E1A12D667F0709A969EB58517545819283430EA3AB1A3
SHA-512:	5EEC4F0F1006DEA750C5C19C73FCF8C0A0AEDB6A1ECA4D62AD3372AE4674EA9A9DCE47CF2803B97F1A634417D858346902A51B093F05317A57AB87B22A068A08
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qp..,'action':'open'..,'status':17..,'message':''..,'state':9..,'locale':'en'..,'reqTime':1735547329350..,'reqNumber':6..,'success':true..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'recipient':'undisclosed-recipients:;'..,'cacheFlags':0..,'openOnline':false..,'requestState':2..,'offerLogout':true..,'event':'{\'ctrlKey\':0,\'altKey\':0,\'shiftKey\':0}'..,'credentialsExpiredWarning':'false'..,'credentialsExpiredDays':'-1'..});..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 89, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12316
Entropy (8bit):	7.969144107566906
Encrypted:	false
SSDEEP:	384:ud3Z1BUz6ohem5/3RqlnehNcwplMrL2njZQEQ87:uZ1BUFJqB8OaZFZ7
MD5:	5B0FE82647513293E0242682F6D77E65
SHA1:	1FE1BE5B1755B0FEE577794AA59500D65B129A71
SHA-256:	ADACBD0D5780A1677188EB84068791EE766680AAC6099E411448EC4653F01DEA
SHA-512:	5B736CDB8093DFD99F0822609ACC9712B8A1EE33737BDDEB0AAF932E4C123A4F3FC0AB273480DC6AC708B6025484573235834913822553D066BF181C70B4D014
Malicious:	false
Preview:	.PNG........IHDR.......Y.............sRGB.........gAMA......a.....pHYs...t...t..f.x../.IDATx^.}..^Uu.....@...............S..Z....{..`.^.Ck.Z..z.{.Zd.y..!.!@&HB..@HB.}.w...>..\|..SC...~.9{.k.}.>....=.X.......:..[..:....C.[..:....C.[..:....C.[..:....C.[..:....C.[..:....C.[..:......?.~..`;t...i............"....h.'....e.q........M..MJ.(...../.6...Dc..z.\|.......Lv.DQs....;.!.b...A[...c.Cy.;x....>...U\|..R...E.J..h.2F...>....%..........%.-%M....+]..Q..1 .z..M.1..+rn.d.D#...-..$=?.QR.h.<...?.a=...?......N50L..-......D...."A.9....dK..+u...K.t)...l.n....0a.dY..e.d...7.....k.@Z\|..E2 .h.a"..(Jk.V.).o..@...+...0.N..w."D.. ....r..H..6..d"/...G.X.KG.E.f.....tK...\|}..K5...c].\....=...va'9vb%vZ,iI..Z....H...%..i..G..:.-4..T8.y.w...5/.....WtA{....x.0...,.!2~...dg.C.N/..D.f1.'X.L...J...^.@.e+.5.9...~=\|.W.i.N.)...Aj.r2.}S.)g.5.....u.v..=X.4<..-:tu...9...Ne`k.@.@.....a-Q......C.(m~.L;.iO...+el.....;..b.Wro.2!....<r..-.Xh./..$....\..T. Jg...$...:.GJ..F...E)...!b...6}

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.771241170818224
Encrypted:	false
SSDEEP:	3:YV8nN04m/EvMN9cws5RR:48nN04meb5D
MD5:	904015F554B2913A9102F780980F685E
SHA1:	DE8E3109C2EEB15D414EE6FCE5EEFCD8A814EEF4
SHA-256:	967D3617ECAD31C01401F04F1FDF862BA15961E94B9426203951726D454786BC
SHA-512:	46F1997DA826F2038A22EDBAC804424776F08292AEDAEAFC69FBE03F46CB83EAE47F24A7CF20FC33EB117C1AEFAE75809A418B7632C4F83504598A5DB8F641E7
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl91Ys6YFXz2BIFDfTvjPk=?alt=proto
Preview:	CioKKA3074z5GgQISxgCKhsIClIXCg0hQCQjKi4tJis/XyUvEAEY/////w8=

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.834163343902803
Encrypted:	false
SSDEEP:	3:Cb6Ma6Mo+ADdWEBpeugGfEWRbcRIu2waKuwokvRMKmofbW6avMWRP4fn:Cb6Ma6p+AVfeugIEdRIBlURxkMWh4f
MD5:	6C3B3CC5F723B0AF8F695983E7A81896
SHA1:	4F5A5DEE085BA4E49B4B19C97AB46CCAF0FA048A
SHA-256:	188EBF4BDBA548344A20753D3BFD4B4961ED3049403B206E6F42A227F4D34202
SHA-512:	B2CD2C55B9CBCD9CE3AC64F3F7D32A4F72322F9B773426D190E43E8E227D1439E7634D870A99080FC0FB346B3014508E7FEF3782D8F4A35D882BAE9A655F76E2
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'status':21..,'message':'Cannot identify recipient.'..,'action':'open'..,'success':false..,'state':1..});..

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	844
Entropy (8bit):	5.3026190486138125
Encrypted:	false
SSDEEP:	12:yVfr5QBdKd6GGPKbukwZAk2WRJKoDXX1gXqWTO2et168RJQd1jHjfUeTd1jHjfUt:yVfSe6GGEFi0oW6BvFuvTLTvTLU
MD5:	11233636D76A5C68AF171F89B0607DAD
SHA1:	034479B35006ECD5179E7AFC148421E88480FA47
SHA-256:	41F28CFA28CB641240AAFEBB64BE3C109120FFF0D419EA90FB605106AC5F279F
SHA-512:	6EBDAAC48F334DECAA7761D1DB450BF0C5A27217CB882BF094A31BBFD339F811C06864B488A8FB1C8DCCA0602287F0A8BF93C69993FF7CECFC7A6F3BBB7B4E32
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qq..,'action':'open'..,'status':16..,'message':'Authentication required.'..,'state':8..,'reqTime':1735547325824..,'reqNumber':2..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'undisclosed-recipients:;'..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=undisclosed-recipients:;'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..});..

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	125394
Entropy (8bit):	5.069062799454485
Encrypted:	false
SSDEEP:	1536:ZrCMDD2MR/9fU2j2L292qgJYq1x2KLLn+mbkQ7ThzeSRwJWL0V8bK/FMGFOFlLn5:HDFfU2j2L292qgZxxv+mAQXhzeSRwzQ
MD5:	A0B4FF216E038470B000B63F5AA39816
SHA1:	319D6BB77F2115DA9F977569477AC010F87E6386
SHA-256:	7A61694ACF36F22050B90F751DBAFC330D5025471F83F5C08F663CD2633448F7
SHA-512:	A3B38E3CC9B204D809DBAEEB1417E878EFA9A2D8AAF9E311051FF6FEDD1C1F92F89901274EBD43A163F03D42567D6586063333A3ECDDC128A64773315BB1B094
Malicious:	false
URL:	https://static.cres-aws.com/postx.css
Preview:	/* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBol

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	844
Entropy (8bit):	5.301012221920439
Encrypted:	false
SSDEEP:	12:yVfr5QBdKd6XGPKbukwZAk2WRJKoDXX1gXqWTO2et168RJQd1jHjfUeTd1jHjfUt:yVfSe6XGEFi0oW6BvFuvTLTvTLU
MD5:	2F7964B22E03EA31E298327CC841E42C
SHA1:	8BB37F6829D4FCFBFB78FA80DABBC4D4F253492C
SHA-256:	84769B9F795252E46117143C427EEA3595BECD9ACAF7507E32726C5E0450CB33
SHA-512:	067CD82CC677A257283B3AE37ABC9117300A9C3E007D8446E8A80C266BED12D59911E6B74B6123546F5C569A03B725F2A532D3BD61F75BF9589388C69667BDD5
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qq..,'action':'open'..,'status':16..,'message':'Authentication required.'..,'state':8..,'reqTime':1735547325824..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'undisclosed-recipients:;'..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=undisclosed-recipients:;'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..});..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 410 x 410, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62336
Entropy (8bit):	7.979381724755323
Encrypted:	false
SSDEEP:	1536:5YBs6JfJtdMVvpsTq2TDVJWfju6eyQLOku9Yec8U9L1ZQ:5YW0RtQvCTtDVIjMk59Yec8U9xa
MD5:	CFF524DE6437DC8824753BEDCF6901B3
SHA1:	78E043DDD5A72F02904B4C77505AA777991A1D60
SHA-256:	8FFE73610C4C1E7D09BAA8134741165F2DE6848F191C4D637AFFDAAA253CF519
SHA-512:	CC9CBCD84114EA25C26339032B7FB70BF7042FE3E11EAE74F2CD4A3110F4BA7A342099ACC68358076BF26306334BEA2F53E93042066B9F6E44F07C75AB749C58
Malicious:	false
URL:	https://res.cisco.com/websafe/images/skins/googleSignIn.png
Preview:	.PNG........IHDR.............6..c....iCCPICC Profile..H..W.XS...[R..-..)...] .. .l.$@(.....]Tp."...+"......]Y.{.(.....l..I.]_........9g.3...........T..\a.(&$.....$.............GGG.(#....M.H.kv.X.:._E...s.@.!N........... .C...<)..XS...@.8C...8M.me6q1l.Y.....(...)of!7..Q.rt...B.7C..... ...mn...U..[.}.'.o1.Fcr8..X..L..q^.g.....[rs$#s..F....Hs..;{F..S!n..EFA.....Of/.w3%....~.....0.\|.<N`8.z.3$........\|.=.)(..S.4..E\|.P......,..6.......tAp....#E.q.r..BAB$..w..c.....2.#6"I...).o.E.1r.L;W<..f.......2.B.X._..1.....s.x\|a.....+ F.[.......9!1.u....cG\|........8.3!Z1....897........H`K.3@..t.7.._.`.."....N...H....3...?!..._.l......V.....B.G6x.q......x.\|.`s.=p..?.... b 1..L......s`.........r....-..)...p..M.....Y...tA....L0.t.h......7..]......q.....q0.........3..r...?.'e.}>.......E..a.Z.......`...%..;...Na.....0..X......Jx"....bd.a....c.c......(....?.@.1.g....22...p7.3.\{[....'..].u.a..l.q......R......p.)..w.t&.a....x'W"...1 ...U.U...`.,a>...x.....@....`.\.L..9..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	745
Entropy (8bit):	5.327734241646722
Encrypted:	false
SSDEEP:	12:yVfrpPAJL6n4bIfFhGPKbukwZAk2WRJKoDXX1gXqWTO2et168RJQd1jHjfUeU:yVf1IrIfFhGEFi0oW6BvFuvTLU
MD5:	45A92BD8D2AD59FBACC63D28E874BAAC
SHA1:	737EB57300EF860E594AE21F933E9483051AC923
SHA-256:	C2C00B0568BCA5650B3E7F893502F90EB906C426BFEA25A6580727F26C1E6AC1
SHA-512:	4159C381D29A42AB905981DBA7A680AE09D89839949F51A63059957A9979B581A29D008475ECB938F7F01AB8A2AA5FE9C6C0E7BCD33EF59A75F8CF67CF38FE93
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":jt..,'action':'open'..,'status':17..,'message':'This envelope was not sent to this recipient.'..,'state':2..,'reqTime':1735547337855..,'reqNumber':3..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'undisclosed-recipients:;'..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=undisclosed-recipients:;'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..});..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/websafe/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	745
Entropy (8bit):	5.327734241646722
Encrypted:	false
SSDEEP:	12:yVfrpPAJL6n4bIfFbGPKbukwZAk2WRJKoDXX1gXqWTO2et168RJQd1jHjfUeU:yVf1IrIfFbGEFi0oW6BvFuvTLU
MD5:	5B0C229E64959300ABDFEC24C0309885
SHA1:	95DD7C3F83D2D9772ABC8CE2AB8520A332FE2EE1
SHA-256:	5972FFD9A3DCD971F7EC583CC6DCCA54F7F490C92F9F852424412C99342F9273
SHA-512:	749E57D6DDFA30BE86CC30E1D0C0B1EDA3DFC2E06CBB6F46487AEC14EAD9F27D79C568C68D884EDC679BBD55E50936708DDDE9E2D31B3969E17D23A247CB9EAE
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":jt..,'action':'open'..,'status':17..,'message':'This envelope was not sent to this recipient.'..,'state':2..,'reqTime':1735547337855..,'reqNumber':5..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'undisclosed-recipients:;'..,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=undisclosed-recipients:;'..,'trafficKey':'7\x1b\xac\xdb\xd2\xd8;\xf7s\xd6\x0c9\xf4\n\xbd\xa6\xf0\xa9\x13\xf6\x9e\x8ei\xa7Q \x19\x80\xd0\x8e\x86W'..});..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 89, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12316
Entropy (8bit):	7.969144107566906
Encrypted:	false
SSDEEP:	384:ud3Z1BUz6ohem5/3RqlnehNcwplMrL2njZQEQ87:uZ1BUFJqB8OaZFZ7
MD5:	5B0FE82647513293E0242682F6D77E65
SHA1:	1FE1BE5B1755B0FEE577794AA59500D65B129A71
SHA-256:	ADACBD0D5780A1677188EB84068791EE766680AAC6099E411448EC4653F01DEA
SHA-512:	5B736CDB8093DFD99F0822609ACC9712B8A1EE33737BDDEB0AAF932E4C123A4F3FC0AB273480DC6AC708B6025484573235834913822553D066BF181C70B4D014
Malicious:	false
URL:	https://res.cisco.com/websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1
Preview:	.PNG........IHDR.......Y.............sRGB.........gAMA......a.....pHYs...t...t..f.x../.IDATx^.}..^Uu.....@...............S..Z....{..`.^.Ck.Z..z.{.Zd.y..!.!@&HB..@HB.}.w...>..\|..SC...~.9{.k.}.>....=.X.......:..[..:....C.[..:....C.[..:....C.[..:....C.[..:....C.[..:....C.[..:......?.~..`;t...i............"....h.'....e.q........M..MJ.(...../.6...Dc..z.\|.......Lv.DQs....;.!.b...A[...c.Cy.;x....>...U\|..R...E.J..h.2F...>....%..........%.-%M....+]..Q..1 .z..M.1..+rn.d.D#...-..$=?.QR.h.<...?.a=...?......N50L..-......D...."A.9....dK..+u...K.t)...l.n....0a.dY..e.d...7.....k.@Z\|..E2 .h.a"..(Jk.V.).o..@...+...0.N..w."D.. ....r..H..6..d"/...G.X.KG.E.f.....tK...\|}..K5...c].\....=...va'9vb%vZ,iI..Z....H...%..i..G..:.-4..T8.y.w...5/.....WtA{....x.0...,.!2~...dg.C.N/..D.f1.'X.L...J...^.@.e+.5.9...~=\|.W.i.N.)...Aj.r2.}S.)g.5.....u.v..=X.4<..-:tu...9...Ne`k.@.@.....a-Q......C.(m~.L;.iO...+el.....;..b.Wro.2!....<r..-.Xh./..$....\..T. Jg...$...:.GJ..F...E)...!b...6}

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.834163343902803
Encrypted:	false
SSDEEP:	3:Cb6Ma6Mo+ADdWEBpeugGfEWRbcRIu2waKuwokvRMKmofbW6avMWRP4fn:Cb6Ma6p+AVfeugIEdRIBlURxkMWh4f
MD5:	6C3B3CC5F723B0AF8F695983E7A81896
SHA1:	4F5A5DEE085BA4E49B4B19C97AB46CCAF0FA048A
SHA-256:	188EBF4BDBA548344A20753D3BFD4B4961ED3049403B206E6F42A227F4D34202
SHA-512:	B2CD2C55B9CBCD9CE3AC64F3F7D32A4F72322F9B773426D190E43E8E227D1439E7634D870A99080FC0FB346B3014508E7FEF3782D8F4A35D882BAE9A655F76E2
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'status':21..,'message':'Cannot identify recipient.'..,'action':'open'..,'success':false..,'state':1..});..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	downloaded
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	dropped
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (491), with CRLF, LF line terminators
Entropy (8bit):	5.860520687076862
TrID:	Scalable Vector Graphics (18501/1) 24.18% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (11501/1) 15.03% HyperText Markup Language (11501/1) 15.03%
File name:	securedoc_20241220T111852.html
File size:	138'017 bytes
MD5:	cdde5ec378847ecdc83f2bde5c5108a1
SHA1:	4b39e9fdf424aca3cbef8b28ab40c916f7209660
SHA256:	b5d2c495075a82149be6b7259f55756e70c76954e659e5ef75a0be0c0390f465
SHA512:	e3738cd5fb7d8b2e32fb7ff23bef015f4445354eb55e507ccf48633f2ea1fafe7bd81be618a211d9fcd2d8254d68860aa22ea7e742b7e87fdee711df56899290
SSDEEP:	1536:0o+K6hTl/kUIKI31C4dQGjA4o5QD30l1aAwNiwr73YHdNY7T82MBWOqrIHYONiv+:0Ll/LQISQGjA4RPeMo+IHYONivQ2sK8
TLSH:	AAD37D893652603202D718F7747B154A3A3198070509A9A1FBACC9ACFFB9DD6427FF8D
File Content Preview:	saved from url=(0025)https://res.cisco.com:443 -->..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN". "http://www.w3.org/TR/html4/loose.dtd"><html.lang="en"><head><base href="http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 09:28:22.590830088 CET	49675	443	192.168.2.4	173.222.162.32
Dec 30, 2024 09:28:34.058312893 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.058355093 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.058409929 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.059096098 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.059135914 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.059192896 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.059336901 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.059361935 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.059514999 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.059526920 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.063846111 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.063960075 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.068681955 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.068725109 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.068758965 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.068788052 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.070359945 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.070503950 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.075073957 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075378895 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075387001 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075422049 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075429916 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075458050 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.075582027 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075592041 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075596094 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075598955 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075607061 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.075618982 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.080213070 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.102277040 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.102329016 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.102399111 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.102571011 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.102588892 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.494932890 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.495134115 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.495167017 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.496107101 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.496170044 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.498198986 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.498363972 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.498409986 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.511605978 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.519610882 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.524277925 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.524457932 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.524478912 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.525840044 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.525876999 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.525938988 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.525991917 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.526038885 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.526084900 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.526205063 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.526226044 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.526227951 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.526288033 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.526416063 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.526434898 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:34.526983976 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.527064085 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.527128935 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.527133942 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.539340019 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.582228899 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.582235098 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.582273006 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.609606981 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:34.609772921 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.630162001 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630197048 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630217075 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.630228043 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630258083 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630264997 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.630611897 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630644083 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630659103 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.630667925 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.630716085 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.630980968 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635747910 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635782957 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635802984 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.635809898 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635838985 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635863066 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.635912895 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.635963917 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.649945974 CET	49734	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.649991989 CET	443	49734	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.726782084 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.727011919 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.727044106 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.728064060 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.728132010 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.729289055 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.729356050 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.729446888 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.729459047 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.746620893 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.746778965 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.746826887 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.746846914 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.746961117 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.747009039 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.747015953 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.747347116 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.747397900 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.747402906 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.747493982 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.747533083 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.747538090 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.748085022 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.748133898 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.748140097 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.751202106 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.751256943 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.751261950 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.810272932 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.834583998 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834625959 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834635973 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.834647894 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834703922 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.834708929 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834743977 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834779978 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834784985 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.834800005 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.834835052 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.835445881 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.835504055 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.835541010 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.835546017 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.835551977 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.835588932 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.835979939 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836085081 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836122036 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836127996 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.836133003 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836177111 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.836180925 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836797953 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836837053 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836846113 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.836849928 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836895943 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.836899996 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836942911 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.836985111 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.836988926 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.837709904 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.837762117 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.837766886 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.921001911 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.922651052 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.922722101 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.922769070 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.922774076 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.922811985 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.922852993 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.922857046 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.922967911 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923019886 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923026085 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923064947 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923253059 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923260927 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923296928 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923299074 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923345089 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923350096 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923389912 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923508883 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923559904 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923563957 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923609972 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.923626900 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.923681021 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.925522089 CET	49735	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:34.925534964 CET	443	49735	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:34.938611984 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:34.938632965 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:34.938688040 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:34.939069986 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:34.939080000 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:34.988917112 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998536110 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998543024 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998586893 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998604059 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998615980 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998620033 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.998657942 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998670101 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:34.998678923 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:34.998703957 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.063242912 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.063528061 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.063544989 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.064554930 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.064615011 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.065677881 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.065736055 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.065823078 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.065830946 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.077641964 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.077656984 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.077697992 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.077712059 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.077740908 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.077756882 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.084774971 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.084799051 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.084850073 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.084871054 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.084888935 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.086597919 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.086796045 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.086812019 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.088265896 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.088340044 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.088701010 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.088876009 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.088886976 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.106257915 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.135329008 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.162350893 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.162364960 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.162446022 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.162477016 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164072990 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164082050 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164093971 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164122105 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164144993 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.164155960 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.164175034 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.166698933 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.166712999 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.166738033 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.166766882 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.166776896 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.166800022 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.171159029 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.171180010 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.171224117 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.171233892 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.171252966 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.177575111 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.177635908 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.177687883 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.178270102 CET	49743	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.178287029 CET	443	49743	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.180677891 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.186562061 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.191540956 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.191580057 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.191643000 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.191852093 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.191865921 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.204267025 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.204327106 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.204350948 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.204365015 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.204410076 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.204435110 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.205490112 CET	49742	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.205506086 CET	443	49742	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.207688093 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.208672047 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.208688974 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.208765984 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.208942890 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.208952904 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.212436914 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.217498064 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.248092890 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.248101950 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.248157024 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.248176098 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.248244047 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.248358965 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.248795986 CET	49738	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.248815060 CET	443	49738	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.270984888 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.271011114 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.271106958 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.271428108 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.271440983 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.278671026 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.279278040 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.279326916 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.279396057 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.279628992 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.279644966 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.280126095 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.280154943 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.280211926 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.280386925 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.280402899 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.305872917 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.383793116 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.384326935 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.384355068 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.385890961 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.385988951 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.387268066 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.387388945 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.387588978 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.387594938 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.406486988 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.478982925 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.479032993 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.479178905 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.479813099 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.479850054 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.479944944 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.482840061 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.482861042 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.485224009 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.485239029 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.486635923 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.486701012 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.486763000 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.487243891 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.487260103 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.487715960 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.487725019 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.487803936 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.488343954 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.488353968 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.489059925 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.489069939 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.489229918 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.489432096 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.489440918 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.491136074 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.491194010 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.491264105 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.491561890 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.491592884 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.499943018 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.500016928 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.519617081 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.522680998 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522737026 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522777081 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522784948 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.522793055 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522850037 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522864103 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.522869110 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.522916079 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.522919893 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.523422956 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.523662090 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.523668051 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.524044037 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.524095058 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.524100065 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.573252916 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.573312044 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.573426008 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.573712111 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.573730946 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.605926037 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.605972052 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606018066 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606040001 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.606048107 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606081963 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606085062 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.606123924 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.606128931 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606329918 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606369019 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606412888 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.606419086 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606458902 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.606463909 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.606973886 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607011080 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607055902 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607068062 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.607074976 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607103109 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.607126951 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607157946 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607176065 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.607182026 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607918978 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607963085 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.607980013 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.607985020 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608011961 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.608071089 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608107090 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608133078 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.608139038 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608726025 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608781099 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.608788013 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.608829021 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.689342022 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.689673901 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.689748049 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.689759016 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.689837933 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.689892054 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.689897060 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690032005 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690098047 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690103054 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690128088 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690180063 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690186024 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690282106 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690567970 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690757990 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690813065 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690819025 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690831900 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690880060 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690885067 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.690928936 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.690933943 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.691061020 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.691121101 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.691190958 CET	49744	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:35.691198111 CET	443	49744	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:35.707149982 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.708666086 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.708681107 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.709069967 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.711514950 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.711584091 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.712080002 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.720849037 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.731507063 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.755326033 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.779644012 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.779655933 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.779807091 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.779836893 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.780811071 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.780868053 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.781405926 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.781424999 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.781456947 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.782079935 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.782179117 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.782394886 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.782488108 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.782517910 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.782531023 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.782720089 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.782727003 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.815514088 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.834196091 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834242105 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834270000 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834310055 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834327936 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.834337950 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834376097 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834384918 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.834391117 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834433079 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.834938049 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.834991932 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.835027933 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.835040092 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.835046053 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.835072994 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.838953972 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.839668036 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.839674950 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.879659891 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.881567955 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.881622076 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.881633043 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.881656885 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.881670952 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.881716967 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.881742001 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.883068085 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.886982918 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.910516977 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.910520077 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.916959047 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917021036 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917048931 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917083025 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.917093039 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917146921 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.917311907 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917630911 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917666912 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917680979 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.917686939 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.917726994 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.918138027 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.918194056 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.918231964 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.918265104 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.918272018 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.918319941 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.918315887 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.918376923 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.919011116 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919011116 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.919061899 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919090986 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919117928 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919142962 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.919151068 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919159889 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.919852018 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919888973 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919919968 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919933081 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.919940948 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.919970989 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.920644045 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.920684099 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.920690060 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.920953035 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.920989037 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.920994043 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.921031952 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.922980070 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.955626965 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.955642939 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.956455946 CET	49746	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.956480026 CET	443	49746	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.956975937 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.957288980 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.957441092 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:35.957636118 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.957818985 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:35.958193064 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:35.958309889 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:35.962908030 CET	49747	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:35.962922096 CET	443	49747	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:35.963741064 CET	49748	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:35.963747025 CET	443	49748	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:35.999365091 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.003340006 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.025186062 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.025644064 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.025685072 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.027192116 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.027255058 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.029550076 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.029638052 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.031044960 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.031058073 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.047025919 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.047343016 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.047365904 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.048780918 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.049505949 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.049652100 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.049659967 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.049689054 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.083194017 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.084135056 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.084147930 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.085119009 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.085177898 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.085525036 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.085568905 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.085867882 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.085872889 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.092135906 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.092319012 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.092325926 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.095655918 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.095738888 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.096189022 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.096194983 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.096265078 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.096611023 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.096640110 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.096905947 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.096910954 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.097512007 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.097568035 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.098165035 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.098222017 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.098292112 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.108006001 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.108258009 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.108290911 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.109386921 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.109455109 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.109780073 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.109839916 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.109999895 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.110007048 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.112596989 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.112651110 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.112761974 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.112993002 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.113003016 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.121262074 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.121578932 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.121589899 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.122454882 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.122528076 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.123594999 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.123651028 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.123812914 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.143330097 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.146564960 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.146588087 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.146598101 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.171329975 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.173197985 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.173252106 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.173284054 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.173317909 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.173331976 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.173336029 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.173352003 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.173357010 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.173439026 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.173444986 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.212575912 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.212625980 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.212631941 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.212660074 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.218080044 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.218283892 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.220261097 CET	49757	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.220283985 CET	443	49757	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.254550934 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.254565954 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.254590034 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.254615068 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.254631996 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.254678965 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.255584002 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.255594969 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.255628109 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.255645990 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.255656004 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.255676985 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.261235952 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261246920 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261277914 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261287928 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261287928 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.261327982 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261334896 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.261353016 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.261414051 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.266486883 CET	49751	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:36.266498089 CET	443	49751	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:36.271447897 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.407408953 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.444374084 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453521967 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453533888 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453567028 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453577995 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453577042 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.453581095 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453612089 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.453633070 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.453653097 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.453687906 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.535147905 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.535175085 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.535204887 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.535219908 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.535244942 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.535263062 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.536863089 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.536897898 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.536961079 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.536967039 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.550401926 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.551400900 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.551420927 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.551945925 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.552820921 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.552917957 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.552980900 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.599329948 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.609230042 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.609266996 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.609302998 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.609313011 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.609352112 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.610511065 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.610522032 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.610553026 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.610593081 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.610599041 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.610635996 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.616498947 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.616523981 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.616558075 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.616564035 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.616583109 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.617669106 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.617688894 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.617732048 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.617738008 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.617759943 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.624454021 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.624500990 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:36.624567032 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.624768972 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.624789953 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:36.676495075 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676542044 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676577091 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676615000 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676652908 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676667929 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.676692963 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.676718950 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.676899910 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.678972960 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.678991079 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.681216955 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.681258917 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.681278944 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.681289911 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.682969093 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.682986975 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.691744089 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.691781044 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.691812992 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.691831112 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.691859007 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.692811012 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.692842960 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.692853928 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.692867994 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.692874908 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.692892075 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.692910910 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.692931890 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.693543911 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.693576097 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.693624973 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.693629026 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.693645000 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.693646908 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.693662882 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.693701029 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.717235088 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.719647884 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.719665051 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.719698906 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.719727039 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.719743967 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.719768047 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.727610111 CET	49749	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.727644920 CET	443	49749	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.727879047 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737520933 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737530947 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737567902 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737581968 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737591982 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737600088 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.737607002 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.737627983 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.737662077 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.757574081 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.758897066 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.758951902 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.758975029 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.758987904 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759078026 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.759100914 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759186029 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759231091 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.759237051 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759546041 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759596109 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.759602070 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759615898 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759660959 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.759666920 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759747982 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759785891 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759798050 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.759805918 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.759846926 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.760385990 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760462999 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760504961 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760519028 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.760526896 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760565996 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.760582924 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760679960 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.760747910 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.760754108 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761291027 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761331081 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761356115 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.761360884 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761426926 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761467934 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.761473894 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761509895 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.761517048 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761588097 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.761661053 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.762495041 CET	49759	443	192.168.2.4	104.17.25.14
Dec 30, 2024 09:28:36.762507915 CET	443	49759	104.17.25.14	192.168.2.4
Dec 30, 2024 09:28:36.767455101 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767487049 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767519951 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767529964 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.767544031 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767565966 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767573118 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.767585039 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767604113 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767661095 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.767674923 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.767709017 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.767709017 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.795636892 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.795659065 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.795663118 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.795722961 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.795742035 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.795783043 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.796194077 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.796237946 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.797066927 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.797101974 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:36.797163963 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.797447920 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:36.797458887 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:36.799566984 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.799582958 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.799597979 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.799617052 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.799622059 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.799638033 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.799663067 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.799679995 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.802771091 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.802782059 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.802809000 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.802820921 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.818787098 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818800926 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818823099 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818831921 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818854094 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818862915 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.818876982 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.818928003 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.827037096 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.827075005 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.827106953 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.827114105 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.827150106 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.833121061 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.833142042 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.833184004 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.833211899 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.833225012 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.833255053 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.833261967 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.833292961 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.836430073 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.836464882 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.836488962 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.836493969 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.836529970 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.840559006 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:36.840614080 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:36.840745926 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:36.841208935 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:36.841226101 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:36.858912945 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.858925104 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.858952045 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.858964920 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.858988047 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.859014988 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.859034061 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.873029947 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873039007 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873055935 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873063087 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873064995 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873080969 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.873102903 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873128891 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.873128891 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.873152971 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.883181095 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.883379936 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.883407116 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.891916990 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.891963005 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.891988993 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.892005920 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.892251015 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.894243956 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894260883 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894277096 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894294977 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894303083 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894309998 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894571066 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.894578934 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894608021 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.894634008 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.894862890 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.896671057 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.896678925 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.896747112 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.901314020 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.901355982 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.901386976 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.901391029 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.901451111 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.904804945 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.904846907 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.904865980 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.904869080 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.904917955 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.905109882 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.905158997 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.909183979 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909193039 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909224033 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909238100 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909256935 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.909260988 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909298897 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.909518957 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909542084 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909581900 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.909588099 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.909604073 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.914205074 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.914212942 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.914242983 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.914277077 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.914300919 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.917470932 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.917505980 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.917530060 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.917534113 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.917576075 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.919883013 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.919939041 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.923779964 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.923804045 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.923862934 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.923870087 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.923902988 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.924599886 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.924658060 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.926119089 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.926186085 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.926192045 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.931734085 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.931797028 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.933231115 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.933269024 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.933300018 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.933306932 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.933355093 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.936449051 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.936517000 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.938338995 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938352108 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938374996 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938383102 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938390970 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.938407898 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938419104 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938426018 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.938461065 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.938467026 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.938738108 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.948900938 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.948909044 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.948940039 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.948956966 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.949162960 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.949192047 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.949239969 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.962908030 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.962914944 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.962935925 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.962964058 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.962966919 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.963023901 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.963036060 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.963089943 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.974560022 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.974589109 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.974677086 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.974685907 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.974726915 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.974935055 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.974946022 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.974987984 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.975013971 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.975104094 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.977411032 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.977420092 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.977495909 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.981884956 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.981906891 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.981955051 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.981966019 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.982007980 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.982023954 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.983931065 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.983968019 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.983994961 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.983999014 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.984033108 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.984045982 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.984816074 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.984824896 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.984853029 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.984886885 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.984910965 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.984924078 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.984946966 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.985910892 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.985939980 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.985977888 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.985981941 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.986036062 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.987457991 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.987471104 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.987499952 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.987525940 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.987535954 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.987541914 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.987593889 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.988325119 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.988353014 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.988382101 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.988389969 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.988423109 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.988441944 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.992080927 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.992126942 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.992145061 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.992151976 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.992192984 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.993005037 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.993036032 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.993077993 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.993081093 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.993100882 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.993123055 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.997751951 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.997783899 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.997817039 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.997821093 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.997869968 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.999201059 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.999222994 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.999258995 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.999264956 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.999294043 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.999315977 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:36.999908924 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:36.999948025 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.000201941 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.000257969 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.000283957 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.000293016 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.004863977 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.004926920 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.004951000 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.004988909 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.005300045 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.005337954 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.005374908 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.005383015 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.005462885 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.007826090 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.007843018 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.007942915 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.007950068 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.008198977 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.009397030 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.009917021 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.009979963 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.014039993 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014069080 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014116049 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.014126062 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014175892 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.014197111 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.014410019 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014442921 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014465094 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.014467955 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.014610052 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.021487951 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.021508932 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.021557093 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.021584034 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.021600008 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.021624088 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.022671938 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.022690058 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.022741079 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.022747040 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.022958040 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.024625063 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.024642944 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.024687052 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.024701118 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.026956081 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.027055979 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.027090073 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.027111053 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.027118921 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.027143955 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.027159929 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.030507088 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.030522108 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.030565023 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.030579090 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.030600071 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.030616045 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.032543898 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.032558918 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.032617092 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.032622099 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.032675028 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.034198046 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.034250021 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.035224915 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.035259962 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.035294056 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.035303116 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.038306952 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.041155100 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.041183949 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.041233063 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.041239977 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.041274071 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.041282892 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.042457104 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.042473078 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.042516947 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.042529106 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.044070959 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.044142008 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.044943094 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.049448013 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.049464941 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.049539089 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.049562931 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.050812960 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.056334019 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.056365967 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.056407928 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.056432962 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.056447983 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.056884050 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.056931973 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.056937933 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.057818890 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.057845116 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.057878971 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.057884932 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.057920933 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.059585094 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.059600115 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.059664965 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.059685946 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.062972069 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.063050985 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.063119888 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.065553904 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065567970 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065572977 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065610886 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065615892 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.065623999 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065690994 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.065711975 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.065741062 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.067605972 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067622900 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067687035 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.067692041 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067699909 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067740917 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.067744017 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067814112 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067871094 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.067874908 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.067889929 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.067924976 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.068301916 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.068361044 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.068797112 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.068835020 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.068861961 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.068865061 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.068885088 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.068914890 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.070524931 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.070580959 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.072334051 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.072359085 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.072396994 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.072402000 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.072433949 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.072871923 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.072937965 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.074450016 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074501991 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.074510098 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074527025 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074569941 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074570894 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.074588060 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074641943 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.074647903 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.074737072 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.075381041 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.075514078 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.075592041 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.075637102 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.077429056 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.077641010 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.077896118 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.077948093 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.079879045 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.082789898 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.082819939 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.082845926 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.082866907 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.082916975 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.083420992 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.083436966 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.083475113 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.083498955 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.083513975 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.083549023 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.086252928 CET	49754	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.086260080 CET	443	49754	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.088165045 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.088424921 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.088433027 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.093080044 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.093096972 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.093138933 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.093144894 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.093175888 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.093197107 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.095523119 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.095555067 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.095590115 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.095597982 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.095628023 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.103080988 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.103096008 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.103180885 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.103194952 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.110009909 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.110019922 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.110081911 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.110090017 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.110172987 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.110251904 CET	49752	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.110259056 CET	443	49752	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.111536026 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.111563921 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.111588955 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.111593962 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.111629963 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.116916895 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.116935015 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.116988897 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.117000103 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.117037058 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.121685982 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121701002 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121737003 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121742964 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.121748924 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121797085 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.121804953 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121815920 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.121862888 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.123135090 CET	49755	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.123146057 CET	443	49755	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.132235050 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.132308006 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.132318020 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.132359982 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.149976969 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.150039911 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.150052071 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.153424025 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.153438091 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.153492928 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.153506041 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.154371023 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.154383898 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.154428959 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.154438019 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.154472113 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.154483080 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.158871889 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.158889055 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.158941984 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.158951044 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.158967972 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.159004927 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.161129951 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.161163092 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.161185980 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.161201000 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.161263943 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.166055918 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.166116953 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.166140079 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.166186094 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.166404009 CET	49753	443	192.168.2.4	13.32.121.110
Dec 30, 2024 09:28:37.166409969 CET	443	49753	13.32.121.110	192.168.2.4
Dec 30, 2024 09:28:37.173638105 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.173938990 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.173949957 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.174751043 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.175077915 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.175159931 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.175230980 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.215337038 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.294811010 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.294881105 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.295059919 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.296979904 CET	49762	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.297004938 CET	443	49762	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.321522951 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.321814060 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.321830034 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.322287083 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.322658062 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.322782993 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.322798014 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.322985888 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.421230078 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.426147938 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.426181078 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.426191092 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.426214933 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.426224947 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.426242113 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.426275969 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.432058096 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.432068110 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.432094097 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.432183981 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.432192087 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.432235956 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.440382957 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.440609932 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.440625906 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.441685915 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.441737890 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.442075014 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.442140102 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.442224979 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.483333111 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.507958889 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.507975101 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.508028984 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.508043051 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.509325981 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.509352922 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.509361982 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.509393930 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.509402037 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.509437084 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.509447098 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.514430046 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.514494896 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.514499903 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.514669895 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.514727116 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.514731884 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.514766932 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.514794111 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.514827967 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.515008926 CET	49764	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:37.515021086 CET	443	49764	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:37.609239101 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.609263897 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.711915970 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.711930037 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.711960077 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.711976051 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.711985111 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.712013006 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.712025881 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.712034941 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.712049961 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.712074041 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.783730030 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783749104 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783792973 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783802032 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783829927 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.783857107 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783869982 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.783878088 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.783891916 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.783926964 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.790899992 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.790909052 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.790942907 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.790950060 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.790978909 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.790998936 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.791028023 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.791049957 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.864703894 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.864722013 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.864783049 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.864795923 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.864847898 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.866360903 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.866384029 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.866424084 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.866436005 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.866460085 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.866487026 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.868942022 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.868966103 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.869020939 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.869036913 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.869051933 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.869075060 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.878145933 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.878169060 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.878217936 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.878241062 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.878254890 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.878278971 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947118044 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947232008 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947251081 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947273016 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947289944 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947309971 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947858095 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947880030 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947925091 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947933912 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.947988033 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.947997093 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.948013067 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.948052883 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.948170900 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.948185921 CET	443	49765	13.32.121.35	192.168.2.4
Dec 30, 2024 09:28:37.948221922 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:37.948244095 CET	49765	443	192.168.2.4	13.32.121.35
Dec 30, 2024 09:28:38.237227917 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.237274885 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.237330914 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.237617016 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.237629890 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.844799995 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.909358025 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.909385920 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.910540104 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.910557032 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:38.910605907 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.921108007 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:38.921195984 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:39.014199018 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:39.014225960 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:39.219429016 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:39.838701010 CET	49723	80	192.168.2.4	199.232.214.172
Dec 30, 2024 09:28:39.843775034 CET	80	49723	199.232.214.172	192.168.2.4
Dec 30, 2024 09:28:39.843826056 CET	49723	80	192.168.2.4	199.232.214.172
Dec 30, 2024 09:28:46.442151070 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:46.442168951 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.442235947 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:46.442826986 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:46.442837000 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.966679096 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.969274044 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:46.969285011 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.969577074 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.973864079 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:46.973921061 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:46.974019051 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.019334078 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.137460947 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.137578011 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.137692928 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.232669115 CET	49774	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.232678890 CET	443	49774	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.604300022 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.604327917 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.604396105 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.604707003 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:47.604720116 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:47.915090084 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:47.915184021 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:47.915257931 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:47.915498018 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:47.915533066 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.128905058 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.129204988 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.129221916 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.130105972 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.130162001 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.130549908 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.130601883 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.130711079 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.130717039 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.130733013 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.175329924 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.181943893 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.262553930 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.262572050 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.262643099 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.262653112 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.262705088 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.262731075 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.262743950 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.262753963 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.268775940 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.268822908 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.268871069 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.268879890 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.268922091 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.325445890 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.325470924 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.325545073 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.325757980 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.325768948 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.346503973 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.346522093 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.346609116 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.346616030 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.346662998 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.351722002 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.351737976 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.351793051 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.351792097 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.351819038 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.351850986 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.351871014 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.394857883 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.394937038 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.394974947 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.395015955 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.395319939 CET	49776	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:48.395327091 CET	443	49776	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:48.444147110 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.444628954 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.444677114 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.445125103 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.445638895 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.445729017 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.445766926 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.488724947 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.488737106 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.557055950 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.557313919 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.557481050 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.558974028 CET	49777	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:48.559015989 CET	443	49777	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:48.749097109 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:48.749151945 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:48.749208927 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:48.933840990 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.934212923 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.934227943 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.935200930 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.935267925 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.935564041 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.935628891 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.935738087 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:48.935745001 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:48.982449055 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.194638968 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.203999043 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.204008102 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.204018116 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.204217911 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.204245090 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.204308987 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.281702995 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.281722069 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.281810045 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.281820059 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.281867027 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.288647890 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.288662910 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.288738012 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.288744926 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.288798094 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.364381075 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.364423990 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.364460945 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.364469051 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.364517927 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.366071939 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.366086960 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.366157055 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.366163969 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.368669033 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.368681908 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.368738890 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.368747950 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.373172045 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.373184919 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.373259068 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.373265982 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.421391010 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.448517084 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.448590994 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.448606014 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.448611975 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.448674917 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.454443932 CET	49778	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.454468966 CET	443	49778	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.466347933 CET	49768	443	192.168.2.4	142.250.185.196
Dec 30, 2024 09:28:49.466361046 CET	443	49768	142.250.185.196	192.168.2.4
Dec 30, 2024 09:28:49.467278957 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.467322111 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.467381001 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.467612028 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.467622995 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.474107027 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.474133968 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.474200010 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.474378109 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.474390984 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.494481087 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.494493008 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.494554996 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.494751930 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.494761944 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.495691061 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.495718002 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.495781898 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.496354103 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:49.496365070 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:49.924537897 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.924912930 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.924954891 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.925838947 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.925913095 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.926224947 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.926280975 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.926363945 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.926376104 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:49.967987061 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.968023062 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.968091011 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.968337059 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.968353033 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.981343985 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:49.990890026 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.991144896 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.991168022 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.991489887 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.991789103 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:49.991843939 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:49.991949081 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.039335966 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.070069075 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070125103 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070158005 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070174932 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.070194960 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070234060 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.070236921 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070247889 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070296049 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.070544958 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070597887 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070622921 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070637941 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.070647001 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.070687056 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.071305037 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.074825048 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.074882984 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.074892998 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.097476006 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.097721100 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.097733974 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.098803997 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.098877907 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.099183083 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.099251032 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.099347115 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.099355936 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.111280918 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.111305952 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.111347914 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.111365080 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.111371040 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.111383915 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.117186069 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.117383003 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.117396116 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.118221998 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.118257046 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.118283987 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.118289948 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.118297100 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.118335009 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.118357897 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.118669033 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.118721008 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.118815899 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.118822098 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.129745007 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.144912004 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.156429052 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.156615973 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.156651020 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.156666040 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.156691074 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.156732082 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.156740904 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157202005 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157238007 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157243967 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.157250881 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157289982 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.157295942 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157332897 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157383919 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.157385111 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157397032 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.157439947 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.158150911 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158225060 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158257008 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158273935 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.158281088 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158320904 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.158655882 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158724070 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158759117 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158775091 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.158782005 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.158822060 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.158829927 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159526110 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159564972 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159574986 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.159584045 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159621954 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.159630060 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159686089 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.159732103 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.160540104 CET	49782	443	192.168.2.4	104.17.24.14
Dec 30, 2024 09:28:50.160557985 CET	443	49782	104.17.24.14	192.168.2.4
Dec 30, 2024 09:28:50.168669939 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.193475008 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.193555117 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.193561077 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.195590973 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.195612907 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.195658922 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.195664883 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.195693970 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.203088999 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203103065 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203161001 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.203167915 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203413963 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203453064 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.203458071 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203484058 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.203497887 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.203528881 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.253106117 CET	49781	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.253133059 CET	443	49781	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.260627031 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.260659933 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.260711908 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.260991096 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.261013031 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.370302916 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370326042 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370333910 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370363951 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370392084 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.370400906 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370409012 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.370428085 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.370452881 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.389348984 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389370918 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389377117 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389394999 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389425993 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.389425993 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389448881 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.389458895 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.389487982 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.389502048 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.391335964 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.391382933 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.447324991 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.447346926 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.447402000 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.447412968 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.447438002 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.447459936 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.452929974 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.452949047 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.453006029 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.453015089 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.453051090 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.453068972 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.471357107 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.471390963 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.471425056 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.471437931 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.471451998 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.471482992 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.476172924 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.476197958 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.476234913 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.476241112 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.476264954 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.476280928 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.491978884 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.506162882 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.506185055 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.506584883 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.509367943 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.509448051 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.509660959 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:50.535578966 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.535612106 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.535634041 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.535640955 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.535696030 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.535696030 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.536256075 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.536276102 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.536310911 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.536315918 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.536355019 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.536374092 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.537394047 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.537431955 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.537471056 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.537477016 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.537504911 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.537528992 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.539710999 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.539738894 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.539763927 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.539771080 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.539798021 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.539823055 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.555342913 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:50.556858063 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.556905031 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.556937933 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.556947947 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.556986094 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.559190989 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.559215069 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.559258938 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.559273958 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.559308052 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.559335947 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.560415983 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.560436964 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.560484886 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.560489893 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.560524940 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.560544014 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.563587904 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.563608885 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.563643932 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.563647985 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.563713074 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.617466927 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.617494106 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.617533922 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.617542028 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.617571115 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.617594957 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618334055 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618350983 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618386030 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618392944 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618423939 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618432045 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618746042 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618762016 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618798018 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618804932 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.618832111 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.618855000 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.619918108 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.619932890 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.619965076 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.619971037 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.619995117 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.620022058 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.642980099 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643011093 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643043995 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643058062 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643080950 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643081903 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643104076 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643107891 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643136024 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643170118 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643778086 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643814087 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643831968 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643836021 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.643865108 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.643876076 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.644340992 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.644364119 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.644393921 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.644398928 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.644426107 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.644438982 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647557974 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647583008 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647614956 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647624969 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647658110 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647667885 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647840977 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647862911 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647895098 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647902012 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.647927046 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.647944927 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.649446964 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.649468899 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.649507046 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.649512053 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.649538040 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.649569988 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.650023937 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.650053024 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.650074959 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.650079966 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.650105953 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.650125027 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.656627893 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.666048050 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.666075945 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.666110039 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.666115999 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.666148901 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.666163921 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.700783014 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.700814962 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.700845003 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.700853109 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.700906992 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.700906992 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701041937 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701061964 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701091051 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701097012 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701127052 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701147079 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701575994 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701591015 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701638937 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701646090 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.701703072 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.701989889 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702008009 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702038050 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702044010 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702069044 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702101946 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702451944 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702466965 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702521086 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702526093 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702564955 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702733040 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702759027 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702769995 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702775002 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.702786922 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.702826023 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.703063965 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.703114986 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.703120947 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.703160048 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.703214884 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729804993 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729835987 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729872942 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729883909 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729895115 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729922056 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729926109 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729935884 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729964018 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.729974031 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729990005 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.729994059 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730020046 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730046988 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730170965 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730195999 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730226994 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730231047 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730256081 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730293036 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730659962 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730695963 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730726957 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730741978 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.730772972 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.730789900 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.731796026 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.731843948 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.731863022 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.731868982 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.731895924 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.731921911 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.731966972 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.772896051 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.774981022 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.784801960 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.785738945 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.785752058 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.786113024 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.788404942 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.788516045 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.790169001 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.791786909 CET	49783	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.791798115 CET	443	49783	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.835330963 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.836455107 CET	49784	443	192.168.2.4	13.32.121.40
Dec 30, 2024 09:28:50.836472034 CET	443	49784	13.32.121.40	192.168.2.4
Dec 30, 2024 09:28:50.890355110 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.890379906 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.890417099 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.890460968 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.890491962 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.890508890 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.929970980 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.972265005 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.972279072 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.972309113 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.972332954 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.972342014 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.972357988 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.972373962 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.974769115 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.974792957 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.974826097 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.974844933 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.974862099 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.981760979 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981818914 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.981826067 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981838942 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981853008 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981877089 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.981890917 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981908083 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.981940985 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.981960058 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.981970072 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:50.982012987 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.989778996 CET	49788	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:50.989804029 CET	443	49788	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:51.076431990 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.076513052 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.076585054 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.123600960 CET	49750	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.123629093 CET	443	49750	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.128035069 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.128066063 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.128129005 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.128468037 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.128479958 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.132359028 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.132594109 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.132637024 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.132977009 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.132993937 CET	443	49756	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.132998943 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.133066893 CET	49756	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.135138035 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.135179043 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.135265112 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.135468960 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.135484934 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.662776947 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.663038969 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.663053036 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.663373947 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.663810968 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.663882971 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.663966894 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.684254885 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.684452057 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.684470892 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.684748888 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.685636997 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.685694933 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.685775995 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:51.707333088 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:51.731338978 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:58.493402958 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:58.493458033 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:58.493521929 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:58.493856907 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:58.493875027 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.046400070 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.105678082 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.144757032 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.144769907 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.145237923 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.153841019 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.153907061 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.154006958 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.154019117 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.318526030 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.318597078 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.318798065 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.323828936 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.323916912 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.323964119 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.392019987 CET	49793	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.392039061 CET	443	49793	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.393223047 CET	49787	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:28:59.393229008 CET	443	49787	34.199.33.163	192.168.2.4
Dec 30, 2024 09:28:59.544472933 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.544509888 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:59.544611931 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.544837952 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.544850111 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:59.546278000 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.546384096 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:28:59.546452045 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.546669960 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:28:59.546706915 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.069720030 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.069996119 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.070060968 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.070429087 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.070794106 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.070885897 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.070991993 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.080044985 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.080246925 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.080261946 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.080650091 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.080914974 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.080981970 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.081000090 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.111327887 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.121736050 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.121742964 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.190478086 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.191355944 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.191433907 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.191643953 CET	49795	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.191687107 CET	443	49795	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.203707933 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.203797102 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:00.203850031 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.204547882 CET	49794	443	192.168.2.4	44.219.110.92
Dec 30, 2024 09:29:00.204560995 CET	443	49794	44.219.110.92	192.168.2.4
Dec 30, 2024 09:29:20.293206930 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:29:20.298096895 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:29:20.309237003 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:29:20.314106941 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:29:29.130733967 CET	49724	80	192.168.2.4	199.232.214.172
Dec 30, 2024 09:29:29.135966063 CET	80	49724	199.232.214.172	192.168.2.4
Dec 30, 2024 09:29:29.136070013 CET	49724	80	192.168.2.4	199.232.214.172
Dec 30, 2024 09:29:36.717580080 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:29:36.717592001 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:29:36.732853889 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:29:36.732887983 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:29:38.266866922 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:38.266894102 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.266961098 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:38.267168045 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:38.267183065 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.869239092 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.869523048 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:38.869539976 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.869858980 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.870148897 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:38.870208025 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:38.922360897 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:48.782357931 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:48.782426119 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:29:48.782474041 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:50.337819099 CET	49929	443	192.168.2.4	142.250.185.132
Dec 30, 2024 09:29:50.337846041 CET	443	49929	142.250.185.132	192.168.2.4
Dec 30, 2024 09:30:05.304420948 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:05.309375048 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:05.319794893 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:05.324601889 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:21.732482910 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:21.732492924 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:21.743284941 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:21.743326902 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.778739929 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.779037952 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.779165983 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.780555964 CET	49790	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.780580997 CET	443	49790	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.797899008 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.798264980 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.798367977 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.799649954 CET	49789	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.799673080 CET	443	49789	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.809777975 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.809833050 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.809897900 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.809916973 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.809948921 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.810156107 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.810173035 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:36.810183048 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.810312033 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:36.810328007 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.333765030 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.334146023 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.334171057 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.334467888 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.335061073 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.335114956 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.335213900 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.346673965 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.346889973 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.346909046 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.347239017 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.347511053 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.347572088 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.347606897 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.375339031 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:37.387602091 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:37.387613058 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:38.312640905 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:38.312691927 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.312783957 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:38.313097954 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:38.313116074 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.917232990 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.917623997 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:38.917656898 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.918005943 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.918308973 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:38.918406963 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:38.965733051 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:48.872328043 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:48.872437954 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:48.872508049 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:50.016655922 CET	50067	443	192.168.2.4	142.250.186.68
Dec 30, 2024 09:30:50.016693115 CET	443	50067	142.250.186.68	192.168.2.4
Dec 30, 2024 09:30:50.309226990 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:50.314228058 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:30:50.324532032 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:30:50.329472065 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:22.384675026 CET	50065	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:22.384699106 CET	443	50065	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:22.399827957 CET	50066	443	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:22.399846077 CET	443	50066	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:35.277885914 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:35.277997017 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:35.308758974 CET	80	49737	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:35.308816910 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:36.227387905 CET	49736	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:36.227433920 CET	49737	80	192.168.2.4	34.199.33.163
Dec 30, 2024 09:31:36.232445955 CET	80	49736	34.199.33.163	192.168.2.4
Dec 30, 2024 09:31:36.232461929 CET	80	49737	34.199.33.163	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 09:28:33.789326906 CET	53	58655	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:33.842072010 CET	53	60331	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.049925089 CET	54985	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.050080061 CET	61782	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.050700903 CET	59161	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.050983906 CET	59212	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.051690102 CET	65480	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.051834106 CET	53774	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.055763960 CET	53	56650	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.057787895 CET	53	59161	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.057797909 CET	53	59212	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.063024998 CET	53	53774	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.063040018 CET	53	65480	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.101510048 CET	53	61782	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.101826906 CET	53	54985	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.516849995 CET	53158	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.517204046 CET	53406	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.523967981 CET	53	53406	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.525460958 CET	53	53158	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.816159010 CET	53	58431	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.931216002 CET	53824	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.931375980 CET	54916	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:34.937980890 CET	53	54916	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:34.938009024 CET	53	53824	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:35.167263985 CET	53	61366	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:35.182132006 CET	49180	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:35.182277918 CET	57354	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:35.191055059 CET	53	57354	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:35.191196918 CET	53	49180	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:36.802021027 CET	58602	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:36.802149057 CET	60506	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:36.827810049 CET	53	60506	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:36.840070963 CET	53	58602	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:38.188162088 CET	61890	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:38.188620090 CET	51209	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:38.194734097 CET	53	61890	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:38.195240974 CET	53	51209	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:40.721391916 CET	138	138	192.168.2.4	192.168.2.255
Dec 30, 2024 09:28:47.499675035 CET	53	57979	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:47.587838888 CET	52594	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:47.588485956 CET	49483	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:47.594830990 CET	53	52594	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:47.597362995 CET	53	49483	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:48.290294886 CET	51899	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:48.290456057 CET	57673	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:48.323066950 CET	53	51899	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:48.324862003 CET	53	57673	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:49.466728926 CET	54771	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:49.466851950 CET	53027	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:28:49.473503113 CET	53	53027	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:49.473742962 CET	53	54771	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:49.501945019 CET	53	59093	1.1.1.1	192.168.2.4
Dec 30, 2024 09:28:51.864526987 CET	53	52577	1.1.1.1	192.168.2.4
Dec 30, 2024 09:29:10.613941908 CET	53	58210	1.1.1.1	192.168.2.4
Dec 30, 2024 09:29:33.426570892 CET	53	52050	1.1.1.1	192.168.2.4
Dec 30, 2024 09:29:33.677006960 CET	53	62970	1.1.1.1	192.168.2.4
Dec 30, 2024 09:29:38.253599882 CET	54104	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:29:38.253644943 CET	57930	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:29:38.260215044 CET	53	57930	1.1.1.1	192.168.2.4
Dec 30, 2024 09:29:38.260417938 CET	53	54104	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:03.816318989 CET	53	51884	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:36.783806086 CET	61116	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:30:36.783946991 CET	56651	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:30:36.792634964 CET	53	56651	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:36.805778027 CET	53	61116	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:38.304625988 CET	58646	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:30:38.304775953 CET	61639	53	192.168.2.4	1.1.1.1
Dec 30, 2024 09:30:38.311702967 CET	53	58646	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:38.311718941 CET	53	61639	1.1.1.1	192.168.2.4
Dec 30, 2024 09:30:50.024435997 CET	53	49716	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 30, 2024 09:28:34.049925089 CET	192.168.2.4	1.1.1.1	0xe486	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.050080061 CET	192.168.2.4	1.1.1.1	0x9188	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:34.050700903 CET	192.168.2.4	1.1.1.1	0xb949	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.050983906 CET	192.168.2.4	1.1.1.1	0xda39	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:34.051690102 CET	192.168.2.4	1.1.1.1	0xd880	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.051834106 CET	192.168.2.4	1.1.1.1	0x9162	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:34.516849995 CET	192.168.2.4	1.1.1.1	0xf338	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.517204046 CET	192.168.2.4	1.1.1.1	0x96b8	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:34.931216002 CET	192.168.2.4	1.1.1.1	0x19f8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.931375980 CET	192.168.2.4	1.1.1.1	0x9b99	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:35.182132006 CET	192.168.2.4	1.1.1.1	0x2c8e	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:35.182277918 CET	192.168.2.4	1.1.1.1	0x7d14	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:36.802021027 CET	192.168.2.4	1.1.1.1	0xf9b8	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:36.802149057 CET	192.168.2.4	1.1.1.1	0x3b39	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:38.188162088 CET	192.168.2.4	1.1.1.1	0x8a5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:38.188620090 CET	192.168.2.4	1.1.1.1	0x2b4d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:47.587838888 CET	192.168.2.4	1.1.1.1	0xdd55	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:47.588485956 CET	192.168.2.4	1.1.1.1	0x3f52	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:48.290294886 CET	192.168.2.4	1.1.1.1	0xc091	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.290456057 CET	192.168.2.4	1.1.1.1	0xc8b	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 30, 2024 09:28:49.466728926 CET	192.168.2.4	1.1.1.1	0x6d32	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:49.466851950 CET	192.168.2.4	1.1.1.1	0x41	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 30, 2024 09:29:38.253599882 CET	192.168.2.4	1.1.1.1	0xe09d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:29:38.253644943 CET	192.168.2.4	1.1.1.1	0xefdf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 30, 2024 09:30:36.783806086 CET	192.168.2.4	1.1.1.1	0xf427	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:36.783946991 CET	192.168.2.4	1.1.1.1	0x6a81	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 30, 2024 09:30:38.304625988 CET	192.168.2.4	1.1.1.1	0xaf99	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:38.304775953 CET	192.168.2.4	1.1.1.1	0xbd59	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 30, 2024 09:28:34.057787895 CET	1.1.1.1	192.168.2.4	0xb949	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.057787895 CET	1.1.1.1	192.168.2.4	0xb949	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.057797909 CET	1.1.1.1	192.168.2.4	0xda39	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 30, 2024 09:28:34.063040018 CET	1.1.1.1	192.168.2.4	0xd880	No error (0)	res.cisco.com		34.199.33.163	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.063040018 CET	1.1.1.1	192.168.2.4	0xd880	No error (0)	res.cisco.com		54.208.85.60	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.063040018 CET	1.1.1.1	192.168.2.4	0xd880	No error (0)	res.cisco.com		44.219.110.92	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101510048 CET	1.1.1.1	192.168.2.4	0x9188	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101826906 CET	1.1.1.1	192.168.2.4	0xe486	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101826906 CET	1.1.1.1	192.168.2.4	0xe486	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101826906 CET	1.1.1.1	192.168.2.4	0xe486	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.40	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101826906 CET	1.1.1.1	192.168.2.4	0xe486	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.101826906 CET	1.1.1.1	192.168.2.4	0xe486	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.35	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.525460958 CET	1.1.1.1	192.168.2.4	0xf338	No error (0)	res.cisco.com		34.199.33.163	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.525460958 CET	1.1.1.1	192.168.2.4	0xf338	No error (0)	res.cisco.com		44.219.110.92	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.525460958 CET	1.1.1.1	192.168.2.4	0xf338	No error (0)	res.cisco.com		54.208.85.60	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.937980890 CET	1.1.1.1	192.168.2.4	0x9b99	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 30, 2024 09:28:34.938009024 CET	1.1.1.1	192.168.2.4	0x19f8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:34.938009024 CET	1.1.1.1	192.168.2.4	0x19f8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:35.191196918 CET	1.1.1.1	192.168.2.4	0x2c8e	No error (0)	res.cisco.com		44.219.110.92	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:35.191196918 CET	1.1.1.1	192.168.2.4	0x2c8e	No error (0)	res.cisco.com		54.208.85.60	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:35.191196918 CET	1.1.1.1	192.168.2.4	0x2c8e	No error (0)	res.cisco.com		34.199.33.163	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:36.827810049 CET	1.1.1.1	192.168.2.4	0x3b39	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:36.840070963 CET	1.1.1.1	192.168.2.4	0xf9b8	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:36.840070963 CET	1.1.1.1	192.168.2.4	0xf9b8	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.35	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:36.840070963 CET	1.1.1.1	192.168.2.4	0xf9b8	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:36.840070963 CET	1.1.1.1	192.168.2.4	0xf9b8	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:36.840070963 CET	1.1.1.1	192.168.2.4	0xf9b8	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.40	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:38.194734097 CET	1.1.1.1	192.168.2.4	0x8a5	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:38.195240974 CET	1.1.1.1	192.168.2.4	0x2b4d	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 30, 2024 09:28:47.594830990 CET	1.1.1.1	192.168.2.4	0xdd55	No error (0)	res.cisco.com		34.199.33.163	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:47.594830990 CET	1.1.1.1	192.168.2.4	0xdd55	No error (0)	res.cisco.com		54.208.85.60	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:47.594830990 CET	1.1.1.1	192.168.2.4	0xdd55	No error (0)	res.cisco.com		44.219.110.92	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.323066950 CET	1.1.1.1	192.168.2.4	0xc091	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:48.323066950 CET	1.1.1.1	192.168.2.4	0xc091	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.40	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.323066950 CET	1.1.1.1	192.168.2.4	0xc091	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.323066950 CET	1.1.1.1	192.168.2.4	0xc091	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.35	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.323066950 CET	1.1.1.1	192.168.2.4	0xc091	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.62	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:48.324862003 CET	1.1.1.1	192.168.2.4	0xc8b	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 30, 2024 09:28:49.473503113 CET	1.1.1.1	192.168.2.4	0x41	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 30, 2024 09:28:49.473742962 CET	1.1.1.1	192.168.2.4	0x6d32	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:28:49.473742962 CET	1.1.1.1	192.168.2.4	0x6d32	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:29:38.260215044 CET	1.1.1.1	192.168.2.4	0xefdf	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 30, 2024 09:29:38.260417938 CET	1.1.1.1	192.168.2.4	0xe09d	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:36.805778027 CET	1.1.1.1	192.168.2.4	0xf427	No error (0)	res.cisco.com		34.199.33.163	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:36.805778027 CET	1.1.1.1	192.168.2.4	0xf427	No error (0)	res.cisco.com		54.208.85.60	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:36.805778027 CET	1.1.1.1	192.168.2.4	0xf427	No error (0)	res.cisco.com		44.219.110.92	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:38.311702967 CET	1.1.1.1	192.168.2.4	0xaf99	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Dec 30, 2024 09:30:38.311718941 CET	1.1.1.1	192.168.2.4	0xbd59	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

static.cres-aws.com

res.cisco.com

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	34.199.33.163	80	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2024 09:28:34.070359945 CET	477	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 30, 2024 09:28:34.511605978 CET	483	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 30 Dec 2024 08:28:34 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 30, 2024 09:28:35.207688093 CET	487	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 30, 2024 09:28:35.305872917 CET	493	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 30, 2024 09:29:20.309237003 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 30, 2024 09:30:05.319794893 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 30, 2024 09:30:50.324532032 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	34.199.33.163	80	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2024 09:28:34.070503950 CET	12360	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A2049,%0D%0A%27rid%27%3A%27dW5kaXNjbG9zZWQtcmVjaXBpZW50czo7%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27LitVkN4unRcxR7MZw9qwvw%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1734689932148%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,1998%5D,%27Body-1734689932148%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B1998,25799%5D,%27MessageBar%2Ehtml%27,%0D%0A%2 [TRUNCATED] Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzi Data Raw: Data Ascii:
Dec 30, 2024 09:28:34.075458050 CET	46	OUT	Data Raw: 2c 20 64 65 66 6c 61 74 65 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 55 53 2c 65 6e 3b 71 3d 30 2e 39 0d 0a 0d 0a Data Ascii: , deflateAccept-Language: en-US,en;q=0.9
Dec 30, 2024 09:28:34.519610882 CET	137	IN	HTTP/1.1 507 Insufficient Storage Server: awselb/2.0 Date: Mon, 30 Dec 2024 08:28:34 GMT Content-Length: 0 Connection: keep-alive
Dec 30, 2024 09:28:35.180677891 CET	491	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 30, 2024 09:28:35.278671026 CET	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 30, 2024 09:28:35.499943018 CET	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 30, 2024 09:29:20.293206930 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 30, 2024 09:30:05.304420948 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 30, 2024 09:30:50.309226990 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	104.17.24.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:34 UTC	542	OUT	GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:34 UTC	944	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:34 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-3a76" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 504745 Expires: Sat, 20 Dec 2025 08:28:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4A8xh7FXjgmP7%2Fjk73NkJ8b6cVFYoTHy8NkP0eFStQTra9zC711jzzM1ae9WLhOuVZD8niiTT%2F%2BALzR9SUAYf1ioOh7pOV9TDDuidlHzX9Q6W1z5392d6hGBlmYhhYzLpYqs0hYI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a83c1f524357-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:34 UTC	425	IN	Data Raw: 33 61 37 36 0d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: 3a76.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: lipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-containe
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 70 64 6f 77 6e 2d 2d 61 62 6f 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 62 65 6c 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 73 65 61 72 63 68 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 34 Data Ascii: pdown--above{border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-container--open .select2-dropdown--below{border-top:none;border-top-left-radius:0;border-top-right-radius:0}.select2-search--dropdown{display:block;padding:4
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 69 67 68 74 3a 62 6f 6c 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 Data Ascii: ight:bold}.select2-container--default .select2-selection--single .select2-selection__placeholder{color:#999}.select2-container--default .select2-selection--single .select2-selection__arrow{height:26px;position:absolute;top:1px;right:1px;width:20px}.select
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 5f 72 65 6e 64 65 72 65 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 Data Ascii: _rendered{box-sizing:border-box;list-style:none;margin:0;padding:0 5px;width:100%}.select2-container--default .select2-selection--multiple .select2-selection__rendered li{list-style:none}.select2-container--default .select2-selection--multiple .select2-se
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 6e 65 72 2d 2d 66 6f 63 75 73 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c Data Ascii: ner--focus .select2-selection--multiple{border:solid black 1px;outline:0}.select2-container--default.select2-container--disabled .select2-selection--multiple{background-color:#eee;cursor:default}.select2-container--default.select2-container--disabled .sel
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 Data Ascii: ner--default .select2-results__option[aria-selected=true]{background-color:#ddd}.select2-container--default .select2-results__option .select2-results__option{padding-left:1em}.select2-container--default .select2-results__option .select2-results__option .s
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 67 72 6f 75 70 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 35 30 25 2c 20 Data Ascii: ult .select2-results__group{cursor:default;display:block;padding:6px}.select2-container--classic .select2-selection--single{background-color:#f7f7f7;border:1px solid #aaa;border-radius:4px;outline:0;background-image:-webkit-linear-gradient(top, #fff 50%,
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 43 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d Data Ascii: kground-image:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCCC', GradientType=0)}.select2-container--classic .select2-selection--
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c Data Ascii: t-radius:0;border-top-right-radius:0;background-image:-webkit-linear-gradient(top, #fff 0%, #eee 50%);background-image:-o-linear-gradient(top, #fff 0%, #eee 50%);background-image:linear-gradient(to bottom, #fff 0%, #eee 50%);background-repeat:repeat-x;fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	104.17.24.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:34 UTC	526	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:34 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sat, 20 Dec 2025 08:28:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EyNMqb3%2FFu8Dpa2F46LZ8eNeGD2tppXeL8eYWs%2Fj8yI00FF6hYbFinLkH53lfFhc556KmchWUcgwmGsMWfZpPtAr2nxAT9DUnHjDNPVwUlIG%2Fm2SuYjFoSQLMYGyHBYQV8ytCjyv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a83c3fd1c45c-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:34 UTC	422	IN	Data Raw: 33 38 39 39 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 3899/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d 2e 72 65 70 6c 61 63 65 28 77 2c 22 22 29 Data Ascii: lect2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 5b 65 5d 3b 72 65 74 75 72 6e 20 76 Data Ascii: &(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t=m[e];return v
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 26 26 63 6f 6e 73 6f 6c Data Ascii: README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return null==e&&consol
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 74 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: s,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=[t]},e.prototy
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d 2c 69 2e 5f 5f 63 61 63 68 65 3d 7b 7d 3b Data Ascii: quot;","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)},i.__cache={};
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 70 70 65 6e Data Ascii: his.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.$results.appen
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 28 65 29 7d 2c 6e 3d 74 68 69 73 2e 6f 70 Data Ascii: ull==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")(e)},n=this.op
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c 2e 68 69 67 68 6c 69 67 68 74 46 69 72 73 Data Ascii: ppend(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l.highlightFirs
2024-12-30 08:28:34 UTC	1369	IN	Data Raw: 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 67 65 74 48 69 67 68 6c 69 67 Data Ascii: r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var e=l.getHighlig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:34 UTC	506	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:34 UTC	725	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125394 Connection: close Last-Modified: Sat, 08 Jun 2024 05:00:10 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Dec 2024 08:28:34 GMT ETag: "a0b4ff216e038470b000b63f5aa39816" X-Cache: Hit from cloudfront Via: 1.1 75a13c74495137fb5435dc4030981df6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: TaJw4BOOS0HV9keDyT-Hn_aqX_Pp7TaenYUi_JMM_0WCj9ey5hrULQ== Age: 41307 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-30 08:28:34 UTC	16384	IN	Data Raw: 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 20 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 4c 69 6e 6b 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 45 72 72 6f 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2f 2a 20 4f 74 68 65 72 20 73 74 79 6c 65 73 20 28 6f 66 74 65 6e 20 70 61 67 65 20 73 70 65 63 69 66 69 63 29 20 2a 2f 0a 0a 2e 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 31 30 70 78 20 30 70 Data Ascii: 555; font-size: 8pt;}.listCellLinkText { color: #003366; font-size: 8pt; text-decoration: underline;}.listCellErrorText { color: #cc0000; font-size: 8pt;}/* Other styles (often page specific) */.formInputCell { margin: 0px 10px 0p
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 51 75 65 73 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d 0a 0a 23 73 75 70 70 6f 72 74 43 6f 6e 74 61 63 74 54 61 62 6c 65 20 7b 7d 0a 0a 2e 73 75 70 70 6f 72 74 54 61 62 6c 65 48 65 61 64 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 31 35 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d Data Ascii: hallengeQuestionContainer { color: #555555; font-size: 8pt; font-weight: normal; margin: 0px 0px 10px 5px;}#supportContactTable {}.supportTableHeading { color: #555555; font-size: 8pt; font-weight: bold; padding: 20px 15px 10px 5px;}
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 66 66 64 39 64 63 3b 0a 7d 0a 0a 23 74 69 63 6b 2d 6d 61 72 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 63 30 34 61 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 76 77 3b 0a 7d 0a 0a 23 63 6c 6f 73 65 2d 6d 61 72 6b 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 65 72 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0a 20 20 2e 65 78 70 69 72 79 4c 6f 63 6b 50 61 67 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 39 33 39 33 62 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 2e 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 39 38 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 Data Ascii: lor: #ffd9dc;}#tick-mark { color: #6cc04a; padding-right: 1vw;}#close-mark { font-weight: lighter;}@media screen and (max-width: 600px) { .expiryLockPage { color: #39393b; font-size: 16.5px; font-weight: 398; line-height:
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 72 2d 70 75 72 70 6c 65 2d 32 3a 20 72 67 62 61 28 32 32 34 2c 20 32 32 30 2c 20 32 35 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 31 3a 20 72 67 62 61 28 32 34 36 2c 20 32 34 35 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 31 30 3a 20 72 67 62 61 28 31 35 38 2c 20 34 34 2c 20 32 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 39 3a 20 72 67 62 61 28 31 37 36 2c 20 35 37 2c 20 33 39 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 38 3a 20 72 67 62 61 28 31 39 34 2c 20 37 30 2c 20 35 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 37 3a 20 72 67 62 61 28 32 32 34 2c 20 38 38 2c 20 36 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 36 3a 20 72 Data Ascii: r-purple-2: rgba(224, 220, 250, 1); --color-purple-1: rgba(246, 245, 255, 1); --color-red-10: rgba(158, 44, 27, 1); --color-red-9: rgba(176, 57, 39, 1); --color-red-8: rgba(194, 70, 50, 1); --color-red-7: rgba(224, 88, 67, 1); --color-red-6: r
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e Data Ascii: -background-strong); --mds-button-color-background-hover: var(--color-admin-interact-background-strong-hover); --mds-button-color-background-disabled: var(--color-admin-interact-background-strong-disabled); --mds-button-color-text: var(--color-admin
2024-12-30 08:28:35 UTC	16384	IN	Data Raw: 2d 74 6f 6f 6c 74 69 70 20 2e 6d 64 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 0a 20 20 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 35 29 3b 0a 7d 0a 0a 2e 6d 64 73 2d 72 61 64 69 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 36 29 3b 0a 20 20 62 6f 72 Data Ascii: -tooltip .mds-tooltip-arrow { fill: var(--color-neutral-15);}.mds-radio { display: flex; flex-direction: column; align-items: flex-start; margin: 0; padding: 0; font-weight: var(--size-font-weight); color: var(--color-neutral-16); bor
2024-12-30 08:28:35 UTC	10706	IN	Data Raw: 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 67 61 70 3a 20 32 30 70 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 69 6e 2d 77 69 64 74 68 29 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 61 78 2d 77 69 64 74 68 29 3b 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 61 78 2d 68 65 69 67 68 Data Ascii: flex; flex-direction: row; gap: 20px; align-items: center; box-sizing: border-box; min-width: var(--mds-rebuild-input-frame-min-width); max-width: var(--mds-rebuild-input-frame-max-width); max-height: var(--mds-rebuild-input-frame-max-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	557	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:35 UTC	742	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=+c5NFIBKUUz/DoE5dasNjogMK+sZVtSbTgr84GbL0pVKwQjBRMHEiuYDPd9EY8yjznk0RTCUKgeNgFUW3IPM06j54Ak6FNwJRgjLjoz/6vsqZbb8EbLQzHP5Y2wS; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/ Set-Cookie: AWSALBCORS=+c5NFIBKUUz/DoE5dasNjogMK+sZVtSbTgr84GbL0pVKwQjBRMHEiuYDPd9EY8yjznk0RTCUKgeNgFUW3IPM06j54Ak6FNwJRgjLjoz/6vsqZbb8EbLQzHP5Y2wS; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-30 08:28:35 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	653	OUT	GET /websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:35 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: image/png Content-Length: 12316 Connection: close Set-Cookie: AWSALB=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/ Set-Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=1838F4405ED7D99A8E191B069EB83C9D; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 22 Feb 2018 00:00:01 GMT ETag: "161bacf4000-301c" Server: unknown
2024-12-30 08:28:35 UTC	12316	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 59 08 06 00 00 00 83 82 90 8f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 2f b1 49 44 41 54 78 5e ed 7d 09 d8 5e 55 75 ee ca 1c 92 90 40 e6 81 00 19 80 90 81 84 19 05 94 19 15 05 15 8b 53 1d b1 5a eb bd bd b6 fa d4 7b f5 2a a2 60 f1 96 5e ac 43 6b 1d 5a ad 95 7a 1d 7b 9d 5a 64 96 79 96 08 21 0c 21 40 26 48 42 12 92 40 48 42 c2 7d df 77 ad b5 cf 3e df 1f 7c bc cf 53 43 9f c7 f3 7e df 39 7b cd 6b ed 7d f6 3e d3 f7 07 fa 3d 0f 58 87 0e 1d ac 7f b4 1d 3a fc de a3 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 Data Ascii: PNGIHDRYsRGBgAMAapHYsttfx/IDATx^}^Uu@SZ{*`^CkZz{Zdy!!@&HB@HB}w>\|SC~9{k}>=X:[:C[:C[:C[:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	104.17.25.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	386	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:35 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1 Expires: Sat, 20 Dec 2025 08:28:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=90fKi6zgeu6Y5LAQFO9lpViz%2FMXhIq3FdDDmMcoEYbrva8wQEaMFZ%2FOIg1B7O4z5aDFmSWxFih2yRAGITqo7oxq9yR3myV%2BdD5g3CTFiIh%2FaGj8zi%2FmxgHT7KQvec%2FCW8Fss2aDI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a841abc642cd-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:35 UTC	409	IN	Data Raw: 37 62 66 30 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 7bf0/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d 2e Data Ascii: var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: urn e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t=
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e 75 Data Ascii: r("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return nu
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b Data Ascii: ),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=[
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d 2c Data Ascii: ">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)},
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 24 Data Ascii: apeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.$
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 28 Data Ascii: t.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")(
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c 2e Data Ascii: append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l.
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 Data Ascii: !(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	104.17.24.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	526	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:35 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 413063 Expires: Sat, 20 Dec 2025 08:28:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2BLrJ2ccJmalF7Zy3iHPIJI62BT7GW57UVtIRSOupGHKsIBkKtcfSYkbAhg6P%2BC8Ypjl5eR%2Fzeimbs%2BlvrS3ADstDNbvaraR8OmP0DZAiPFLG6cYElV77WFZnFeqyvRZr33NMO8o"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a8439f297cf6-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:35 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2024-12-30 08:28:35 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	632	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=+c5NFIBKUUz/DoE5dasNjogMK+sZVtSbTgr84GbL0pVKwQjBRMHEiuYDPd9EY8yjznk0RTCUKgeNgFUW3IPM06j54Ak6FNwJRgjLjoz/6vsqZbb8EbLQzHP5Y2wS
2024-12-30 08:28:35 UTC	742	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=v0QT++nva8ONtrJuknNQdS6ZAB9xPTCNq+RDico5RUo7l+/zlbSjKPUjpoP06TzHFDV+JOHA9nUelwPY1wV6Wnqgf5BqGtmWCoDbePN95LGF+X/sYOhLCPb0sa/G; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/ Set-Cookie: AWSALBCORS=v0QT++nva8ONtrJuknNQdS6ZAB9xPTCNq+RDico5RUo7l+/zlbSjKPUjpoP06TzHFDV+JOHA9nUelwPY1wV6Wnqgf5BqGtmWCoDbePN95LGF+X/sYOhLCPb0sa/G; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-30 08:28:35 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	598	OUT	GET /websafe/logo/WsTW7x69XLNa-5drSWTt-cusG7f.6cpgiAVuavG8sPBx9JGBR77SYe6RhE4g-PKEP5LIng!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
2024-12-30 08:28:35 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:35 GMT Content-Type: image/png Content-Length: 12316 Connection: close Set-Cookie: AWSALB=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/ Set-Cookie: AWSALBCORS=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; Expires=Mon, 06 Jan 2025 08:28:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=AC60A683F74E774E90C5C4C13F184EEF; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 22 Feb 2018 00:00:01 GMT ETag: "161bacf4000-301c" Server: unknown
2024-12-30 08:28:35 UTC	12316	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 59 08 06 00 00 00 83 82 90 8f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 2f b1 49 44 41 54 78 5e ed 7d 09 d8 5e 55 75 ee ca 1c 92 90 40 e6 81 00 19 80 90 81 84 19 05 94 19 15 05 15 8b 53 1d b1 5a eb bd bd b6 fa d4 7b f5 2a a2 60 f1 96 5e ac 43 6b 1d 5a ad 95 7a 1d 7b 9d 5a 64 96 79 96 08 21 0c 21 40 26 48 42 12 92 40 48 42 c2 7d df 77 ad b5 cf 3e df 1f 7c bc cf 53 43 9f c7 f3 7e df 39 7b cd 6b ed 7d f6 3e d3 f7 07 fa 3d 0f 58 87 0e 1d ac 7f b4 1d 3a fc de a3 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 d0 a1 43 a0 5b 0c 1d 3a 04 ba c5 Data Ascii: PNGIHDRYsRGBgAMAapHYsttfx/IDATx^}^Uu@SZ{*`^CkZz{Zdy!!@&HB@HB}w>\|SC~9{k}>=X:[:C[:C[:C[:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	560	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	722	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Dec 2024 08:28:37 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" X-Cache: RefreshHit from cloudfront Via: 1.1 06a27d66e25d02ebcfb014b9d194016a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: JKMyMioixSB65LI53TwmxlWTYlgAzgTVZM39mPJTVxmggz-iTxidqg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-12-30 08:28:36 UTC	11977	IN	Data Raw: 79 36 c8 9a 9d 50 04 ee d0 4b 1a a2 6b 87 06 a0 63 6f 4b dc 8d 53 95 20 d2 7a 98 d5 b4 f6 c8 1b 80 b2 82 40 62 c8 e5 06 40 9a b9 d4 6d 48 c2 10 13 ae 19 35 71 86 53 95 9f bc 2c b7 20 2b 53 1b f1 f5 45 56 dd 0d 00 c3 8e c6 cd f4 30 ba da e4 da af 72 90 2b c0 4d aa a9 61 6b 2a a3 04 9d 9c b0 2d 27 67 2f 43 62 5b 04 e4 06 08 48 6d b0 09 0c 89 c8 24 00 9c 8d 28 04 a3 41 80 09 8c 00 00 00 0c ec 49 56 24 0a a9 44 54 d4 09 60 36 20 00 01 00 c0 50 00 30 10 c0 04 dc 0c cf 95 c2 01 3b f7 31 7c b0 2f a7 7b 67 44 55 78 eb 5d 7d 4c 88 85 bb 93 44 5a e1 4b 36 66 de a7 e0 83 6a 41 52 b1 8a a1 ed 7a d9 c9 40 04 ac 74 1e e6 12 4b b8 0e 43 79 2d e2 4c f7 76 08 d5 d9 90 df 72 72 c7 b4 07 5c bc 03 99 2e b7 49 60 89 c8 57 47 1a 8a 9a 19 f1 fc a6 85 00 00 00 10 cb 25 81 9b 34 Data Ascii: y6PKkcoKS z@b@mH5qS, +SEV0r+Mak*-'g/Cb[Hm$(AIV$DT`6 P0;1\|/{gDUx]}LDZK6fjARz@tKCy-Lvrr\.I`WG%4
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 81 ce 94 60 4e f6 5d 30 74 aa ae c2 ba 51 a1 04 7b 7b ef 97 e2 57 52 7d b6 8d 78 97 d4 a1 98 73 26 de 0d c4 d1 06 3c 33 2b e2 6c f5 0a a4 98 ed a8 1c fc 9f 32 f3 3a 0e 6e 4f 9d 1d 10 20 60 00 50 08 70 00 05 54 92 d0 13 61 0e c2 01 c4 93 b5 22 84 c0 1a 43 aa 12 2a 40 1b 20 18 04 50 a0 68 4c 28 c6 82 49 03 00 35 44 32 c8 60 24 28 29 19 ac 30 2b 68 eb 56 98 8a 4c 0b 20 a6 43 00 01 0c 00 00 00 00 00 04 47 26 2a cd 0c b9 b1 c7 67 e0 04 f1 bf 49 76 78 33 e1 f9 11 a3 64 47 37 0f 3a 72 b3 93 5a d2 21 8a bc 35 ab 94 6a 15 d0 4d b4 2c 9b 68 51 91 8e 8c da 72 63 b9 6e ca 22 1a d5 14 ad f7 17 b1 3c 8f e9 a0 33 76 4b 43 a5 18 fd 34 6c 55 32 6c 31 58 0c c8 75 4c b6 70 f3 f3 6d b3 a9 07 52 6a a0 f9 6b 53 cc fe e2 5c 18 db 9c 0f 59 fb 94 ba 12 fd df 81 e4 3e 49 70 66 ef Data Ascii: `N]0tQ{{WR}xs&<3+l2:nO `PpTa"C@ PhL(I5D2`$()0+hVL CG&gIvx3dG7:rZ!5jM,hQrcn"<3vKC4lU2l1XuLpmRjkS\Y>Ipf
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: f2 84 5f 32 94 70 3a b5 a3 fc 4f 43 97 43 ce b0 56 dc 5b 9e ac db d5 dc c3 87 53 a0 21 4d bb 84 df c0 60 02 df 7e c8 37 db aa 18 01 bf d5 8c 5d 09 f1 71 f2 65 13 4e 5a db 46 53 a2 7a 61 f8 14 65 6f 6f 19 89 31 b5 f8 e9 87 86 76 4d eb fe 60 76 a5 fe 65 9f 10 3c fb 73 f1 bc 6b f0 33 70 d7 a6 b6 93 d1 b7 03 ff 00 f4 df df a1 c3 ca f9 f8 f5 58 ee b2 4c 17 4e 4b f1 a8 d9 2c af a9 ca f4 aa f8 b3 87 eb 5d f5 25 f2 5d f5 60 7a 33 cc f5 75 42 8b f5 ba fb 8f 3a 5b ea c9 da 07 a2 f6 fe ee 46 66 ed c2 b5 b3 67 1e d0 da 07 4d b9 f8 2b d1 b3 3f fe 43 8d 38 ad 0e 5e 54 73 51 7a d0 1f 47 c3 c8 ee a6 20 bf 71 9a 19 70 28 a9 5e e9 c5 1f 90 1e 4a e4 b5 54 55 c1 8d bd d7 2b 70 ec 46 f6 4c 66 58 1a be 4b bd 5b 22 5b 37 e1 e0 b7 3b 8a e8 b5 b3 d1 7d bb 1e 95 6b c5 ed 73 55 ba Data Ascii: _2p:OCCV[S!M`~7]qeNZFSzaeoo1vM`ve<sk3pXLNK,]%]`z3uB:[FfgM+?C8^TsQzG qp(^JTU+pFLfXK["[7;}ksU
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: f1 d3 73 e4 7b 8a 51 a4 a5 ac db f1 b1 d7 b3 d4 f2 ba 2f b9 19 2e 3d dc 95 49 e1 25 f7 6a 6b 0d 55 d9 ae ec 7b eb 19 fc 38 7e 8d b6 73 59 3a b7 76 92 cf 49 39 eb ed 39 57 1b 85 af 66 8d 6f c6 eb ed eb 58 cd ec ec f0 63 6a 6d e3 4a 1a 9f 33 a2 f9 9c eb 9f fb 5e 55 fb 59 d5 c3 ed ac b8 dd 9c 27 6c 65 c6 08 e2 e2 7c b6 55 ac fd ec ea e7 ab b5 9c 56 7a 2c 74 58 23 52 72 f3 17 0d 7f 75 ea bf 12 fe 8d 3a 5d 37 e4 d1 74 e0 b2 d6 2b e6 d2 29 f0 de 61 45 bc 9a 61 24 9f 94 7f 6b c8 fe 58 b7 93 25 f0 72 57 5a b2 fe 93 5a a6 bf 02 ab 6b 57 e5 b5 97 c4 18 e6 69 ad 45 27 6a e6 e5 5f b9 3f 34 87 f5 5b d6 bc 76 f8 05 ca e5 e0 53 cb 55 e2 7b fc 7f 31 e6 70 72 4f 2d 56 ca 23 d7 e3 72 f4 39 fa fd a3 17 79 79 3c b9 bd bc d9 d5 c2 f6 d1 3f f5 5b ee f4 a2 2d f4 dd 9c d6 cb 2f Data Ascii: s{Q/.=I%jkU{8~sY:vI99WfoXcjmJ3^UY'le\|UVz,tX#Rru:]7t+)aEa$kX%rWZZkWiE'j_?4[vSU{1prO-V#r9yy<?[-/
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 9d d4 fd 33 f9 15 cf c5 7b d9 5e 8b 17 aa 60 f1 79 79 05 1b 5f db 72 55 bf 4b 32 75 75 c3 50 19 21 88 11 43 09 00 22 bd 1f fa f7 e9 b7 9a 3b b9 ff 00 e0 67 9f ff 00 5e fe 65 e4 7a 3c 8a 78 6c 72 9f bd 3f 0f 2d 9e 8d 73 c9 c6 ff 00 ab 8a c8 f3 ce da 35 3c 16 ff 00 55 7f 03 ab a7 bf 87 9d 75 e9 67 a9 ca ff 00 dc ab fe aa 7e 4f f9 9e 75 eb 1b 97 99 dc de e5 c3 6e e9 af c3 f9 19 f5 d3 3e bb 95 c7 ef bf 6d bb 33 3f fb 08 fa cd ff 00 55 6a ff 00 03 a7 df 53 fd b9 f1 47 37 bb 5b be 9b aa 96 f8 d1 3c 74 e7 59 72 f4 f2 32 3a 2d c3 c9 6a a7 b5 a5 e3 8f cc cd 71 55 7c f6 4b fd 3e a7 fc 0d b7 59 d3 e6 af 9a 3d 7e 7e 27 3c 8e da 37 48 5d 5a fd 3c cf 3a 69 5c d5 36 fb db f8 23 dd f9 dd 6e f2 b9 2b b6 cd fd e8 32 f1 39 28 dd 92 88 5d 12 cf f8 8e bc 2d b8 4a 6c be e5 e7 Data Ascii: 3{^`yy_rUK2uuP!C";g^ez<xlr?-s5<Uug~Oun>m3?UjSG7[<tYr2:-jqU\|K>Y=~~'<7H]Z<:i\6#n+29(]-Jl
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 74 5c 69 d7 f6 ff 00 9b f0 4b ae 3a f6 08 9e 54 db 57 69 7a 96 17 97 f5 4e b8 15 28 ed 64 f4 55 73 5c 77 d5 7c 1e 67 b0 dd 2b 64 b7 6b 12 ab e2 fc 74 8d 31 f3 15 c6 ad 6d d5 b3 c3 c2 8c 47 59 5e 1d 3c 42 ab 97 75 5b b2 5b b7 78 e8 fb f7 cf e2 43 97 e8 8c ad 5f 45 68 9d d1 d3 f5 34 e5 6a 1d 2c dd 7a 4f 87 8f c7 ee 33 7e 94 d5 9c d5 61 fc 63 2f a6 27 e1 a8 19 25 7a 25 0d 6e 4d cf 9a cc f8 78 1a bb 6e 4f 74 6d bd a7 5f 97 c4 ba ed a5 9d 1a 9d 89 67 57 e1 2f f5 39 31 5b 5a 7e ce 7f 4d 61 74 03 7b 56 d7 ab 9a fa 9d d2 ff 00 17 d5 35 a0 aa 9d 76 ae b5 6e 27 09 a9 5d 4b 51 5b 47 a6 13 85 98 9e df 0e a8 cf 73 e5 94 f2 d4 ed d1 27 fd 68 23 5a d5 61 27 f3 3b 4e 31 8d 23 ed 0d 49 8a ad 55 a1 ce d8 95 f1 e9 54 52 b6 ef 55 1e 32 e6 7e 58 c7 96 de 90 1c 8f e9 d7 65 5c Data Ascii: t\iK:TWizN(dUs\w\|g+dkt1mGY^<Bu[[xC_Eh4j,zO3~ac/'%z%nMxnOtm_gW/91[Z~Mat{V5vn']KQ[Gs'h#Za';N1#IUTRU2~Xe\
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: a4 4b 85 2f 31 dd 01 cf 6a ad fd 37 74 8c 28 fe 42 dd 5b ad af 0d bd cf b7 f8 97 cc 94 ad ba c6 9d 85 15 a5 aa f5 94 f0 04 3a bc 42 dd d6 0d 1b d7 73 cf 6f 2e af c7 b1 09 df 8d ee 4b 45 b4 4f 29 6e c3 49 fd e0 6a da 98 5e a7 96 9f 4c 19 ce ec f4 4a 7c 91 2d 34 a7 ba d0 d3 91 24 96 d7 87 5c fc 00 a4 9a 4d 6a ec a7 3a e4 ca b4 9a 42 d7 a9 74 96 9f 6b 21 da de a6 bb c2 9f 00 31 af aa 31 88 c8 aa e5 be 89 74 08 cf 84 9b b8 85 1a 68 d7 e4 06 75 b2 f3 c6 7c 04 af 0e 75 53 a7 f3 2d d5 71 39 59 9e 9f 6f 13 35 46 94 75 01 ee dc ca c2 55 4f 3a 98 b5 b5 f9 05 66 8d 4e ac 2b 6e 47 29 c4 62 17 99 9e 67 77 44 57 1d 13 6e 3b fd 91 30 d3 86 10 36 db cb c3 33 eb 93 4d 67 b2 c1 34 ac 39 6f a0 55 71 d5 bc 3e cd 89 bd e9 be 9d 82 d6 6e 3a 32 67 a2 d3 20 5d 7d 34 4f bb 32 b7 Data Ascii: K/1j7t(B[:Bso.KEO)nIj^LJ\|-4$\Mj:Btk!11thu\|uS-q9Yo5FuUO:fN+nG)bgwDWn;063Mg49oUq>n:2g ]}4O2
2024-12-30 08:28:36 UTC	12200	IN	Data Raw: f9 b2 a8 d5 12 4b ab d7 f4 fe 62 ac d5 ad bf e1 e1 1d fc 7a 11 b6 cd ad af 2b 5e c8 0d 2b d1 52 35 f5 74 cf 87 90 2d 76 d1 65 a9 6f 4f f0 5f 98 27 b9 ba 57 ed fc 86 d3 6a 2b d7 5b 7d ba 76 02 12 4b d3 3b 7a b7 f6 eb e0 5d 5e ec 29 aa 58 f1 f8 85 93 ab da b4 eb df f9 b0 6f 7b c7 47 f1 fb 78 80 b6 bb bf 4e 23 0f e0 0a fb d6 16 3a f8 f9 ae c5 3b 3b 38 8f b2 fb 6a 67 75 89 e8 ba 2e a0 18 e4 cc 6d af da 5f f0 40 ab bd ce 95 ae 3e dd e7 a8 27 f5 1a 4d ed 4b bf db a7 42 5d 93 d5 c5 6b f6 ff 00 d4 c0 d1 66 2d 6c af cf b7 dd d4 ca ce 5b b3 ef 8f 87 e8 8a 56 4f 0e 55 57 db ef 63 6d 5b d7 d3 44 bb fd bb 94 4c bc 59 fc dd 9e 9e 65 c3 59 d2 da 7d e1 2e 77 db 11 94 bc 7f 90 3b b4 a6 d8 7a 2f e3 fc 08 23 15 58 f9 ad f6 82 9b 74 4a 3e 6f b7 e0 87 56 bf f2 e9 f6 f1 26 76 Data Ascii: Kbz+^+R5t-veoO_'Wj+[}vK;z]^)Xo{GxN#:;;8jgu.m_@>'MKB]kf-l[VOUWcm[DLYeY}.w;z/#XtJ>oV&v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:35 UTC	716	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
2024-12-30 08:28:51 UTC	805	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 30 Dec 2024 08:28:51 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=hYpGGb3zQ/j47hETV/Th1EFI62yLRBDO0ysEuPb+5LjTyO/Corb2s/ctRtfm2UBgpx5ninVnmuxTMNe+VKO2+BKeab02XYpiek3N+gmYY3PC0/Eu/aPBjMm2RvRA; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/ Set-Cookie: AWSALBCORS=hYpGGb3zQ/j47hETV/Th1EFI62yLRBDO0ysEuPb+5LjTyO/Corb2s/ctRtfm2UBgpx5ninVnmuxTMNe+VKO2+BKeab02XYpiek3N+gmYY3PC0/Eu/aPBjMm2RvRA; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	712	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
2024-12-30 08:28:51 UTC	801	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 30 Dec 2024 08:28:51 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/ Set-Cookie: AWSALBCORS=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	708	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
2024-12-30 08:28:36 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:36 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=AGS3nN6mF9Lu5uaNJjDg+mmbu/B+PiyJv1p1+zI4aPOMATXBVqQ4zika4Mw7RgHskQEepqFe0M3w1Jo+f/cnAUqeP7h/FUgbBUMgZhRb6syOuDQIKhyLkS49f14+; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/ Set-Cookie: AWSALBCORS=AGS3nN6mF9Lu5uaNJjDg+mmbu/B+PiyJv1p1+zI4aPOMATXBVqQ4zika4Mw7RgHskQEepqFe0M3w1Jo+f/cnAUqeP7h/FUgbBUMgZhRb6syOuDQIKhyLkS49f14+; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=89C8E3C274352FD1FF53B4C07F0D8C99; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-c9be" Server: unknown
2024-12-30 08:28:36 UTC	15413	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-30 08:28:36 UTC	2046	IN	Data Raw: 6c ad 94 6d 5c a0 24 60 00 0c 10 30 44 09 24 f2 5a c6 e6 49 71 d0 5f 96 ab 0c a3 6c 04 19 7e 4a c6 0a ad a4 01 d6 34 29 65 0d 30 7a 00 80 00 07 20 28 18 0a 05 05 92 00 31 0d 30 00 f3 01 6a 03 f3 01 30 01 88 60 c0 04 c1 0b 56 03 88 18 30 00 10 c9 b3 7b 00 30 c8 93 94 0e 40 6a 46 24 30 06 84 26 e5 82 01 84 0c 35 08 41 99 99 01 30 a6 c7 a8 aa 1a 01 50 20 16 a0 1a 60 07 aa 12 60 05 03 0d 10 04 09 f5 1a 06 04 c4 bc 94 21 c8 00 02 00 18 98 c4 c0 45 12 39 e8 03 17 a0 a4 40 39 10 10 ed d0 0a 1d 5c 91 0d ea 5d 12 5a 01 60 30 01 32 0b 64 81 2c 92 98 9e 42 12 f3 1a 52 3e 2c a4 88 a9 48 72 38 24 06 29 00 6c 0b 42 6d 08 4c 02 64 64 d4 a8 28 96 50 9b dc 7c a4 80 92 5e 47 c9 09 d8 a1 e8 12 66 ec 4f 22 0d 5b 03 1e 40 9e 50 1d 60 00 50 86 02 01 14 49 40 02 18 01 22 18 80 Data Ascii: lm\$`0D$ZIq_l~J4)e0z (10j0`V0{0@jF$0&5A0P ``!E9@9\]Z`02d,BR>,Hr8$)lBmLdd(P\|^GfO"[@P`PI@"
2024-12-30 08:28:36 UTC	9000	IN	Data Raw: a0 1b 10 d8 80 8c f5 1d 75 18 2d 40 b2 4a 24 00 00 00 02 40 00 24 68 91 72 87 00 36 13 00 c8 9c 01 a5 5c 8d 93 42 98 10 f0 2c 0d 92 44 50 d6 a2 1a d4 aa b1 31 83 02 19 2c a6 44 10 5e 35 26 59 49 04 ae a0 4a 43 81 f2 5d 4c dd 98 17 c4 a5 a9 87 26 69 db 72 ca 35 00 04 02 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 Data Ascii: u-@J$@$hr6\B,DP1,D^5&YIJC]L&ir5$H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(
2024-12-30 08:28:36 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-12-30 08:28:36 UTC	16187	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	569	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 3Rqt5wBhPhuLMi2an8UiC2CjaPHDCZEOIoaACqAwgtnD7I9ifKCQJw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-30 08:28:36 UTC	604	IN	Data Raw: 07 30 0a f8 02 26 01 a5 00 00 00 07 08 0c 07 3c 02 38 ff ff 00 f8 ff dc 07 30 0a a0 02 26 01 a5 00 00 00 07 06 7b 06 9c 02 00 ff ff 00 f8 ff dc 07 30 0a 74 02 26 01 a5 00 00 00 07 06 7f 07 66 02 a0 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8d 07 c0 ff e4 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 90 07 74 ff e4 ff ff 00 f8 fd b4 07 30 08 00 02 26 01 a5 00 00 00 07 06 89 07 34 ff e4 ff ff 00 f8 ff dc 07 30 0b a0 02 26 01 a5 00 00 00 07 08 bd 06 00 00 00 ff ff 00 f8 ff dc 07 30 0b 80 02 26 01 a5 00 00 00 07 08 5d 07 3c 02 8c ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8b 07 54 ff e4 ff ff 00 f8 ff dc 07 30 0b 0c 02 26 01 a5 00 00 00 07 06 80 07 44 02 24 ff ff 00 f8 ff dc 08 fc 0a a0 02 26 01 a6 00 00 00 07 06 64 01 Data Ascii: 0&<80&{0t&f0&0&t0&40&0&]<0&T0&D$&d
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 06 84 f8 00 06 60 f9 a0 ff ff 00 3c 00 00 0a 34 0a 68 02 26 01 c8 00 00 00 07 06 6a 02 b8 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 66 01 e4 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 64 02 9c 02 00 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 69 01 f8 00 18 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 3c fe 14 0a 34 08 00 02 26 01 c8 00 00 00 07 06 8b 08 78 00 10 00 01 00 4c 00 00 06 c4 08 00 00 0d 00 00 01 01 33 01 21 01 01 21 01 23 01 21 01 01 01 70 02 10 10 02 10 01 24 fd 7c 02 84 fe dc fd f0 10 fd f0 fe dc 02 94 fd 6c 08 00 fc ac 03 54 fc 00 fc 00 03 44 fc bc 04 00 04 00 ff ff 00 4c 00 00 06 c4 0a 40 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 4c 00 00 06 Data Ascii: `<4h&j<4&f<4&d<4@&i<4@&p<4&xL3!!#!p$\|lTDL@&p8L
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 5e 33 a8 a8 08 00 f9 90 70 5a 02 02 09 05 cc 09 0f b8 a4 00 02 ff fc ff f4 02 d8 08 00 00 03 00 13 00 00 01 15 01 35 13 33 11 14 16 37 36 36 37 17 06 06 23 22 26 35 02 a0 fd 5c dc ec 32 4e 2a 29 11 30 1f 5e 33 a8 a8 05 00 b0 ff 00 b0 04 00 f9 90 70 5a 02 02 09 05 cc 09 0f b8 a4 ff ff ff 98 ff f4 03 08 08 00 02 26 02 e2 00 00 00 07 07 fe fe d8 00 40 ff ff ff 64 ff f4 03 3c 08 00 02 26 02 e2 00 00 00 07 07 bd ff 64 00 00 00 02 00 40 ff f4 04 84 08 00 00 1c 00 2c 00 00 01 21 22 26 26 35 34 36 36 33 32 1e 02 15 15 23 11 34 26 23 22 06 06 15 14 16 33 21 01 33 11 14 16 37 36 36 37 17 06 06 23 22 26 35 04 84 fd 54 6e ba 70 61 b3 7c 5f 93 65 35 ec 50 54 2a 43 27 5c 48 02 a8 fd ec ec 32 4e 2a 29 11 30 1f 5e 33 a8 a8 03 38 59 a5 72 66 a5 61 3a 6a 91 57 e8 01 00 42 Data Ascii: ^3pZ537667#"&5\2N)0^3pZ&@d<&d@,!"&&546632#4&#"3!37667#"&5Tnpa\|_e5PTC'\H2N*)0^38Yrfa:jWB
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 00 08 20 08 1c 00 26 03 e2 68 00 00 07 08 4e ff 04 ff f8 ff ff 00 3c 00 00 08 80 08 1c 00 27 03 e2 00 c8 00 00 00 07 09 a2 ff 78 00 00 00 03 ff c8 00 00 0a 48 08 1c 00 2a 00 30 00 3b 00 00 21 35 21 35 26 02 11 34 12 12 24 33 32 04 12 12 15 10 02 07 15 21 15 21 11 36 36 12 35 34 02 24 23 22 06 06 02 15 14 12 16 17 11 01 15 23 01 35 21 21 15 14 06 06 07 27 36 36 35 35 03 38 01 ac c6 e6 85 f2 01 4b c6 c6 01 4b f2 85 e6 c6 01 ac fd 28 84 de 86 aa fe d4 c2 91 f4 b1 62 86 de 84 fd 1c 80 fe c4 01 20 fe a0 3b 71 50 6c 36 3a dc 10 81 01 a8 01 23 db 01 6d 01 0a 92 92 fe f6 fe 93 db fe dd fe 58 81 10 dc 01 18 38 e7 01 41 c0 d6 01 5a cc 75 d1 fe eb a1 c0 fe bf e7 38 fe e8 06 4c 14 01 b4 1c 70 50 8e 76 2c 54 3f 92 63 68 ff ff ff c8 00 00 09 e0 08 1c 00 27 03 e2 02 28 Data Ascii: &hN<'xH*0;!5!5&4$32!!6654$#"#5!!'66558KK(b ;qPl6:#mX8AZu8LpPv,T?ch'(
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 00 00 00 07 08 03 05 08 00 00 00 04 00 d8 00 00 07 c0 06 00 00 03 00 07 00 0b 00 0f 00 00 01 15 21 35 03 15 21 35 13 11 23 11 21 11 23 11 07 c0 fd 88 6c fc b0 38 ec 04 b8 ec 06 00 dc dc fd 6c dc dc 02 94 fa 00 06 00 fa 00 06 00 00 04 00 d8 fd a8 05 90 06 00 00 0f 00 13 00 17 00 1b 00 00 21 15 14 06 23 22 26 27 37 16 16 33 32 36 35 35 13 15 21 35 13 11 23 11 21 11 23 11 05 90 ee d2 2a 48 2a 14 15 61 12 51 83 38 fc b0 38 ec 04 b8 ec 7c e7 f5 08 0c d8 09 07 88 78 7c 03 6c dc dc 02 94 fa 00 06 00 fa 00 06 00 ff ff 00 d8 fd f0 06 7c 06 00 00 26 04 cb 00 00 00 07 08 02 04 6c ff 9c 00 01 00 d8 00 00 05 90 06 00 00 07 00 00 33 11 21 11 23 11 21 11 d8 04 b8 ec fd 20 06 00 fa 00 05 24 fa dc 00 01 00 80 00 00 05 60 06 00 00 07 00 00 13 35 21 15 21 11 23 11 80 04 e0 Data Ascii: !5!5#!#l8l!#"&'732655!5#!#HaQ88\|x\|l\|&l3!#! $`5!!#
2024-12-30 08:28:36 UTC	2786	IN	Data Raw: 50 01 18 50 04 f0 03 10 fc f0 ff ff 00 c4 04 f0 03 78 08 00 00 26 05 79 00 00 00 07 05 79 01 9c 00 00 00 01 00 bc fe 0c 02 38 01 18 00 0b 00 00 01 07 06 02 06 07 23 36 36 12 37 37 02 38 10 11 45 4a 18 b4 0d 2a 2b 0e 0c 01 18 6c 72 fe fc e6 44 40 d2 01 03 87 70 00 01 00 d0 ff f0 02 38 01 58 00 0c 00 00 05 22 26 35 34 36 33 32 16 15 14 06 06 01 84 4a 6a 6a 4a 4a 6a 31 51 10 6a 4a 4a 6a 6a 4a 31 52 31 ff ff 00 d0 ff f0 08 38 01 58 00 26 05 7c 00 00 00 27 05 7c 03 00 00 00 00 07 05 7c 06 00 00 00 ff ff 00 d0 ff f0 05 38 01 58 00 26 05 7c 00 00 00 07 05 7c 03 00 00 00 00 02 00 d0 ff f0 02 38 05 cc 00 0c 00 19 00 00 05 22 26 35 34 36 33 32 16 15 14 06 06 03 22 26 35 34 36 33 32 16 15 14 06 06 01 84 4a 6a 6a 4a 4a 6a 31 51 32 4a 6a 6a 4a 4a 6a 31 51 10 6a 4a 4a Data Ascii: PPx&yy8#66778EJ*+lrD@p8X"&54632JjjJJj1QjJJjjJ1R18X&\|'\|\|8X&\|\|8"&54632"&54632JjjJJj1Q2JjjJJj1QjJJ
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: d5 ab a9 fe d5 e2 81 00 03 00 e7 ff e0 09 29 08 20 00 1f 00 33 00 47 00 00 01 14 02 04 23 22 26 26 27 33 16 16 33 32 36 36 35 34 26 26 23 22 06 07 23 3e 02 33 32 04 12 01 22 24 00 02 37 36 12 00 24 33 32 04 00 12 17 16 02 00 04 27 32 24 36 12 27 26 02 26 24 23 22 04 06 02 07 06 12 16 04 07 50 a0 fe f2 a4 8e e7 94 13 f2 15 a2 73 64 a4 62 62 a4 64 73 b7 14 f2 13 9f f0 8e a4 01 0e a0 fd b8 da fe 81 fe dd a5 01 01 a5 01 22 01 7e da db 01 7f 01 21 a4 01 01 a4 fe de fe 80 db ab 01 2c e2 80 01 01 80 e2 fe d6 ab aa fe d6 e2 81 01 01 80 e3 01 2b 04 00 a4 fe f2 a0 7a d3 85 66 84 62 a4 64 64 a4 62 82 68 85 d3 7a a0 fe f2 fb 3c a4 01 23 01 7e db db 01 7e 01 23 a4 a4 fe dd fe 82 db db fe 82 fe dd a4 e8 80 e2 01 2b aa ab 01 2c e2 80 80 e3 fe d5 ab a9 fe d5 e2 81 00 03 Data Ascii: ) 3G#"&&'3326654&&#"#>32"$76$32'2$6'&&$#"Psdbbds"~!,+zfbddbhz<#~~#+,
2024-12-30 08:28:36 UTC	3592	IN	Data Raw: fc 5c c4 14 4e 82 d5 cf 08 5a 7e 66 72 48 0c 68 78 81 a3 9c 3b 45 45 32 09 00 01 fb 30 fd d0 fe 90 ff 80 00 08 00 00 01 03 03 23 35 01 33 01 15 fd b0 d0 d0 e0 01 44 d8 01 44 fd d0 01 18 fe e8 10 01 a0 fe 60 10 00 01 fb 38 fe 08 fe 74 ff 7c 00 0e 00 00 05 33 14 06 06 23 22 26 35 33 14 16 33 32 36 fd 98 dc 65 b9 7e c0 e0 dc 5a 66 69 5b 84 6e a8 5e d5 9f 51 77 7a 00 01 fc 18 fe 04 fd 68 ff 44 00 0b 00 00 01 22 26 35 34 36 33 32 16 15 14 06 fc c0 45 63 63 45 45 63 63 fe 04 5e 42 42 5e 5e 42 42 5e 00 01 fb ce fd 04 fd 3a ff 38 00 0a 00 00 05 15 14 06 06 07 27 36 36 35 35 fd 3a 2e 5c 46 9c 33 49 c8 6c 4a a7 9d 3a 6c 4e a7 61 72 00 02 fa 88 fe 04 fe 28 ff 44 00 0b 00 17 00 00 01 22 26 35 34 36 33 32 16 15 14 06 21 22 26 35 34 36 33 32 16 15 14 06 fb 30 45 63 63 Data Ascii: \NZ~frHhx;EE20#53DD`8t\|3#"&53326e~Zfi[n^QwzhD"&54632EccEEcc^BB^^BB^:8'6655:.\F3IlJ:lNar(D"&54632!"&546320Ecc
2024-12-30 08:28:36 UTC	6396	IN	Data Raw: a4 a4 9c 05 80 9c a4 a4 9c fa 80 05 80 40 24 24 40 fa 80 40 24 24 03 28 c8 fd a0 a4 9c 05 80 9c a4 a4 9c fa 80 9c a4 dc 24 40 05 80 40 24 24 40 fa 80 40 24 00 01 00 88 fe c0 0b 08 09 40 00 03 00 00 09 03 0b 08 fa c8 fa b8 05 48 04 00 fa c0 05 40 05 40 00 04 00 88 fe c0 0b 08 09 40 00 03 00 07 00 0b 00 0f 00 00 09 0f 08 18 fd b8 fd b0 02 50 05 38 fd b8 fd b8 02 48 fc 68 fd b0 fd b0 02 50 05 40 fd b8 fd b0 02 50 06 f0 fd b8 02 48 02 50 fa c0 fd b0 02 50 02 48 fd b8 fd b0 02 50 02 48 fa c0 fd b8 02 48 02 50 00 02 00 88 fe c0 0b 08 09 40 00 03 00 07 00 00 09 07 0b 08 fa c8 fa b8 05 48 04 02 fb fd fb f1 04 0f 04 00 fa c0 05 40 05 40 fa c0 04 09 fb f7 fb f7 00 08 00 88 fe c0 0b 08 09 40 00 03 00 07 00 0b 00 0f 00 13 00 17 00 1b 00 1f 00 00 09 0f 25 09 06 25 09 Data Ascii: @$$@@$$($@@$$@@$@H@@@P8HhP@PHPPHPHHP@H@@@%%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	567	OUT	GET /fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 304092 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "60c8f64064078554b6469eeda25944eb" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cb0a9b0d01a1b0cc9278d9875ce23c92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: T8n6ontnrk5ejJsklFa7CawDeQ8ExraOLHRO_5RIL4QFUIOkdspVLw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:36 UTC	8192	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-12-30 08:28:36 UTC	8796	IN	Data Raw: 00 00 07 06 6b ff 85 02 00 ff ff ff cb 00 00 03 10 09 d3 02 26 00 c5 00 00 00 07 06 6d ff 3f 02 00 ff ff 00 10 00 00 02 cd 0a 00 02 26 00 c5 00 00 00 07 06 6e ff 05 02 00 ff ff 00 31 fd a5 02 08 08 00 02 26 00 c5 00 00 00 06 06 76 be 00 ff ff 00 e8 00 00 01 f3 0a 08 02 26 00 c5 00 00 00 07 06 70 00 38 02 00 ff ff ff d0 00 00 03 0b 0a 61 02 26 00 c5 00 00 00 07 06 73 fe fd 02 07 ff ff ff 30 00 00 02 78 0a 9b 02 26 00 c5 00 00 00 07 06 7b 04 1d 02 00 ff ff 00 0f 00 00 02 cd 0a 67 02 26 00 c5 00 00 00 07 06 7f 04 b7 02 95 ff ff 01 09 00 00 02 8e 0b 0d 02 26 00 c5 00 00 00 07 06 80 04 71 02 2c ff ff 00 e8 fe 15 01 f3 08 00 02 26 00 c5 00 00 00 07 06 8b 04 98 00 00 ff ff 00 eb ff ef 02 b0 08 00 02 06 02 e2 00 00 ff ff 01 10 00 00 01 cb 08 00 02 06 00 c5 00 00 Data Ascii: k&m?&n1&v&p8a&s0x&{g&&q,&
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 06 e1 f8 00 06 c9 f9 37 ff ff 00 43 00 00 09 f8 0a 50 02 26 01 c8 00 00 00 07 06 6a 02 ad 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 66 01 d0 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 64 02 78 02 00 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 69 01 bd 00 25 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 43 fe 25 09 f8 08 00 02 26 01 c8 00 00 00 07 06 8b 08 48 00 10 00 01 00 53 00 00 06 88 08 00 00 0d 00 00 01 01 33 01 33 01 01 23 01 23 01 23 01 01 01 30 02 37 0d 02 37 dd fd 6d 02 93 dd fd c9 0d fd c9 dd 02 9d fd 63 08 00 fc 87 03 79 fc 00 fc 00 03 6f fc 91 04 00 04 00 ff ff 00 53 00 00 06 88 0a 08 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 53 00 00 06 88 0a 08 Data Ascii: 7CP&jC&fC&dxC&i%C&pC%&HS33###077mcyoS&p8S
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 26 03 07 00 00 00 07 09 96 01 27 00 b0 ff ff 00 9c ff e0 05 e4 08 93 02 26 03 07 00 00 00 07 09 9d 01 75 00 90 00 03 00 9c ff e0 05 e4 06 15 00 03 00 13 00 23 00 00 01 15 21 35 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 6f fb a4 02 2d c7 fe cf ac ac 01 31 c7 c7 01 30 ad ac fe cf c7 a0 de 73 73 de a0 9f df 73 73 de 03 4f 9e 9e fc 91 ca 01 65 ea ec 01 67 c9 ca fe 9a ec ea fe 9b ca a3 ac 01 1e ac ac 01 20 ae ae fe e0 ac ac fe e2 ac ff ff 00 9c ff e0 05 e4 06 15 02 06 03 35 00 00 ff ff 00 9c ff e0 05 e4 06 15 02 06 03 07 00 00 ff ff 00 9c ff e0 05 e4 08 08 02 06 03 08 00 00 ff ff 00 9b ff e0 0a 5c 06 15 00 26 03 07 ff 00 00 07 02 64 04 95 00 00 ff ff 00 9c fd c0 0b d8 06 15 00 26 03 07 00 00 00 07 03 c3 Data Ascii: &'&u#!5"$54$32'2654&#"o-10ssssOeg 5\&d&
2024-12-30 08:28:36 UTC	10997	IN	Data Raw: ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 8f 01 2d 00 b0 ff ff 00 9c ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 96 00 e3 00 b0 ff ff 00 9c ff e4 05 5d 08 93 02 26 04 44 00 00 00 07 09 9d 01 30 00 90 00 02 00 91 fd f5 05 01 08 00 00 21 00 25 00 00 01 33 15 01 0e 02 15 06 16 17 17 16 16 15 14 06 07 27 36 36 35 26 26 27 27 26 02 37 34 3e 02 37 01 21 15 21 04 ab 56 fe 1a 78 a2 52 01 85 80 a5 aa b6 73 67 6f 40 44 01 79 71 79 c7 d5 01 33 62 94 60 fe 14 04 38 fb c8 08 00 8f fd 97 98 e3 db 8d 82 ae 2b 35 38 95 5d 55 c4 5d 62 46 84 2f 30 52 25 26 3f 01 09 be 74 cc c4 cb 72 02 9c a8 00 01 00 eb fd c0 05 75 06 14 00 16 00 00 01 11 23 11 33 15 33 36 36 33 32 16 16 15 11 23 11 34 26 23 22 06 06 01 9d b2 ad 10 36 e5 a9 9b eb 83 b2 d2 b2 78 bd 6d 03 c0 fc 40 06 00 Data Ascii: ]&D-]&D]&D0!%3'665&&''&74>7!!VxRsgo@Dyqy3b`8+58]U]bF/0R%&?tru#336632#4&#"6xm@
2024-12-30 08:28:36 UTC	8459	IN	Data Raw: 29 00 00 01 11 23 11 01 23 2e 03 23 22 04 02 11 10 12 04 33 32 3e 02 37 33 0e 02 04 23 20 00 02 11 10 12 00 21 32 04 16 16 04 59 82 03 7d bc 15 6d a4 d0 79 c2 fe c1 bf bf 01 3f c2 79 d0 a4 6d 15 bc 19 89 d3 fe ee a4 fe fe fe 70 e3 e3 01 90 01 02 a4 01 12 d3 89 09 00 f6 00 0a 00 fc 80 69 b3 86 4a ca fe 79 fe e5 fe e3 fe 7a c9 4a 85 b4 69 8d f3 b6 66 01 03 01 d8 01 41 01 41 01 d8 01 03 65 b7 f2 00 02 00 b4 ff e4 07 54 08 1c 00 14 00 3a 00 00 01 07 26 26 23 22 06 06 07 11 23 11 33 11 33 3e 02 33 32 16 13 23 2e 03 23 22 04 02 11 10 12 04 33 32 3e 02 37 33 0e 02 04 23 20 00 02 11 10 12 00 21 32 04 16 16 06 d0 3d 16 44 31 81 bd 67 02 b2 b2 0e 1a 7c a9 5f 39 66 a8 bc 15 6d a4 d0 79 c2 fe c1 bf bf 01 3f c2 79 d0 a4 6d 15 bc 19 88 d3 fe ed a4 fe fe fe 70 e3 e3 01 Data Ascii: )##.#"32>73# !2Y}my?ympiJyzJifAAeT:&&#"#33>32#.#"32>73# !2=D1g\|_9fmy?ymp
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: ab fd 31 04 f3 a7 04 f2 fb 0e 02 24 aa aa 00 01 01 29 02 cb 06 01 03 75 00 03 00 00 01 15 21 35 06 01 fb 28 03 75 aa aa 00 02 01 27 00 b2 06 04 05 8e 00 03 00 07 00 00 25 01 37 01 05 27 01 17 05 8f fb 98 75 04 68 fb 98 75 04 68 75 b2 04 68 74 fb 98 74 74 04 68 74 00 03 01 29 00 a0 06 01 05 a0 00 03 00 0f 00 1c 00 00 01 15 21 35 01 22 26 35 34 36 33 32 16 15 14 06 03 22 26 26 35 34 36 33 32 16 15 14 06 06 01 fb 28 02 6c 3c 54 54 3c 3a 54 54 3a 28 41 27 54 3c 3a 54 54 03 75 aa aa fd 2b 54 3c 3a 53 53 3a 3c 54 03 e3 26 42 28 3a 53 53 3a 3c 54 00 03 01 27 00 80 06 04 06 00 00 03 00 07 00 0b 00 00 25 35 21 15 01 35 21 15 01 11 33 11 01 27 04 dd fb 23 04 dd fd 3c ab 80 ab ab 03 1b aa aa fe 45 04 20 fb e0 00 02 00 f3 01 2b 06 38 05 16 00 1b 00 37 00 00 13 3e 02 Data Ascii: 1$)u!5(u'%7'uhuhuhtttht)!5"&54632"&&54632(l<TT<:TT:(A'T<:TTu+T<:SS:<T&B(:SS:<T'%5!5!3'#<E +87>
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: fc f5 01 d6 a8 a8 01 c2 a8 a8 00 01 01 be 00 00 08 c0 08 0c 00 08 00 00 21 11 01 27 01 01 07 01 11 04 ec fd 49 77 03 82 03 80 74 fd 48 06 ce fd 48 76 03 80 fc 80 76 02 b8 f9 32 00 01 01 c0 ff f4 08 c2 08 00 00 08 00 00 01 11 01 17 01 01 37 01 11 05 94 02 b7 77 fc 7e fc 80 74 02 b8 08 00 f9 32 02 b8 76 fc 80 03 80 76 fd 48 06 ce 00 01 01 c0 fd 9c 08 c0 09 40 00 0d 00 00 01 01 37 01 11 01 27 01 01 07 01 11 01 17 05 40 fc 80 76 02 b6 fd 4a 76 03 80 03 80 74 fd 48 02 b8 74 fd 9c 03 80 76 fd 48 09 28 fd 48 76 03 80 fc 80 76 02 b8 f6 d8 02 b8 76 00 02 01 16 00 00 0b 83 08 2b 00 16 00 1c 00 00 01 35 21 32 36 36 35 34 26 26 23 23 35 33 32 04 12 15 14 0e 02 23 09 02 17 01 01 01 c5 07 3f 82 d6 7f 80 d5 82 69 69 b1 01 21 ad 64 af e8 84 fb 92 fc 80 03 80 75 fc f5 03 Data Ascii: !'IwtHHvv27w~t2vvH@7'@vJvtHtvH(Hvvv+5!26654&&##532#?ii!du
2024-12-30 08:28:36 UTC	2538	IN	Data Raw: 24 33 32 04 04 17 07 f3 87 fe e2 fe c7 b0 b2 fe c9 fe ed 7f 76 75 01 3b 01 76 cb d6 01 7d 01 36 6b 06 6d 68 89 44 01 01 43 88 67 4d 83 b4 5d 5d b4 83 ff ff 00 6f fd c4 07 54 06 15 02 26 04 eb 00 00 00 07 06 75 03 63 00 00 ff ff 00 eb 00 00 05 58 08 08 02 26 04 d7 00 00 00 06 06 68 c5 00 ff ff 00 eb fe 03 05 58 06 05 02 26 04 d7 00 00 00 07 08 03 03 83 ff f4 00 02 00 32 06 bd 05 45 09 18 00 06 00 0a 00 00 13 01 33 01 23 27 07 25 13 33 01 32 01 8d 98 01 8e dc fc fc 02 84 d2 de fe f0 06 bd 01 73 fe 8d f4 f4 f6 01 65 fe 9b 00 02 00 32 06 ab 05 39 09 08 00 06 00 0a 00 00 01 01 23 27 07 23 01 25 13 23 01 03 ac 01 8d dc fc fc dc 01 8b fd fe c9 9d fe f4 08 1d fe 8e f4 f4 01 72 eb fe 98 01 68 00 02 00 7b 06 bd 05 25 09 70 00 06 00 16 00 00 01 01 23 01 01 23 01 05 Data Ascii: $32vu;v}6kmhDCgM]]oT&ucX&hX&2E3#'%32se29#'#%#rh{%p##
2024-12-30 08:28:36 UTC	8949	IN	Data Raw: 12 16 33 32 36 36 37 33 0e 02 23 22 24 02 35 34 12 24 33 32 16 16 01 11 23 11 06 08 fb 4f 06 60 b4 1c d4 a5 93 e2 7f 7d e1 96 66 a9 73 15 b4 15 9d f9 a0 cd fe cf a9 ab 01 30 c9 9a fb a2 f9 e6 b3 03 39 a8 a8 ff 82 b9 9f fe e5 ba bb fe e1 a2 4d 8e 62 8b d9 7c cd 01 69 e9 e4 01 66 cc 77 d7 01 39 fa 00 06 00 ff ff 00 8b 00 00 07 98 08 08 00 26 03 b1 00 00 00 07 02 a7 05 cb 00 00 ff ff fb 41 fc cb fe 3f fe d3 00 07 06 1e fa 5d fd 30 00 01 00 81 ff e4 05 4f 06 15 00 28 00 00 05 22 26 26 27 37 16 16 33 32 36 12 35 35 34 2e 02 23 22 06 06 07 15 21 15 21 35 34 12 24 33 32 04 12 15 15 14 02 06 06 02 b7 7a cf a6 3b 86 49 d5 80 91 cf 70 3b 71 9f 64 73 a9 60 07 03 88 fb aa 8d 01 05 b4 c1 01 24 a3 5e af f5 1c 46 86 60 5a 6c 72 8d 01 07 b5 28 8f e5 a4 58 75 e1 a2 0e a8 Data Ascii: 326673#"$54$32#O`}fs09Mb\|ifw9&A?]0O("&&'7326554.#"!!54$32z;Ip;qds`$^F`Zlr(Xu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	1209	OUT	GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3SCkI1DqKVzP1l3CiRDsDBwIr53/xujyhBo/PnePwtcVn+L1u/KSyDFOF0Mh5sCrVNMpUm2hz3NYDnv09xyTIZABt3+MuGyDe/iBDdOKEkLEwIZ0nDlEdiB8yiX8
2024-12-30 08:28:36 UTC	841	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:36 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 159 Connection: close Set-Cookie: AWSALB=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/ Set-Cookie: AWSALBCORS=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b; Expires=Mon, 06 Jan 2025 08:28:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=45DA8F7ACC10C1FB9EE9877AC33DC50C; Path=/keyserver; Secure; HttpOnly Server: unknown
2024-12-30 08:28:36 UTC	159	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 73 74 61 74 75 73 27 3a 32 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 43 61 6e 6e 6f 74 20 69 64 65 6e 74 69 66 79 20 72 65 63 69 70 69 65 6e 74 2e 27 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 7d 29 3b 0d 0a Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'status':21,'message':'Cannot identify recipient.','action':'open','success':false,'state':1});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	570	OUT	GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309432 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "1753a05196abeef95c32f10246bd6473" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 814952d19d560b49ff15ad2f71e400d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: ahldKKsJ1SWeu9zeKa71nk6bXlk2uF_QUTUBw051MvdPDUSR_Od0bg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-12-30 08:28:36 UTC	604	IN	Data Raw: 26 01 a5 00 00 00 07 06 76 02 75 00 02 ff ff 00 ca ff e1 07 48 0a 76 02 26 01 a5 00 00 00 07 06 73 01 26 02 00 ff ff 00 ca ff e1 07 48 0c 00 02 26 01 a5 00 00 00 07 08 0e 07 5c 00 00 ff ff 00 ca ff e1 07 48 0b d1 02 26 01 a5 00 00 00 07 08 08 06 21 00 00 ff ff 00 ca ff e1 07 48 0b 64 02 26 01 a5 00 00 00 07 08 0a 07 72 02 38 ff ff 00 ca ff e1 07 48 0b 0d 02 26 01 a5 00 00 00 07 08 0c 07 6c 02 38 ff ff 00 ca ff e1 07 48 0a 93 02 26 01 a5 00 00 00 07 06 7b 06 dd 02 00 ff ff 00 ca ff e1 07 48 0a 8a 02 26 01 a5 00 00 00 07 06 7f 07 68 02 b6 ff ff 00 ca fd cb 07 48 08 00 02 26 01 a5 00 00 00 07 06 8d 08 16 ff f4 ff ff 00 ca fd dd 07 48 08 00 02 26 01 a5 00 00 00 07 06 90 07 a7 ff f4 ff ff 00 ca fd b6 07 48 08 00 02 26 01 a5 00 00 00 07 06 89 07 5c ff f4 ff ff Data Ascii: &vuHv&s&H&\H&!Hd&r8H&l8H&{H&hH&H&H&\
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: f8 00 08 00 ff ff 00 45 00 00 07 b2 0a 47 02 26 01 c5 00 00 00 07 06 6b 01 3b 02 00 ff ff 00 45 fd d7 07 b2 08 00 02 26 01 c5 00 00 00 07 06 8b 07 15 00 00 00 01 00 37 00 00 0a dc 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 79 fd be 01 8f 01 71 13 01 8a 01 6b 01 8b 12 01 71 01 8f fd be fe 92 fe 66 10 fe 65 08 00 fa 1f 05 e1 fa 1e 05 e2 f8 00 05 9d fa 63 ff ff 00 37 00 00 0a dc 0a 76 02 26 01 c8 00 00 00 07 06 6a 02 a6 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 66 02 37 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 64 02 e1 02 00 ff ff 00 37 00 00 0a dc 0a 5b 02 26 01 c8 00 00 00 07 06 69 02 7e 00 20 ff ff 00 37 00 00 0a dc 0a 63 02 26 01 c8 00 00 00 07 06 70 04 08 02 00 ff ff 00 37 fd e1 0a dc Data Ascii: EG&k;E&7!!3!3!!#yqkqfec7v&j7&f77&d7[&i~ 7c&p7
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 38 08 76 02 26 03 07 00 00 00 26 06 6a 75 00 00 07 06 8b 06 72 00 00 ff ff 00 78 ff e2 06 d4 08 93 02 26 03 0b 00 00 00 07 06 64 00 af 00 00 ff ff 00 78 ff e2 06 d4 08 93 02 26 03 0b 00 00 00 06 06 66 06 00 ff ff 00 78 ff e2 06 d4 09 09 02 26 03 0b 00 00 00 07 06 80 06 d8 00 12 ff ff 00 78 ff e2 06 d4 08 47 02 26 03 0b 00 00 00 07 06 6b 00 98 00 00 ff ff 00 78 fd d7 06 d4 06 62 02 26 03 0b 00 00 00 07 06 8b 06 72 00 00 ff ff 00 78 ff a2 06 38 08 92 02 26 03 0a 00 00 00 07 06 64 00 af ff fe ff ff 00 78 ff e2 06 38 06 14 02 06 03 07 00 00 ff ff 00 78 ff e2 06 38 08 98 02 26 03 07 00 00 00 07 08 cd 01 d5 00 0b ff ff 00 78 ff e2 06 38 08 b0 02 26 03 07 00 00 00 07 09 88 02 36 00 a8 ff ff 00 78 ff e2 06 38 08 b0 02 26 03 07 00 00 00 07 09 a1 01 a5 00 b0 ff ff Data Ascii: 8v&&jurx&dx&fx&xG&kxb&rx8&dx8x8&x8&6x8&
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 9a d2 7f 38 01 9f 01 1c bc 9c 01 03 bc 66 fe a4 01 5f ab 72 7e 83 01 01 81 86 74 1c 6d c9 88 4a 8a 6d 40 8e 34 5f 41 53 70 01 0d 01 0a ca fe ce cd 68 03 02 40 6a 83 43 8e c7 69 61 c0 fe e0 be ad d7 65 6e 50 4e 61 ab ff ff 00 78 ff e4 05 be 06 14 02 06 04 44 00 00 00 02 00 72 ff e4 05 b7 06 14 00 1b 00 35 00 00 01 32 1e 02 15 14 06 04 23 22 2e 02 27 21 16 16 33 32 36 37 2e 02 23 23 35 15 35 33 32 36 37 26 26 23 22 06 07 21 36 36 24 33 32 04 16 17 0e 03 23 03 64 a5 e5 8a 3f b4 fe ca c2 85 ec b5 6c 07 01 61 12 9a 97 96 a9 01 01 53 8d 56 ce ce 8a 93 01 01 96 8a 7e a0 0f fe 9b 0c aa 01 1b b3 bf 01 28 a7 01 01 3c 86 d8 9e 03 23 40 6d 8a 4a 88 c9 6d 3e 79 b1 71 60 61 72 53 42 5d 32 91 3d ae 5e 4e 50 6e 5a 56 8f cb 6c 69 c7 8e 43 83 6a 40 00 02 00 76 ff e4 05 cb Data Ascii: 8f_r~tmJm@4_ASph@jCiaenPNaxDr52#".'!3267.##553267&&#"!66$32#d?laSV~(<#@mJm>yq`arSB]2=^NPnZVliCj@v
2024-12-30 08:28:36 UTC	3072	IN	Data Raw: 6d ff ea 08 8b 08 1c 00 26 05 35 00 00 00 07 05 31 05 fc 00 00 00 02 00 86 fd d5 05 8f 06 07 00 23 00 30 00 00 01 15 0e 02 07 0e 02 15 14 16 16 33 32 36 36 37 21 06 06 04 23 22 24 26 35 34 36 36 37 3e 02 37 35 13 32 16 15 14 06 23 22 26 35 34 36 36 03 e8 01 43 7c 59 3c 62 38 4a 7d 4d 47 7f 54 04 01 64 05 af fe df af bf fe dd a3 49 86 5c 52 66 31 01 9f 5a 82 82 5a 59 83 3d 64 03 97 1a b4 d7 82 38 26 5b 71 46 4f 75 3f 3d 7b 5d be ff 80 86 f7 a8 74 b3 8c 37 32 6c 91 6a 1a 02 70 81 5b 5a 80 80 5a 3d 64 3b 00 03 00 6d ff ea 05 76 08 1c 00 21 00 25 00 32 00 00 01 35 3e 02 37 36 36 35 34 26 26 23 22 06 06 07 21 36 12 24 33 32 04 16 15 14 02 07 0e 02 15 15 21 03 21 03 03 22 26 35 34 36 33 32 16 15 14 06 06 02 43 01 29 67 5e 6f 65 4f 80 48 47 7f 53 05 fe 9c 05 b0 Data Ascii: m&51#032667!#"$&54667>752#"&5466C\|Y<b8J}MGTdI\Rf1ZZY=d8&[qFOu?={]t72ljp[ZZ=d;mv!%25>76654&&#"!6$32!!"&54632C)g^oeOHGS
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: e6 08 00 00 26 05 72 00 00 00 27 05 72 02 38 00 00 00 27 05 72 04 70 00 00 00 07 05 72 06 a8 00 00 00 01 00 9c 04 fa 02 3e 08 00 00 03 00 00 01 23 03 21 02 3e fa a8 01 5a 04 fa 03 06 ff ff 00 9c 04 fa 04 76 08 00 00 26 05 76 00 00 00 07 05 76 02 38 00 00 ff ff 00 9c 04 fa 06 ae 08 00 00 26 05 76 00 00 00 27 05 76 02 38 00 00 00 07 05 76 04 70 00 00 00 01 00 a2 04 c3 02 14 08 00 00 03 00 00 13 03 21 03 fc 5a 01 72 58 04 c3 03 3d fc c3 ff ff 00 a2 04 c3 04 0b 08 00 00 26 05 79 00 00 00 07 05 79 01 f7 00 00 00 01 00 a7 fe 0c 02 63 01 18 00 0b 00 00 01 07 06 02 06 07 23 36 36 12 37 37 02 63 0d 0e 47 4e 18 f4 0e 31 2e 08 07 01 18 6e 7e fe fb dc 3f 3d d2 01 06 87 70 00 01 00 bc ff ea 02 75 01 a0 00 0c 00 00 05 22 26 37 26 36 33 32 16 17 0e 02 01 99 5b 82 01 01 Data Ascii: &r'r8'rpr>#!>Zv&vv8&v'v8vp!ZrX=&yyc#6677cGN1.n~?=pu"&7&632[
2024-12-30 08:28:36 UTC	16384	IN	Data Raw: 2b 38 2c 54 00 04 00 ca 00 00 0b 52 08 1d 00 0b 00 0f 00 21 00 2f 00 00 33 11 21 01 33 11 21 11 21 01 23 11 01 35 21 15 01 22 26 26 35 35 34 36 36 33 32 16 16 15 15 14 06 06 27 32 36 35 35 34 26 23 22 06 15 15 14 16 ca 01 3b 03 56 13 01 3f fe c8 fc a9 13 05 ac 03 70 fe 47 95 db 78 77 db 94 96 da 76 75 d9 96 67 6d 6d 69 69 6b 6c 08 00 fa 49 05 b7 f8 00 05 b0 fa 50 02 5e dd dd 01 87 7e dc 8e 68 8d dc 7f 7f dc 8d 68 8d dd 7e e8 8c 74 68 73 89 89 73 68 74 8c ff ff 00 a4 ff e4 0c 80 08 1c 00 26 05 b9 00 00 00 07 00 49 04 dd 00 00 ff ff 00 a4 00 00 0a f4 08 0e 00 26 05 b9 00 00 00 07 00 89 05 0a 00 00 ff ff 00 ca 00 00 07 41 08 00 02 06 01 0e 00 00 ff ff 00 45 00 00 07 b2 0a d0 02 06 00 08 00 00 ff ff 00 96 ff e4 07 f0 08 1c 02 26 01 40 00 00 00 07 05 7c 02 aa Data Ascii: +8,TR!/3!3!!#5!"&&5546632'26554&#";V?pGxwvugmmiiklIP^~hh~thssht&I&AE&@\|
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: fe 8a 39 89 78 74 89 49 12 0d 4a 8d 73 73 8a 3e fd 86 fe be 35 31 09 0f 08 20 2b 57 30 a9 c1 03 2a 36 e4 fe 9d cb 6f ca 01 16 a6 53 df 01 50 bb bd fe b0 fe ed 36 7a cc 7b 71 c0 78 74 7b cc 7a 84 dd fd 92 04 24 6a 50 04 01 14 16 10 ef ff fd 19 00 0c 00 d7 00 b4 07 75 07 18 00 03 00 07 00 0b 00 0f 00 13 00 17 00 1b 00 1f 00 23 00 27 00 2b 00 2f 00 00 01 21 35 21 03 01 37 01 05 11 33 11 25 01 17 01 01 21 35 21 03 01 37 01 05 11 33 11 25 01 17 01 01 21 35 21 03 01 37 01 05 11 33 11 25 01 17 01 03 f3 fc e4 03 1c b7 fd d3 7b 02 31 fe 50 b2 fe 52 02 2d 7f fd cf 04 29 fc e6 03 1a b5 fd d3 79 02 31 fe 52 b0 fe 54 02 2d 7d fd cf 04 2b fc e4 03 1c b7 fd d3 7b 02 31 fe 50 b1 fe 53 02 2d 7f fd cf 01 e4 ae fe 55 02 29 7c fd d6 ae 03 0c fc f4 b1 02 27 7c fd d7 04 51 ae Data Ascii: 9xtIJss>51 +W0*6oSP6z{qxt{z$jPu#'+/!5!73%!5!73%!5!73%{1PR-)y1RT-}+{1PS-U)\|'\|Q
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 74 50 4e 74 e8 75 bb 6e 05 88 39 87 75 fe fc fe dd 8e 01 0b bc be 01 16 98 fe 8c 7d 7f 6d 7b 49 89 61 01 16 01 17 9c fe e7 bd fd ad 02 59 7e 81 fe 48 fb 44 07 3e fa a2 62 4c fe ce 5c d2 b2 2e 26 3f 36 17 32 dd c5 83 d8 81 81 e9 9c 6f 8d 6c 58 42 4c 2e 14 38 d2 bb 87 c2 68 01 32 39 04 95 fe f2 01 0e ff ff 00 56 00 00 0b 4f 08 63 00 26 03 b1 00 00 00 27 02 a7 06 30 00 00 00 07 02 a7 09 0e 00 00 ff ff 00 9e 00 00 05 1f 08 63 00 26 02 a7 00 00 00 07 02 a7 02 de 00 00 00 02 00 11 fd c4 05 19 00 00 00 03 00 07 00 00 01 15 21 35 01 15 21 35 05 19 fa f8 05 08 fa f8 fe 96 d2 d2 01 6a d6 d6 00 02 fa 0f fd 28 ff 16 ff 8e 00 03 00 07 00 00 07 15 21 35 01 15 21 35 ea fa f9 05 07 fa f9 72 f6 f6 fe 90 f6 f6 00 01 00 53 fd 62 08 ea ff 60 00 10 00 00 01 20 24 24 27 37 16 Data Ascii: tPNtun9u}m{IaY~HD>bL\.&?62olXBL.8h29VOc&'0c&!5!5j(!5!5rSb` $$'7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49753	13.32.121.110	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	566	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "d17c0274915408cee0308d5476df9f45" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: WO6PwqnqAFil__PxmIS8OFC99Xdj9ek--62HSMnoOsxsP8TK4lkSXA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:36 UTC	6396	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-30 08:28:36 UTC	1796	IN	Data Raw: 52 fd ee 03 6b fe d8 19 0b 67 fe e7 02 96 9a 9a fd 4e ff 01 d7 01 44 f9 01 87 01 10 8e 65 b7 fd 99 49 71 4f 2a 9c fe d7 d6 d6 fe d4 9d 6d c3 80 11 01 46 fb b8 ea 7d 89 00 02 00 8e ff e4 09 4c 08 cc 00 12 00 3d 00 00 01 21 13 3e 03 33 32 16 17 11 26 26 23 22 06 06 15 01 20 24 02 11 34 12 00 24 33 32 04 16 16 17 21 2e 03 23 22 06 02 15 14 12 16 33 32 36 36 35 17 21 11 21 11 21 27 23 06 04 07 cc fe 46 03 02 62 ad e0 7d 33 62 34 1d 3c 1e 46 79 4a fc 89 fe e1 fe 4c f4 94 01 09 01 60 ca ae 01 2f ee 97 15 fe 4a 15 4f 73 8f 54 9c f2 89 83 ee a1 96 d4 71 52 fd ee 03 6b fe d8 19 0b 67 fe e7 05 6a 01 38 87 ce 8d 48 0b 0d fe ad 03 07 1e 57 54 f9 42 ff 01 d7 01 44 f9 01 87 01 10 8e 65 b7 fd 99 49 71 4f 2a 9c fe d7 d6 d6 fe d4 9d 6d c3 80 11 01 46 fb b8 ea 7d 89 ff ff Data Ascii: RkgNDeIqOmF}L=!>32&&#" $4$32!.#"32665!!!'#Fb}3b4<FyJL`/JOsTqRkgj8HWTBDeIqOmF}
2024-12-30 08:28:36 UTC	6396	IN	Data Raw: 02 00 ff ff 00 b2 00 00 03 51 0a 8d 02 26 00 c5 00 00 00 07 06 64 fe dd 02 00 ff ff ff 58 00 00 03 c0 0a 7e 02 26 00 c5 00 00 00 07 06 6a fe 77 02 00 ff ff 00 6e 00 00 04 85 0a 51 00 27 00 c5 00 ee 00 00 00 07 06 6b ff ba 02 00 ff ff ff a5 00 00 03 73 0a 00 02 26 00 c5 00 00 00 07 06 6d fe 71 02 00 ff ff ff 9e 00 00 03 7b 0a 18 02 26 00 c5 00 00 00 07 06 6e fe e5 02 00 ff ff 00 42 fd c2 02 85 08 00 02 26 00 c5 00 00 00 06 06 76 ca 00 ff ff 00 a6 00 00 02 72 0a 75 02 26 00 c5 00 00 00 07 06 70 ff f2 02 00 ff ff ff 58 00 00 03 c0 0a 7e 02 26 00 c5 00 00 00 07 06 73 fe 77 02 00 ff ff fe d4 00 00 03 21 0a 8d 02 26 00 c5 00 00 00 07 06 7b 04 86 02 00 ff ff ff 9a 00 00 03 7a 0a 96 02 26 00 c5 00 00 00 07 06 7f 04 f2 02 c2 ff ff 00 b2 00 00 02 ff 0b 07 02 26 00 Data Ascii: Q&dX~&jwnQ'ks&mq{&nB&vru&pX~&sw!&{z&&
2024-12-30 08:28:36 UTC	2400	IN	Data Raw: 14 06 06 07 07 21 03 21 32 36 36 35 34 26 26 23 21 11 21 21 01 21 01 21 21 01 21 b2 03 16 f9 01 4c a7 75 cd 82 5d fd 36 03 01 fc 69 92 4a 46 8f 6a fe 9b fe 4f 05 c2 fd 63 01 6f 02 a4 fd 34 fe cf 02 a5 01 26 08 00 9c fe e2 c4 a4 f1 a2 2e 25 01 63 41 7f 5e 59 82 47 f9 65 03 9e fc 62 03 9e 00 03 00 16 00 00 07 2e 08 00 00 03 00 1b 00 1f 00 00 01 21 11 21 03 11 21 32 04 12 15 14 02 04 23 21 11 21 32 36 36 35 34 26 26 23 21 11 01 01 21 01 01 df fe 37 01 c9 ff 03 27 e9 01 48 ae b1 fe b3 eb fd e3 01 d6 7d a4 51 52 a4 7d fe dc 02 a1 01 fc fe 23 fe 0d 02 f2 01 45 fb c9 08 00 a5 fe d3 cb cc fe db 9c 01 5c 44 88 65 66 8c 49 f9 62 03 a4 fc 5c 03 a4 00 01 00 70 ff e3 06 c4 08 1c 00 33 00 00 01 26 26 23 22 06 06 15 06 1e 02 17 17 1e 03 17 06 02 04 23 22 24 02 27 21 1e Data Ascii: !!26654&&#!!!!!!!Lu]6iJFjOco4&.%cA^YGeb.!!!2#!!26654&&#!!7'H}QR}#E\DefIb\p3&&#"#"$'!
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 08 00 ff ff 00 43 00 00 07 f6 0a 51 02 26 01 c5 00 00 00 07 06 6b 01 5d 02 00 ff ff 00 43 fd c1 07 f6 08 00 02 26 01 c5 00 00 00 07 06 8b 07 23 00 00 00 01 00 35 00 00 0b 30 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 7f fd b6 01 d9 01 53 11 01 76 01 95 01 75 12 01 53 01 d9 fd b6 fe 5a fe 7a 10 fe 7b 08 00 fa 71 05 8f fa 6e 05 92 f8 00 05 3b fa c5 ff ff 00 35 00 00 0b 30 0a 7e 02 26 01 c8 00 00 00 07 06 6a 02 9e 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 66 02 61 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 64 03 03 02 00 ff ff 00 35 00 00 0b 30 0a 69 02 26 01 c8 00 00 00 07 06 69 02 c2 00 24 ff ff 00 35 00 00 0b 30 0a 75 02 26 01 c8 00 00 00 07 06 70 04 18 02 00 ff ff 00 35 fd c7 0b 30 08 00 Data Ascii: CQ&k]C&#50!!3!3!!#SvuSZz{qn;50~&j50&fa50&d50i&i$50u&p50
2024-12-30 08:28:36 UTC	3592	IN	Data Raw: 00 00 13 21 11 06 16 33 32 36 37 26 26 23 22 06 07 05 27 37 3e 03 33 32 16 16 15 14 06 06 23 22 2e 02 35 01 11 21 11 92 01 aa 01 47 46 2c 3c 01 01 3e 36 73 c7 81 fe e8 d2 df 54 bf c8 c0 55 7b bc 6a 6f ca 8b 65 c8 a3 61 01 aa fe 56 01 85 fd fc 47 58 45 2e 24 44 71 64 ed f0 bc 3c 70 5a 35 6a b0 6a 69 be 77 46 8c d0 8b 08 13 f8 00 08 00 ff ff 00 b4 00 00 04 a8 08 00 00 26 02 d3 0a 00 00 07 06 70 02 27 fc c7 ff ff 00 aa 00 00 03 43 0a 8d 02 26 02 d3 00 00 00 07 06 64 fe cf 02 00 ff ff 00 41 fd 70 02 54 08 00 02 26 02 d3 00 00 00 06 06 77 ff 00 ff ff 00 aa 00 00 04 42 08 6a 00 26 02 d3 00 00 00 07 07 f8 02 2d 00 00 ff ff 00 99 fd c1 02 66 08 00 02 26 02 d3 00 00 00 07 06 8b 04 86 00 00 ff ff ff 97 fd c1 03 66 0a 00 02 26 02 d3 00 00 00 27 06 8b 04 86 00 00 00 Data Ascii: !3267&&#"'7>32#".5!GF,<>6sTU{joeaVGXE.$Dqd<pZ5jjiwF&p'C&dApT&wBj&-f&f&'
2024-12-30 08:28:36 UTC	12792	IN	Data Raw: 07 07 f1 ff 52 ff e0 ff ff 00 6c ff e2 06 70 09 1c 02 26 03 07 00 00 00 07 07 f2 00 b7 ff d7 ff ff 00 6c ff e2 06 54 09 20 02 26 03 07 00 00 00 06 07 f3 28 d3 ff ff 00 6c fd c1 06 54 08 7e 02 26 03 07 00 00 00 26 06 6a 4b 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 07 06 64 00 b1 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 06 06 66 0e 00 ff ff 00 6c ff e2 06 f4 09 07 02 26 03 0b 00 00 00 07 06 80 07 08 00 0a ff ff 00 6c ff e2 06 f4 08 51 02 26 03 0b 00 00 00 07 06 6b 00 a0 00 00 ff ff 00 6c fd c1 06 f4 06 5a 02 26 03 0b 00 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff 9e 06 54 08 8a 02 26 03 0a 00 00 00 07 06 64 00 b1 ff fe ff ff 00 6c ff e2 06 54 06 14 02 06 03 07 00 00 ff ff 00 6c ff e2 06 54 08 a4 02 26 03 07 Data Ascii: Rlp&lT &(lT~&&jKfl&dl&fl&lQ&klZ&flT&dlTlT&
2024-12-30 08:28:36 UTC	6396	IN	Data Raw: fe 1e 0b 63 08 00 00 05 00 11 00 00 01 03 21 11 23 11 01 21 11 21 11 21 11 21 11 21 11 21 0b 63 1c fe 77 a7 f7 ed 01 a7 02 4c 01 a5 02 45 01 a5 f6 7e 01 4f fc cf 01 e2 01 4f 06 b1 f9 5c 06 a4 f9 5c 06 a4 f8 00 00 02 00 64 00 00 08 9a 08 00 00 03 00 1a 00 00 13 11 21 11 13 21 32 04 12 15 14 02 04 23 21 11 21 11 21 32 36 36 35 34 26 23 21 64 02 e0 5a 01 e8 f3 01 61 c0 c0 fe 9f f3 fd 02 01 b1 01 4d 74 a0 53 b9 ae fe 18 06 ae 01 52 fe ae fe 5d 9d fe e2 c2 c1 fe d9 a6 08 00 f9 5c 55 8d 54 7a a9 00 02 00 ba 00 00 09 22 08 00 00 16 00 1a 00 00 01 21 32 04 12 07 16 02 04 23 21 11 21 11 21 32 36 36 27 36 26 23 21 01 11 21 11 01 cf 01 e8 f4 01 61 c0 01 01 c0 fe 9f f4 fd 03 01 b0 01 4d 75 a0 53 01 01 b9 af fe 18 07 53 fe 50 05 0b 9d fe e2 c2 c1 fe d9 a6 08 00 f9 5c Data Ascii: c!#!!!!!!cwLE~OO\\d!!2#!!!26654&#!dZaMtSR]\UTz"!2#!!!266'6&#!!aMuSSP\
2024-12-30 08:28:36 UTC	8683	IN	Data Raw: 4b 00 a8 ff ff 00 a6 fd c4 06 11 08 b0 02 26 04 81 00 00 00 07 09 a1 01 89 00 b0 ff ff ff 82 fd c4 06 11 06 14 02 26 04 81 00 00 00 07 07 fe fe cb fa f5 00 01 00 8b fd fc 05 c9 06 14 00 27 00 00 01 32 04 12 15 21 34 26 23 22 06 06 15 15 14 16 16 17 1e 02 15 14 06 07 27 36 36 35 34 26 27 26 24 02 35 35 34 12 24 03 54 c3 01 19 99 fe 75 79 73 60 86 44 46 9e 83 b0 ba 45 bf 89 da 41 43 41 52 e1 fe e5 86 ab 01 40 06 14 96 fe e7 c5 93 92 6b cd 93 24 70 98 65 24 30 67 76 48 92 fc 66 a0 43 70 33 32 3f 14 3c bb 01 17 c1 24 f5 01 64 c1 00 03 00 b0 ff e4 06 b1 05 d0 00 15 00 27 00 2b 00 00 13 35 36 12 24 33 1e 02 17 1e 02 07 15 16 02 04 23 22 24 02 25 15 1e 02 33 32 36 36 35 35 34 26 26 23 22 06 06 01 11 21 11 b0 01 a8 01 42 e9 21 3b 60 56 6d c5 7d 01 01 a5 fe c8 e0 Data Ascii: K&&'2!4&#"'6654&'&$554$Tuys`DFEACAR@k$pe$0gvHfCp32?<$d'+56$3#"$%3266554&&#"!B!;`Vm}
2024-12-30 08:28:36 UTC	7969	IN	Data Raw: 06 2c 00 04 00 ff ff e4 07 42 08 1c 00 16 00 1a 00 1e 00 34 00 00 01 22 06 07 21 36 36 24 33 32 04 16 15 14 06 06 07 25 36 36 27 36 26 01 21 11 21 11 21 11 21 01 20 00 27 3e 02 37 05 06 06 07 16 16 33 32 36 37 21 06 06 04 04 2e 75 77 04 fe 4c 0b 9a 01 21 d6 d5 01 29 9a 34 56 32 fe a7 35 35 01 01 74 02 a3 f9 bd 06 43 f9 bd 06 43 fc e4 fe a7 fe 9f 01 01 3a 5e 38 01 56 3a 3c 01 01 8f 7b 7b 97 06 01 b9 0b 9f fe c8 06 bc 5e 58 ac ee 7c 76 d2 8d 43 79 63 25 5c 28 60 3e 45 52 fd 9a 01 1f fd 32 01 18 fc 25 01 08 e6 45 82 68 1d 54 28 76 38 56 5e 5e 73 c1 f6 76 00 03 00 2d 00 00 08 25 08 00 00 03 00 07 00 13 00 00 01 15 21 35 01 15 21 35 01 11 21 01 23 11 21 11 21 01 33 11 08 25 f8 08 07 f8 f8 08 07 55 fe 8a fc 86 10 fe 50 01 7b 03 75 11 05 14 c8 c8 fe 50 c8 c8 04 Data Ascii: ,B4"!66$32%66'6&!!!! '>73267!.uwL!)4V255tCC:^8V:<{{^X\|vCyc%\(`>ER2%EhT(v8V^^sv-%!5!5!#!!3%UP{uP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	104.17.25.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:36 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:36 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 413064 Expires: Sat, 20 Dec 2025 08:28:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNkWbo0%2FjoBHfJM%2FISL2kflxPLWZCMymg6MrD3LyeNTj85yk5LebexmUX60b7d68FoTffU2L9rdBEMq%2Bmc6CxcuqYd7FfyORksLqHoPiZ9oVlsQ6hnnrX4mUmRw3Hl%2FgDXzoN5rS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a848ed354343-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:36 UTC	409	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2024-12-30 08:28:36 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:37 UTC	1202	OUT	GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=1&f=0&d=1735547314951&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; AWSALBCORS=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b
2024-12-30 08:28:37 UTC	841	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:37 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 159 Connection: close Set-Cookie: AWSALB=IXH8enz81uwGGMOmFpXKEV41XrStPXgG8FnyCMgmvM3jufXkh0v3CLV4YzPKWQkm8Crvlj+VWvy8a5szRrJJS90Z+X9cQn9muYKwEc8vprfZmUBwfAbiT4+MUpkG; Expires=Mon, 06 Jan 2025 08:28:37 GMT; Path=/ Set-Cookie: AWSALBCORS=IXH8enz81uwGGMOmFpXKEV41XrStPXgG8FnyCMgmvM3jufXkh0v3CLV4YzPKWQkm8Crvlj+VWvy8a5szRrJJS90Z+X9cQn9muYKwEc8vprfZmUBwfAbiT4+MUpkG; Expires=Mon, 06 Jan 2025 08:28:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=29078E70397377A97AFAC18F5EC7C70F; Path=/keyserver; Secure; HttpOnly Server: unknown
2024-12-30 08:28:37 UTC	159	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 73 74 61 74 75 73 27 3a 32 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 43 61 6e 6e 6f 74 20 69 64 65 6e 74 69 66 79 20 72 65 63 69 70 69 65 6e 74 2e 27 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 7d 29 3b 0d 0a Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'status':21,'message':'Cannot identify recipient.','action':'open','success':false,'state':1});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:37 UTC	686	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=AC60A683F74E774E90C5C4C13F184EEF; AWSALB=PijJ358ekhiwq3T2twAjfzUTp+cSFiRlqZf4f5lTegS7W0Wei/dxtysn4oEn303WxdIz3PtF5kHpF3UUgaqauc1zRDV4/BZljnGLXyy2zsKkXvftJPPizSgWI6MV; AWSALBCORS=cBMSaGJPl8UzFsQp1od1f3coU0Saofr5w0NHThoeuDzKV0tBzN2XrWdDheOTyFl7QsVx3drsqwaB+zGYIXTQmklAro+yjnuVjKR0UHJ+PfZRQGJq6B+jFXCbya5b
2024-12-30 08:28:37 UTC	881	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:37 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM; Expires=Mon, 06 Jan 2025 08:28:37 GMT; Path=/ Set-Cookie: AWSALBCORS=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM; Expires=Mon, 06 Jan 2025 08:28:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-c9be" Server: unknown
2024-12-30 08:28:37 UTC	8549	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-30 08:28:37 UTC	9000	IN	Data Raw: 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 d9 2e c2 08 08 91 c0 c2 40 ba e8 24 3a 39 42 40 1c 82 64 20 cd f9 01 6d 23 37 00 e7 71 a4 f6 c0 13 0f 7d 01 26 f6 92 be 95 ff 00 26 56 58 18 42 73 ea 2e 2e 67 69 1c 67 da 35 86 41 9c 7c 87 3d 73 a1 a4 ce a2 e3 d3 a8 54 2a a7 b8 ff 00 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a Data Ascii: #` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl.@$:9B@d m#7q}&&VXBs..gig5A\|=sT*q(
2024-12-30 08:28:37 UTC	9000	IN	Data Raw: 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 cb 40 92 ea 82 15 bd 76 34 5a 10 d5 7a ed d0 d2 b1 b4 80 aa db f4 15 ab cb 71 a7 90 b3 c7 40 27 8a 51 2e 42 c9 b5 12 92 81 63 e2 0e ba 4e 35 02 6b 48 ba 72 b4 35 b2 84 db c9 8f 25 ca a9 2d b5 7a 9a 5f 46 06 0a f0 6d 5b a7 83 9c 60 74 c7 40 4e 0c 6b 66 b5 36 56 90 2e 40 Data Ascii: $H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(@v4Zzq@'Q.BcN5kHr5%-z_Fm[`t@Nkf6V.@
2024-12-30 08:28:37 UTC	9000	IN	Data Raw: c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 31 55 e7 9d 0c 38 55 e1 58 e8 bc 25 ae 8a 01 71 93 b2 b5 8b e5 1d 7c 7b 08 a7 15 96 c6 ed 4e a0 f8 6e eb cf e0 2e 49 ff 00 4f d8 8f a5 e9 64 3f c6 f6 68 2f c6 94 4a cf 68 5d 0d ad d0 54 a7 15 06 4e 5b f5 24 45 2a ef be c1 0e 61 3f 1d 43 94 2f 97 ee 3a e9 9d ca 87 6b 71 Data Ascii: _\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E1U8UX%q\|{Nn.IOd?h/Jh]TN[$Ea?C/:kq
2024-12-30 08:28:37 UTC	9000	IN	Data Raw: 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b 36 d0 f2 16 1e 59 42 58 28 97 20 80 4f ee 2c 8d cb 00 89 22 20 a0 01 48 a8 36 89 ab 03 40 27 90 72 01 b4 2c a0 91 c8 0b 96 0c d3 8d 4d 19 8d b5 01 b6 4b 2a 05 80 24 ba e5 0a d0 99 55 78 64 15 45 0b 53 43 2e db 35 28 ce da 96 8c ed a9 a2 20 01 00 14 31 31 89 81 16 d0 28 Data Ascii: \|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd6YBX( O," H6@'r,MK*$UxdESC.5( 11(
2024-12-30 08:28:37 UTC	7097	IN	Data Raw: 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a 88 ce 50 0e 78 b9 d2 31 1e a4 be ab fb 77 f9 84 4c c7 c7 7f 1b 0e af e9 6d e8 06 7a e3 4f 1f 39 34 ac 35 89 9d ff 00 5c 91 30 bd 17 c3 d4 2a f3 d2 40 d1 6b 0f c6 fe c1 66 21 e7 4f 0b d1 0e ca 7d 11 2d ce 62 63 12 03 b5 63 1e 10 f8 b6 fa 78 cf b4 4b 2a 26 5f 8f e9 ea 09 Data Ascii: y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((YPx1wLmzO945\0@kf!O}-bccxK&_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	13.32.121.35	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:37 UTC	360	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:37 UTC	723	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Dec 2024 08:28:37 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" X-Cache: Hit from cloudfront Via: 1.1 adc51edbb4dc468fb382e40b115a2f62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: WpRhS5clSatc-_FYFTtZySYpGotpa8gvJIzL8-8dmvsANG7mH4cAjw== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 79 36 c8 9a 9d 50 04 ee d0 4b 1a a2 6b 87 06 a0 63 6f 4b dc 8d 53 95 20 d2 7a 98 d5 b4 f6 c8 1b 80 b2 82 40 62 c8 e5 06 40 9a b9 d4 6d 48 c2 10 13 ae 19 35 71 86 53 95 9f bc 2c b7 20 2b 53 1b f1 f5 45 56 dd 0d 00 c3 8e c6 cd f4 30 ba da e4 da af 72 90 2b c0 4d aa a9 61 6b 2a a3 04 9d 9c b0 2d 27 67 2f 43 62 5b 04 e4 06 08 48 6d b0 09 0c 89 c8 24 00 9c 8d 28 04 a3 41 80 09 8c 00 00 00 0c ec 49 56 24 0a a9 44 54 d4 09 60 36 20 00 01 00 c0 50 00 30 10 c0 04 dc 0c cf 95 c2 01 3b f7 31 7c b0 2f a7 7b 67 44 55 78 eb 5d 7d 4c 88 85 bb 93 44 5a e1 4b 36 66 de a7 e0 83 6a 41 52 b1 8a a1 ed 7a d9 c9 40 04 ac 74 1e e6 12 4b b8 0e 43 79 2d e2 4c f7 76 08 d5 d9 90 df 72 72 c7 b4 07 5c bc 03 99 2e b7 49 60 89 c8 57 47 1a 8a 9a 19 f1 fc a6 85 00 00 00 10 cb 25 81 9b 34 Data Ascii: y6PKkcoKS z@b@mH5qS, +SEV0r+Mak*-'g/Cb[Hm$(AIV$DT`6 P0;1\|/{gDUx]}LDZK6fjARz@tKCy-Lvrr\.I`WG%4
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 19 a5 79 18 1c dc c9 c6 03 db 52 ea d3 6e c6 bc af 49 2d 2b 51 3b 3d 20 0f 3b dc 5f d4 ce 3b b3 ab 95 27 99 39 dd 24 cb 6c ea 82 d5 34 88 1e d7 d0 2b 0d 06 94 9b fd 32 be 93 e8 11 c9 10 f2 68 96 0d 1f 1b d0 4a 85 0e b5 92 df 00 d6 0e 9e 37 24 1c dc 74 9c 1d 75 a4 23 55 45 a9 69 40 46 6e 98 0a a6 99 a3 ce 0a aa 2a 3a d1 42 43 34 c8 b6 87 98 ea f7 b7 0c f4 ed a1 c5 3c d3 fb 63 c8 95 a9 5a ac 50 f3 5f 3a 4d c9 e9 4b 55 7d cc 2a ee eb 2e aa 4c d8 b2 bc db 73 d5 19 f1 d9 3b 4f 63 d5 dd c8 bf 65 41 f2 59 7f fa 69 fc 42 69 52 eb e8 95 cc f4 f3 46 95 b4 d6 5d 23 c0 ab 67 3b 64 d4 47 04 ad cb 41 ca f0 0b 72 56 73 c5 6f c0 d2 ab 8e fa 51 af 81 8c 6f 60 70 ea 67 c0 e7 92 3c 18 ee f8 eb 09 ab 7d c5 d1 f1 37 89 4e 3b 1a 9d 31 5d 54 f9 99 e0 fb ea b9 6f c4 f6 f8 12 4d Data Ascii: yRnI-+Q;= ;_;'9$l4+2hJ7$tu#UEi@Fn:BC4<cZP_:MKU}.Ls;OceAYiBiRF]#g;dGArVsoQo`pg<}7N;1]ToM
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 2a 5d 19 d3 7f 94 8b 66 38 c7 c7 84 21 d3 42 0c f8 7f e5 5e 67 af c9 f2 b3 c7 e1 ff 00 95 79 9e c7 27 ca cd 44 7c f7 2f b7 77 bb 72 79 f7 7b 5c 23 d2 e6 e6 db 66 a0 f2 dd 5b 2c 1e 8f 1f b7 56 a6 e9 32 a5 f6 bc 9d 7c 17 55 e2 87 a9 e6 d9 ee b7 81 15 a7 2d d3 66 54 ac e6 60 e8 d9 58 c9 c6 93 6f 05 85 74 d6 fc 95 d2 cc fa ca e8 8f 8e df 65 86 7d 7f 1b 9a a2 c4 68 00 05 40 21 88 08 b1 99 ab 21 90 6a b4 18 96 83 28 00 00 00 4c 62 60 67 62 0b b1 99 04 b1 d5 c3 13 0a ea 07 4c 03 40 98 ca 21 2c 1c bc cb 07 62 47 3f 2b 5d 48 39 38 79 6d 5a f7 07 ee 78 f9 31 78 0a d1 35 e9 39 ed ed ec b5 20 d9 7b 7a af 57 0d 9d 7c b4 fb 8d 57 25 96 2e a7 c5 1c 3f 46 d5 ca c1 4b 9e d5 70 f2 51 d6 f8 e9 7d 1e 4c 79 28 f8 f5 58 0d dc 7c 9a fa 59 a5 5d e9 a3 fa 8b c7 52 0e 5f a9 51 ee Data Ascii: *]f8!B^gy'D\|/wry{\#f[,V2\|U-fT`Xote}h@!!j(Lb`gbL@!,bG?+]H98ymZx1x59 {zW\|W%.?FKpQ}Ly(X\|Y]R_Q
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: b6 75 53 db 4a c9 9b e6 4b 4c fe 05 2f 77 64 a1 24 4e 6b 33 23 da f6 74 55 e3 5e 09 99 2a 6c e2 7f e6 65 7b 5e 58 e0 4e dd bf 36 74 59 7a 6a 8c f9 e3 fe 5a 95 cd c6 9a e3 e3 5d ed 6b 7e 66 3e f2 ae cf 8e bd ee 7a 4a 9e 9a 63 a3 33 e4 49 5d 59 af f8 d3 b7 c7 44 66 df f7 4f 87 97 ce f7 7b 8b dd e9 4f d3 08 e3 bd a5 c9 e9 5f 89 46 de ba db cd 98 72 70 55 60 e9 f6 8d 7c 63 b3 dd 39 7c 56 ff 00 3a fc 51 c7 c9 c2 fe ad bf d4 7a 5c 94 9e 2a db fa 5d 59 5c ae b5 bb 96 94 8d 4f 3c 57 81 6e 3b 26 c9 da d6 a7 af 67 5b 38 4e af e2 43 e1 5a c0 fb 7e 61 c3 ca 19 e8 5b db d6 de 04 7f 69 e2 3e d0 c7 10 ce bf ed 2c 2f ed 2c 5d 8b 8a ff 00 af cd ec fc 3f 53 d6 6e 38 ec fc 0e 2f 63 c0 e8 ec fc 8e fb d1 fd 2b 2e e7 39 77 da 3c df 6f ff 00 25 7c cd 39 1c 53 8d 78 59 fe 21 c3 Data Ascii: uSJKL/wd$Nk3#tU^le{^XN6tYzjZ]k~f>zJc3I]YDfO{O_FrpU`\|c9\|V:Qz\]Y\O<Wn;&g[8NCZ~a[i>,/,]?Sn8/c+.9w<o%\|9SxY!
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 71 90 eb ed 9b 3d 1e 3a d7 8f db 5d 5b a4 9e 43 e6 e4 b3 d5 fc 0f 53 d9 7b 7b f2 71 5e 8d 46 ee af c8 67 e5 35 3e eb 9e f6 e4 8a fa 53 4b 3d 74 3c d5 c5 6b da 2a 9d 99 ee df 8f 8e 29 7b 4d de d8 c6 98 39 b9 79 2d 3b 6b 1c 6b fc ba fd e5 6b 3e d1 cd 5f 65 b3 3c b6 54 f0 59 66 8a f5 e3 ff 00 8a bf f9 5b 5f b8 6b 81 fc d6 f4 af ea b3 fb 36 56 da d2 bb a3 72 fe ab 7a 6b f0 fd cc 2e 49 db 9e d6 77 9b 5d bb 25 f7 7f 03 9e 2c 9e eb 2d 7f 23 b6 2f cc b7 72 56 cb 8b a6 c5 f8 b5 a9 d2 b8 1c 6e a3 5c 95 f0 d5 79 a2 a7 17 f8 79 fc 7c 69 2c 69 a9 d7 2b 6c 78 0f 92 a9 4a 5e 44 3c e0 8e 7e bb 63 ee 35 a2 f1 35 f6 5f bb cc c7 9b e7 4f fa 11 b7 b2 f4 d1 be a1 96 dc 89 51 5a fd f0 bc 4e 6a 38 ac bc 22 f9 6c ee e1 98 d9 ce 3a 01 a7 1e bb 99 1c 9c 82 df 08 e7 73 77 0b 2c 09 Data Ascii: q=:][CS{{q^Fg5>SK=t<k*){M9y-;kkk>_e<TYf[_k6Vrzk.Iw]%,-#/rVn\yy\|i,i+lxJ^D<~c55_OQZNj8"l:sw,
2024-12-30 08:28:37 UTC	13232	IN	Data Raw: bd db 79 1b 5b 5b 55 ae 99 8d 3c a0 95 77 c6 b1 09 da 1c f8 75 af 9f 54 05 ee 74 70 9a 95 76 f6 f8 c7 f2 29 53 6d b7 57 e5 bb 9c bd 27 af f0 0b 59 b7 6b 56 b3 48 69 7d f9 6f c7 b1 34 b5 6c eb bf 45 2a 1a cf f9 7f 0d 40 5c 9c 69 db 63 9a 6d 53 dd 63 b7 e6 db 2a d2 e6 dd 3e 6f 2c 6b 8e ef 08 9e 5b c6 db 39 79 73 1f 97 8e de c5 f0 bb 6e 69 c5 e9 16 ae 3a fe e9 8f 88 11 f5 76 bd d5 98 6a 52 7d 5e 93 e6 8b 76 ba 6b 6f ae 3b ad 5c 67 e3 fa 98 2b 6e b4 7c 8a 5c 77 db 6d 7c 30 6b 5b 25 35 4d ca ca 71 d5 4c a4 ba a6 05 52 8a db b8 af 35 7f a6 b2 42 74 76 b2 6f d0 fe 5c 6b a2 7f e2 55 79 2c ef f5 17 fa 5f 6c fc b0 fc 3a a1 5f 92 9a a7 9e 3c 78 26 ed ea f8 30 3a 1c b4 e5 56 32 dd 5f 5e cf c1 99 dd 52 ff 00 ee da 6c 9b aa 9f ea f0 5e 5d d8 d5 ab 7b b4 a7 2b 73 6b b2 Data Ascii: y[[U<wuTtpv)SmW'YkVHi}o4lE@\icmSc>o,k[9ysni:vjR}^vko;\g+n\|\wm\|0k[%5MqLR5Btvo\kUy,_l:_<x&0:V2_^Rl^]{+sk
2024-12-30 08:28:37 UTC	16384	IN	Data Raw: 58 dc d9 6e 4a cb 72 6d ce b1 d3 3d 25 f4 40 5d 65 b4 d3 5b 27 d2 df f5 75 d7 2e 3b bc 48 56 6d 8b 37 d6 12 e8 b4 ff 00 d5 c8 cc 9f 1b b3 8b 4e e8 ac f9 bc c7 c1 7d e5 25 78 8a d9 3d af 1f e6 6f f1 4b 3a 81 7b 74 6d 3b 59 62 de 2f fa 7b 25 5d 31 a9 77 7f 4a ad 4a 4b ab 5f b9 fe ea ca fd 8b ef 7a 23 1a 24 ac b7 42 4b 36 d5 b8 ea d7 85 8b ba ad fd 2b 14 ed a4 f6 c7 eb f7 01 b5 55 a3 7d dc 2b ac 6d f9 92 e8 bb 7a 8c 3e a5 6e f6 36 de e7 37 7f 92 5f 0e da bc 1a 72 ab 70 bb 66 5b 49 55 6b 6d 33 e5 0b 07 3d 6f b6 37 42 8c ae f2 f1 0b f8 f4 02 ab 95 15 6d df 45 fe 5a f4 4f e3 f8 9b 71 da cb 09 a9 6a 5c 6a fc 2c f4 49 75 82 2b 66 a6 cb d7 11 d7 1e 5e 2c b4 dd 9c 27 ba b5 4b 11 1e 6d 79 78 84 66 ed 8d bf 32 b2 73 6e b6 7a 2c f4 4b f2 52 55 dd b9 5e aa aa ab 55 f6 Data Ascii: XnJrm=%@]e['u.;HVm7N}%x=oK:{tm;Yb/{%]1wJJK_z#$BK6+U}+mz>n67_rpf[IUkm3=o7BmEZOqj\j,Iu+f^,'Kmyxf2snz,KRU^U
2024-12-30 08:28:37 UTC	10945	IN	Data Raw: 57 d3 3b 66 f5 78 8d 23 c6 7a 89 2c 7a 5e 18 1a b5 4a c3 6e 1f 4b 77 7e 28 4e d6 ab ce bd 1c 61 fc 09 f5 51 4a 86 a7 46 2a d7 fa 16 27 cf 3e 60 35 77 1a fa b5 5f e6 7f c0 71 6d de bc be 9b 71 5f bc 6d aa a6 97 4c 7d 98 2b b8 6b e6 db af 70 22 d5 dd 64 da 49 ad 6c 9e 23 cc d2 aa 5f f4 2c e7 bf c4 cd 55 56 27 45 1a f8 f8 0e a9 d9 61 6e 4f 59 d0 02 bc 9f fb b5 eb a0 6d 76 6d fc 96 7f 14 d7 89 a5 1a ca 7f 2f 66 47 2d 55 d6 1e 35 c7 4f f2 81 a5 ab 69 88 87 d5 78 1c ff 00 55 6e eb 4d dd 7f 91 a6 eb 3a 2b 2e b8 8e a9 0a b2 df a6 bb bf a7 c8 05 65 7c 67 6b d2 ab 59 f8 78 f5 34 a4 ac fc ad 77 d1 d8 8f 55 52 55 5a 74 ec fc cd 1f ae 23 31 af 9b f3 00 e4 a2 59 5a ae 9d 3e 00 92 ca d2 16 8f a8 d3 75 5b 5b dc 9f fe a9 21 bc ca 5e 2a 56 40 9d db 54 43 8c 63 44 5a 89 73 Data Ascii: W;fx#z,z^JnKw~(NaQJF'>`5w_qmq_mL}+kp"dIl#_,UV'EanOYmvm/fG-U5OixUnM:+.e\|gkYx4wURUZt#1YZ>u[[!^V@TCcDZs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:46 UTC	1209	OUT	GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM
2024-12-30 08:28:47 UTC	899	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:47 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 844 Connection: close Set-Cookie: AWSALB=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6; Expires=Mon, 06 Jan 2025 08:28:47 GMT; Path=/ Set-Cookie: AWSALBCORS=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6; Expires=Mon, 06 Jan 2025 08:28:47 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; path=/keyserver; SameSite=None; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-30 08:28:47 UTC	844	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 71 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 36 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 38 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 32 35 38 32 34 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 27 3a 74 72 75 65 0d 0a 2c 27 68 61 64 52 65 6d Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qq,'action':'open','status':16,'message':'Authentication required.','state':8,'reqTime':1735547325824,'reqNumber':1,'recipientIdentified':false,'success':true,'cookiesEnabled':true,'hadRem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49776	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:48 UTC	951	OUT	POST /websafe/custom.action?cmd=authFrame HTTP/1.1 Host: res.cisco.com Connection: keep-alive Content-Length: 917 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6
2024-12-30 08:28:48 UTC	917	OUT	Data Raw: 65 72 3d 25 32 34 52 65 76 69 73 69 6f 6e 25 33 41 2b 31 2e 32 37 36 2b 25 32 34 26 73 75 3d 75 6e 64 69 73 63 6c 6f 73 65 64 2d 72 65 63 69 70 69 65 6e 74 73 25 33 41 25 33 42 26 68 65 69 67 68 74 3d 32 33 33 26 77 69 64 74 68 3d 30 26 68 63 5f 68 65 69 67 68 74 3d 32 31 30 26 63 74 5f 77 69 64 74 68 3d 30 26 76 3d 32 26 6b 73 3d 25 35 45 26 6b 73 6b 68 3d 53 48 41 31 26 6b 63 69 3d 30 26 6d 3d 25 37 43 31 5f 5f 34 39 38 63 64 32 66 64 30 30 30 30 30 31 39 33 65 33 39 33 63 33 37 32 66 66 39 33 63 63 66 66 36 34 30 64 32 38 34 63 25 34 30 6c 6f 63 61 6c 68 6f 73 74 26 66 72 3d 54 72 61 64 69 6e 67 2b 25 33 43 54 72 61 64 69 6e 67 25 34 30 65 65 78 2e 63 6f 6d 25 33 45 26 73 75 62 3d 54 72 61 79 70 6f 72 74 2b 45 6d 65 72 67 65 6e 63 79 2b 4d 61 69 6e 74 Data Ascii: er=%24Revision%3A+1.276+%24&su=undisclosed-recipients%3A%3B&height=233&width=0&hc_height=210&ct_width=0&v=2&ks=%5E&kskh=SHA1&kci=0&m=%7C1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&fr=Trading+%3CTrading%40eex.com%3E&sub=Trayport+Emergency+Maint
2024-12-30 08:28:48 UTC	1197	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:48 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 62572 Connection: close Set-Cookie: AWSALB=hI0d4IObDousMtatmX/zSfSstDRkUy7trpwgVexzY8UQXwuEyDWsuaBr9EpCvLIsaRU/cczLG49ZiD+UrO+LB1MsgWfYDiZUyDGu0g4PfRJS9ks3L4pBjOuC8lgn; Expires=Mon, 06 Jan 2025 08:28:48 GMT; Path=/ Set-Cookie: AWSALBCORS=hI0d4IObDousMtatmX/zSfSstDRkUy7trpwgVexzY8UQXwuEyDWsuaBr9EpCvLIsaRU/cczLG49ZiD+UrO+LB1MsgWfYDiZUyDGu0g4PfRJS9ks3L4pBjOuC8lgn; Expires=Mon, 06 Jan 2025 08:28:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Set-Cookie: JSESSIONID=F22AE571BF74D648E58002485F8D5B4E; Path=/websafe; Secure; HttpOnly Set-Cookie: WebSafe.current-locale=en; Version=1; Expires=Sat, 17 Jan 2093 11:42:55 GMT; Secure; HttpOnly Set-Cookie: WebSafe.current-locale-changed=true; Version=1; Expires=Sat, 17 Jan 2093 11:42:55 GMT; Secure; HttpOnly Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en Server: unknown
2024-12-30 08:28:48 UTC	8233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0a 20 20 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0d 0a 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0a 20 20 20 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"> <head> <title>Authentication Frame</title> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
2024-12-30 08:28:48 UTC	9000	IN	Data Raw: 74 68 69 73 0a 20 2e 65 6e 63 6f 64 65 54 6f 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 63 56 2c 63 53 29 7b 76 61 72 20 63 54 3d 63 56 2e 6c 65 6e 67 74 68 2c 63 55 3d 74 68 69 73 2e 67 65 74 45 6e 63 6f 64 65 41 72 72 61 79 28 29 2c 5f 2c 0a 62 2c 63 57 2c 69 3b 5f 3d 4d 61 74 68 2e 63 65 69 6c 28 63 54 2f 33 29 2a 34 3b 62 3d 4d 61 74 68 2e 63 65 69 6c 28 63 54 2f 33 2a 34 29 3b 63 57 3d 5f 2d 62 3b 69 66 28 21 63 53 29 63 53 3d 6e 65 77 20 41 72 72 61 79 28 5f 29 0a 3b 5f 3d 62 3d 30 3b 77 68 69 6c 65 28 5f 3c 63 54 29 7b 69 3d 63 56 2e 63 68 61 72 43 6f 64 65 41 74 28 5f 2b 2b 29 3c 3c 31 36 3b 69 66 28 5f 3c 63 54 29 69 7c 3d 63 56 2e 63 68 61 72 43 6f 64 65 41 74 28 5f 2b 2b 29 3c 3c 38 0a 3b 69 66 28 5f 3c 63 54 29 69 7c 3d 63 56 2e 63 68 61 72 Data Ascii: this .encodeToArray=function(cV,cS){var cT=cV.length,cU=this.getEncodeArray(),_,b,cW,i;_=Math.ceil(cT/3)4;b=Math.ceil(cT/34);cW=_-b;if(!cS)cS=new Array(_);_=b=0;while(_<cT){i=cV.charCodeAt(_++)<<16;if(_<cT)i\|=cV.charCodeAt(_++)<<8;if(_<cT)i\|=cV.char
2024-12-30 08:28:48 UTC	16384	IN	Data Raw: 2b 29 7b 63 5b 30 5d 5b 62 5d 3d 69 5b 5f 5d 3b 63 0a 5b 31 5d 5b 62 5d 3d 69 5b 5f 2b 31 5d 3b 63 5b 32 5d 5b 62 5d 3d 69 5b 5f 2b 32 5d 3b 63 5b 33 5d 5b 62 5d 3d 69 5b 5f 2b 33 5d 7d 7d 76 61 72 20 59 3d 5b 5d 3b 74 68 69 73 2e 64 65 63 72 79 70 74 3d 66 75 6e 63 74 69 6f 6e 28 0a 5f 65 2c 5f 66 29 7b 76 61 72 20 7a 3d 50 2c 5f 2c 62 2c 64 2c 77 2c 51 3d 6e 65 77 20 41 72 72 61 79 28 78 2a 34 29 2c 55 3d 7a 21 3d 6e 75 6c 6c 2c 52 3d 6e 65 77 20 41 72 72 61 79 28 78 2a 34 29 2c 79 3d 59 3b 79 3d 79 2e 0a 63 6f 6e 63 61 74 28 5f 65 29 3b 64 3d 79 2e 6c 65 6e 67 74 68 26 7e 31 35 3b 77 3d 6e 65 77 20 41 72 72 61 79 28 64 29 3b 66 6f 72 28 5f 3d 30 3b 5f 3c 64 3b 5f 2b 3d 31 36 29 7b 5f 64 28 79 2c 5f 2c 6d 29 3b 69 66 28 55 29 0a 5f 61 28 6d 2c 51 29 3b Data Ascii: +){c[0][b]=i[_];c[1][b]=i[_+1];c[2][b]=i[_+2];c[3][b]=i[_+3]}}var Y=[];this.decrypt=function(_e,_f){var z=P,_,b,d,w,Q=new Array(x4),U=z!=null,R=new Array(x4),y=Y;y=y.concat(_e);d=y.length&~15;w=new Array(d);for(_=0;_<d;_+=16){_d(y,_,m);if(U)_a(m,Q);
2024-12-30 08:28:48 UTC	16384	IN	Data Raw: 6e 74 2e 66 6f 72 6d 73 5b 30 5d 3b 69 66 28 6f 6a 28 6f 50 29 7c 7c 6f 6a 28 6f 51 29 29 65 79 2e 6f 6e 73 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 70 68 28 65 79 29 7d 3b 65 6c 73 65 20 65 79 2e 6f 6e 73 75 62 6d 69 74 3d 6f 70 65 6e 4f 6e 6c 69 6e 65 3b 66 6f 72 28 5f 3d 31 3b 65 71 3d 65 79 5b 27 6b 65 79 27 2b 5f 5d 3b 5f 2b 2b 29 7b 65 71 2e 0a 6f 6e 66 6f 63 75 73 3d 70 6e 3b 65 71 2e 6f 6e 62 6c 75 72 3d 70 6d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 53 28 29 7b 76 61 72 20 6f 56 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 0a 27 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 27 29 2c 70 6f 3d 6f 56 2e 6f 70 74 69 6f 6e 73 5b 6f 56 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 2e 76 61 6c 75 65 Data Ascii: nt.forms[0];if(oj(oP)\|\|oj(oQ))ey.onsubmit=function(){return ph(ey)};else ey.onsubmit=openOnline;for(_=1;eq=ey['key'+_];_++){eq.onfocus=pn;eq.onblur=pm}}function oS(){var oV=document.getElementById('localeSelector'),po=oV.options[oV.selectedIndex].value
2024-12-30 08:28:48 UTC	3232	IN	Data Raw: 64 69 73 70 6c 61 79 20 77 69 6c 6c 20 6c 6f 6f 6b 20 67 61 72 62 6c 65 64 20 61 6e 64 20 74 68 65 20 65 6e 76 65 6c 6f 70 65 20 77 69 6c 6c 20 6e 6f 74 20 6f 70 65 6e 2e 20 54 6f 20 6f 70 65 6e 20 79 6f 75 72 20 6d 65 73 73 61 67 65 20 70 6c 65 61 73 65 20 67 6f 20 62 61 63 6b 20 61 6e 64 20 6f 70 65 6e 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 2e 27 2c 27 61 6c 74 49 6d 67 4c 6f 67 6f 27 3a 27 4c 6f 67 6f 27 2c 27 62 75 74 74 6f 6e 52 65 67 69 73 74 65 72 27 3a 27 52 65 67 69 73 74 65 72 27 2c 27 63 68 61 6e 67 65 50 61 73 73 77 6f 72 64 27 3a 27 43 68 61 6e 67 65 20 70 61 73 73 77 6f 72 64 27 2c 27 52 50 43 53 75 73 70 65 6e 64 65 64 27 3a 27 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 28 24 5b 30 5d 29 20 68 61 73 20 62 65 65 6e 20 73 75 73 70 Data Ascii: display will look garbled and the envelope will not open. To open your message please go back and open the original file.','altImgLogo':'Logo','buttonRegister':'Register','changePassword':'Change password','RPCSuspended':'Your account ($[0]) has been susp
2024-12-30 08:28:48 UTC	9339	IN	Data Raw: 6d 6f 76 65 64 3b 20 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 70 72 65 76 65 6e 74 20 69 74 20 66 72 6f 6d 20 62 65 69 6e 67 20 6f 70 65 6e 65 64 2e 27 2c 27 5f 45 72 72 6f 72 42 61 64 50 77 64 73 27 3a 27 59 6f 75 5c 27 76 65 20 6d 61 64 65 20 74 6f 6f 20 6d 61 6e 79 20 69 6e 63 6f 72 72 65 63 74 20 70 61 73 73 77 6f 72 64 20 61 74 74 65 6d 70 74 73 2e 20 54 68 69 73 20 65 6e 76 65 6c 6f 70 65 20 63 61 6e 6e 6f 74 20 62 65 20 6f 70 65 6e 65 64 2e 27 2c 27 5f 45 72 72 6f 72 42 61 64 50 77 64 27 3a 27 49 6e 63 6f 72 72 65 63 74 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6f 72 20 70 61 73 73 77 6f 72 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 27 2c 27 5f 45 6e 76 65 6c 6f 70 65 4d 69 73 73 69 6e 67 4e 65 Data Ascii: moved; or security restrictions prevent it from being opened.','_ErrorBadPwds':'You\'ve made too many incorrect password attempts. This envelope cannot be opened.','_ErrorBadPwd':'Incorrect email address or password. Please try again.','_EnvelopeMissingNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:48 UTC	1247	OUT	GET /keyserver/keyserver?su=Undisclosed-Recipients%3a%3b&df=&tf=&lp=en&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=8&f=0&d=1735547325824&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqq&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=imZ9En/Vt4MJd8CEuyfeG7agtkgcG7D02ryml0/se/glQP3ciBRh29JVfTkaMskFV9RsJwo9nNQU5TPbq8E53ToNhD3GEIRC/WdPqHEj7yciRhXWkY21vzOwEzpM; AWSALBCORS=ttXXtC7tCItlXBTDwril3twoFfIZzBjgYLQ9CVoUxw+RsYMUhj6nnhPe/+CypI5EYqaUmGGTaxs0qFxtWfx8fmO5DJGwmcgl1hUdxHTlatWZL6bbuGdfnHajpJU6
2024-12-30 08:28:48 UTC	899	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:48 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 844 Connection: close Set-Cookie: AWSALB=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ; Expires=Mon, 06 Jan 2025 08:28:48 GMT; Path=/ Set-Cookie: AWSALBCORS=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ; Expires=Mon, 06 Jan 2025 08:28:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache Pragma: no-cache Set-Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; path=/keyserver; SameSite=None; Secure; HttpOnly Server: unknown
2024-12-30 08:28:48 UTC	844	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 71 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 36 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 38 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 32 35 38 32 34 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 32 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 27 3a 74 72 75 65 0d 0a 2c 27 68 61 64 52 65 6d Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qq,'action':'open','status':16,'message':'Authentication required.','state':8,'reqTime':1735547325824,'reqNumber':2,'recipientIdentified':false,'success':true,'cookiesEnabled':true,'hadRem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	13.32.121.40	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:48 UTC	539	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:49 UTC	725	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125394 Connection: close Last-Modified: Sat, 08 Jun 2024 05:00:10 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Dec 2024 08:28:34 GMT ETag: "a0b4ff216e038470b000b63f5aa39816" X-Cache: Hit from cloudfront Via: 1.1 857b0dca772798c338c78a1be69c955c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 3QENc-wkW2YXCIT6YhNVPJt5NnmlxOq5VqlB3YwEzp7WfdCqX5KA4Q== Age: 41322 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 20 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 4c 69 6e 6b 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 45 72 72 6f 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2f 2a 20 4f 74 68 65 72 20 73 74 79 6c 65 73 20 28 6f 66 74 65 6e 20 70 61 67 65 20 73 70 65 63 69 66 69 63 29 20 2a 2f 0a 0a 2e 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 31 30 70 78 20 30 70 Data Ascii: 555; font-size: 8pt;}.listCellLinkText { color: #003366; font-size: 8pt; text-decoration: underline;}.listCellErrorText { color: #cc0000; font-size: 8pt;}/* Other styles (often page specific) */.formInputCell { margin: 0px 10px 0p
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 51 75 65 73 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d 0a 0a 23 73 75 70 70 6f 72 74 43 6f 6e 74 61 63 74 54 61 62 6c 65 20 7b 7d 0a 0a 2e 73 75 70 70 6f 72 74 54 61 62 6c 65 48 65 61 64 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 31 35 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d Data Ascii: hallengeQuestionContainer { color: #555555; font-size: 8pt; font-weight: normal; margin: 0px 0px 10px 5px;}#supportContactTable {}.supportTableHeading { color: #555555; font-size: 8pt; font-weight: bold; padding: 20px 15px 10px 5px;}
2024-12-30 08:28:49 UTC	14808	IN	Data Raw: 6c 6f 72 3a 20 23 66 66 64 39 64 63 3b 0a 7d 0a 0a 23 74 69 63 6b 2d 6d 61 72 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 63 30 34 61 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 76 77 3b 0a 7d 0a 0a 23 63 6c 6f 73 65 2d 6d 61 72 6b 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 65 72 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0a 20 20 2e 65 78 70 69 72 79 4c 6f 63 6b 50 61 67 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 39 33 39 33 62 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 2e 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 39 38 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 Data Ascii: lor: #ffd9dc;}#tick-mark { color: #6cc04a; padding-right: 1vw;}#close-mark { font-weight: lighter;}@media screen and (max-width: 600px) { .expiryLockPage { color: #39393b; font-size: 16.5px; font-weight: 398; line-height:
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 31 38 33 2c 20 34 38 2c 20 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 66 2d 32 3a 20 72 67 62 61 28 32 31 39 2c 20 31 35 31 2c 20 31 32 38 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 66 2d 31 3a 20 72 67 62 61 28 32 34 31 2c 20 32 31 34 2c 20 32 30 34 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 65 2d 33 3a 20 72 67 62 61 28 32 34 34 2c 20 31 30 30 2c 20 31 32 32 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 65 2d 32 3a 20 72 67 62 61 28 32 34 39 2c 20 31 37 37 2c 20 31 38 38 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 65 2d 31 3a 20 72 67 62 61 28 32 35 33 2c 20 32 32 34 2c 20 32 32 38 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 Data Ascii: 183, 48, 0, 1); --color-accent-f-2: rgba(219, 151, 128, 1); --color-accent-f-1: rgba(241, 214, 204, 1); --color-accent-e-3: rgba(244, 100, 122, 1); --color-accent-e-2: rgba(249, 177, 188, 1); --color-accent-e-1: rgba(253, 224, 228, 1); --color
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 74 6f 6e 3a 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 6d 64 73 2d 62 75 74 74 6f 6e 2d 6c 6f 61 64 69 6e 67 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 5c 22 74 72 75 65 5c 22 5d 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 5c 22 74 72 75 65 5c 22 5d 3a 64 69 73 61 62 6c 65 64 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 5c 22 74 72 75 65 5c 22 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 64 69 73 Data Ascii: ton:disabled:focus-visible,.mds-button[disabled]:focus-visible,.mds-button.mds-button-loading[aria-expanded=\"true\"],.mds-button[aria-expanded=\"true\"]:disabled,.mds-button[disabled][aria-expanded=\"true\"] { color: var(--mds-button-color-text-dis
2024-12-30 08:28:49 UTC	16384	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 20 5c 22 74 6e 75 6d 5c 22 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 2d 6e 75 6d 65 72 69 63 3a 20 74 61 62 75 6c 61 72 2d 6e 75 6d 73 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 32 29 3b 0a 7d 0a 0a 2e 6d 64 73 2d 74 65 78 74 2d 6d 6f 6e 6f 73 70 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 5c 22 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 5c 22 2c 20 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 5c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 5c 22 2c 20 4d 65 6e 6c 6f 2c 20 43 6f 75 72 69 65 72 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 7d 0a 0a 2e 6d 64 Data Ascii: font-feature-settings: \"tnum\"; font-variant-numeric: tabular-nums; background-color: var(--color-neutral-2);}.mds-text-monospace { font-family: \"Roboto Mono\", SFMono-Regular, Consolas, \"Liberation Mono\", Menlo, Courier, monospace;}.md
2024-12-30 08:28:49 UTC	12282	IN	Data Raw: 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 61 72 69 61 2d 69 6e 76 61 6c 69 64 3d 22 66 61 6c 73 65 22 20 74 79 70 65 3d 22 73 74 72 69 6e 67 22 20 76 61 6c 75 65 3d 22 22 20 63 6c 61 73 73 3d 22 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 20 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 73 69 7a 65 2d 6d 64 20 66 69 65 6c 64 4c 65 6e 39 30 22 3e 0a 20 20 20 20 20 20 3c 2f 6c 61 62 65 6c 3e 20 0a 20 20 20 20 20 20 2a 2f 0a 2e 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 67 61 70 3a 20 76 61 72 28 2d 2d 73 69 Data Ascii: n> </div> <input aria-invalid="false" type="string" value="" class="mds-rebuild-input mds-rebuild-input-size-md fieldLen90"> </label> */.mds-rebuild-input-frame { display: flex; flex-direction: column; gap: var(--si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	104.17.24.14	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:49 UTC	559	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:50 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 413078 Expires: Sat, 20 Dec 2025 08:28:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M08Dtss5LOq3jn6mHdnQVtbdfZaAUXMZbf7llRd%2B%2FtLBrFuyLevCbWl2J%2B8CjqE%2BeM5bbEfyZDer9MrZUfMDWfX4i4LuYV%2BBzSKAalO74hntfrmnUFlVUf4Wf3t8d4ZLk89CTw%2Be"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa0a89c8c874285-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 08:28:50 UTC	405	IN	Data Raw: 37 62 65 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2024-12-30 08:28:50 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49781	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:49 UTC	788	OUT	GET /websafe/images/skins/googleSignIn.png HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/custom.action?cmd=authFrame Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ
2024-12-30 08:28:50 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:50 GMT Content-Type: image/png Content-Length: 62336 Connection: close Set-Cookie: AWSALB=GmlzQZwOS9y/24JVXjstcHnkPxX3Nbv1cj2CSMkAHHj8SlLdcThm9jTjmnPZdIe8a/Rn8SmrOGOORgvyTSe5lUOMdt1IU7obsxwAQegUmACeBf0mJCldV2aRo1sg; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/ Set-Cookie: AWSALBCORS=GmlzQZwOS9y/24JVXjstcHnkPxX3Nbv1cj2CSMkAHHj8SlLdcThm9jTjmnPZdIe8a/Rn8SmrOGOORgvyTSe5lUOMdt1IU7obsxwAQegUmACeBf0mJCldV2aRo1sg; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=F9A933DEC4709EA31377E68F1C7DB04B; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-f380" Server: unknown
2024-12-30 08:28:50 UTC	8459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9a 00 00 01 9a 08 06 00 00 00 36 06 85 63 00 00 0c 15 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 08 09 2d 10 01 29 a1 f7 2e 5d 20 10 aa 20 20 1d 6c 84 24 40 28 11 12 82 8a 1d 5d 54 70 ed 22 82 a2 a2 2b 22 b6 b5 00 b2 a8 88 5d 59 04 7b 7f 28 a2 b2 b2 2e 16 6c a8 bc 49 01 5d 5f fb de f9 be b9 f3 e7 cc 39 67 fe 33 f7 dc c9 0c 00 aa 8e 9c bc bc 1c 54 0d 80 5c 61 81 28 26 24 80 99 94 9c c2 24 f5 00 14 10 01 05 a8 01 94 c3 15 e7 f9 47 47 47 00 28 23 fd df e5 dd 4d 80 48 fb 6b 76 d2 58 ff 3a fe 5f 45 9d c7 17 73 01 40 a2 21 4e e3 89 b9 b9 10 1f 01 00 d7 e6 e6 89 0a 00 20 b4 43 bd c9 cc 82 3c 29 1e 80 58 53 04 09 02 40 c4 a5 38 43 8e b5 a5 38 4d 8e 6d 65 36 71 31 Data Ascii: PNGIHDR6ciCCPICC ProfileHWXS[R-).] l$@(]Tp"+"]Y{(.lI]_9g3T\a(&$$GGG(#MHkvX:_Es@!N C<)XS@8C8Mme6q1
2024-12-30 08:28:50 UTC	9000	IN	Data Raw: 4d 52 93 20 f0 30 51 06 02 8a 6b ec da ef 44 04 de 35 a0 51 e2 d8 e6 84 29 c0 7a c6 9a 85 1a c5 3a 8b 33 b7 30 9b 53 f3 ba 5a e8 d6 47 a5 a4 ad 31 35 1e ea 25 1e e0 79 19 95 b7 40 47 ad f0 1e dd b0 7e 83 34 6e bc 08 c6 03 e7 62 d1 b6 76 35 18 d0 54 59 c7 f5 4d ee 1d 2e db ac e5 7c a3 42 11 df ec 2e eb b5 e4 d0 76 53 42 01 03 9a 29 21 f3 e8 2f a1 4d 0e 9b 82 eb c9 b1 21 32 3e 25 0b f4 ea 92 b6 e1 7a 81 38 49 3b 82 18 67 f1 f2 25 29 bd ba 4b fa 31 07 66 f0 b1 c7 30 93 7f 9b 04 fd 3d 50 8f e1 51 35 01 1d de e8 98 e6 f0 70 64 a3 53 26 30 3c 8a 1d 1b 05 26 99 02 23 eb 18 eb a0 56 76 7d cb c8 33 5e d2 8a 8c 2d fe 30 e9 93 75 ba 0c bf 69 c1 69 27 4b c3 c6 4b a5 e1 c2 8b a5 6e c5 d9 50 a7 35 68 9b 61 95 77 a0 82 34 b5 47 e5 ce 29 c2 bb 76 84 f4 f4 40 23 f2 a6 85 Data Ascii: MR 0QkD5Q)z:30SZG15%y@G~4nbv5TYM.\|B.vSB)!/M!2>%z8I;g%)K1f0=PQ5pdS&0<&#Vv}3^-0uii'KKnP5haw4G)v@#
2024-12-30 08:28:50 UTC	9000	IN	Data Raw: e4 df 02 f2 2b dd 87 1a 35 99 18 af 02 2d f4 16 a5 19 6a cd c2 b6 79 12 9c b5 42 9a 2e bc 18 16 64 e7 49 6e f9 e9 90 60 1a e1 ed 05 cc 8c fc 4c 3b 09 8e 41 38 35 19 2e 93 db 90 27 e2 32 81 85 27 94 75 d8 69 55 60 c2 15 bd cc 5b 73 38 54 98 b2 d2 80 67 23 a9 92 9e 91 c4 a4 23 c9 ad 53 03 a0 2d e0 35 3f c4 1c a5 bd 7b 25 bf e9 59 e9 ff f5 af a4 b4 e5 39 89 f6 ef 93 06 cf 79 4f 70 de 35 c0 cc 51 8e ca d0 91 40 52 ca 47 bc 4b b3 30 c6 0d 73 ca 9f e6 47 8f d8 95 e0 45 40 07 3a 1d 5a 77 60 4d 96 59 0f a9 f7 ba 0f c0 30 04 33 fe 31 4f 4a db 7b e2 72 88 9f aa e0 e9 72 96 a4 98 7e 31 13 b3 50 0b 14 a8 5d a0 41 8d d3 4a 87 69 7a 3c 88 69 15 00 5f 66 fb bf fe 77 52 b8 ff 5e a9 e7 20 a8 85 69 a2 00 fb 90 ec 19 a3 41 ab b4 c1 86 ed d4 96 5a 56 3c a3 4e 1d bd e6 10 8c Data Ascii: +5-jyB.dIn`L;A85.'2'uiU`[s8Tg##S-5?{%Y9yOp5Q@RGK0sGE@:Zw`MY031OJ{rr~1P]AJiz<i_fwR^ iAZV<N
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: f5 ab 37 4a 0c 3f 67 34 10 70 0a 48 c6 b7 50 4b 14 d0 69 b6 2c 42 2d 46 48 ee 38 a0 07 88 a1 ba 6e f5 be 96 ca cb f2 72 24 05 d2 1a ca 61 0e 7a 1a 21 ab 86 a2 1e 1b 72 1d de 45 6d 86 3a 85 d7 4f 54 ab 32 41 a0 61 b7 3c 05 11 64 30 ff 92 9a 35 c7 7b ee 53 33 67 bd 47 a9 06 bd f8 da 5b 45 53 b3 5e 33 1b 02 31 5d d9 44 58 bd b3 e8 6d 90 e6 d7 ff 89 78 4d cb 40 3c 3a ce 74 05 6d 30 5d 33 c5 a5 19 49 3b 58 0e 6c a8 20 86 c5 20 ea ba 5a 16 3a 39 3e c9 b0 95 5c 6d 95 9c e5 e6 70 0a b8 35 b6 38 f1 9c bc da c9 08 14 10 38 29 3d 55 db bb 85 1d 09 3c ac cf e9 fe f0 94 46 3f 9f 14 a0 09 7b 37 c3 23 c0 97 25 e8 7c 0c 1d 77 ce a9 41 86 30 17 91 59 b2 30 3a 05 14 68 10 a5 00 b7 35 b9 d5 1f 93 dc a9 b7 80 86 2d b0 d6 4b 7a c7 20 a5 b1 ab d1 69 38 95 77 1d c8 b8 4e 56 1f Data Ascii: 7J?g4pHPKi,B-FH8nr$az!rEm:OT2Aa<d05{S3gG[ES^31]DXmxM@<:tm0]3I;Xl Z:9>\mp588)=U<F?{7#%\|wA0Y0:h5-Kz i8wNV
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 41 39 da 30 62 74 1d 76 a0 39 1e 59 7a cc 67 d2 6a 9e 40 66 c3 ff 44 a4 6b b7 15 5e 2a b2 10 27 74 7c 6c 27 45 36 d0 54 f6 78 67 35 5e 65 d4 e5 56 4e 3f cc 69 c5 af 80 81 4f 05 32 c7 7b ff f8 39 a6 e6 29 66 33 05 9a 64 95 8b 23 03 aa d3 14 b1 7c e2 e9 b8 79 c9 d5 38 7f da 32 d4 70 99 81 ee c9 9c c6 7c ba de bb 0a 8c 1f 3e 19 c6 92 f6 02 1a 6b b4 34 91 bb 5e a4 c0 46 9c a9 b1 19 f6 39 19 62 e6 f5 6d 69 fc 94 9a cc a6 bd d4 c4 39 f0 af b9 0b be 7d 0f bc 6e 64 36 57 67 5d 2d b9 90 ef c2 b5 2b ab f1 85 cb ea d1 54 49 99 40 da c6 0c c5 07 fe fc fe dc 39 2a 40 a3 0c 9a 87 49 5e 21 be f7 21 bd f1 af 80 5d 4f 10 5d dd 4c 60 45 09 20 df e1 30 7b da af a4 2a f0 64 27 5d 97 b3 35 68 a7 a7 14 87 5d 78 15 11 99 cc a9 88 ad 3e 9d 98 02 ea 07 9a 13 86 1a 34 27 23 09 c4 Data Ascii: A90btv9Yzgj@fDk^'t\|l'E6Txg5^eVN?iO2{9)f3d#\|y82p\|>k4^F9bmi9}nd6Wg]-+TI@9@I^!!]O]L`E 0{*d']5h]x>4'#
2024-12-30 08:28:50 UTC	3109	IN	Data Raw: 4c 2e 50 75 1a d9 02 fe 4d e2 41 7c 95 6e 36 64 e5 8f 07 9a 02 1d d0 a7 72 0d 8b cd 01 a3 fa 8c fd 0f d6 85 24 a4 94 8c 8c e5 07 e4 ad e1 37 15 60 ce 62 bb 98 71 cc 26 cb a7 ba 30 8b 0c 03 fc 1a 8e f5 8e e1 f5 df 90 86 14 a3 b3 9b 03 41 01 07 9a 03 51 8c 9b fd 08 c2 8c b5 66 da 4c 9d b6 a6 aa 2f ce 44 c3 21 04 b2 5c 2b cb dc f2 13 80 ce 7d a8 d6 ae c9 77 0f ae c9 bd e5 39 29 ac 16 b1 bd 4d 19 dd 4e 30 16 4c 8d 56 c6 12 99 46 ec 9e 6e f6 b5 3c de 9e a5 00 25 e2 8d e3 25 3c 3c 8c 93 1d 6b 9c 2a 8f 53 2d b3 89 8c 0c a6 fb e5 68 ff b8 bc 87 71 97 93 83 13 72 ac ef 88 0c 66 fa 25 97 48 a3 c6 51 e6 e5 8f 5d 15 44 84 61 d5 89 08 c3 89 03 ea 40 37 ab 9e f4 74 b3 8f 29 e0 40 b3 8f 0b ef b5 5f 9d e8 12 0d 1a b4 a9 d1 6c d0 96 6c 80 ad 9c 7f 35 a8 d5 2a 90 64 8a 95 Data Ascii: L.PuMA\|n6dr$7`bq&0AQfL/D!\+}w9)MN0LVFn<%%<<kS-hqrf%HQ]Da@7t)@_ll5d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	13.32.121.40	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:50 UTC	586	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:50 UTC	774	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 4WlawxN8W_CZlaIcegdzb3R31xpUuLjadAPNOWGGA5o2KTFbu66tqg== Age: 14 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:50 UTC	15610	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 00 ff ff 00 88 fe 3c 06 88 08 00 02 26 01 99 00 00 00 07 08 62 06 c8 00 00 ff ff 00 88 fd d0 06 88 08 00 02 26 01 99 00 00 00 07 06 89 06 a8 00 00 00 01 00 88 00 00 06 f8 08 00 00 10 00 00 01 15 21 11 23 11 21 22 06 06 15 15 23 35 34 36 33 06 f8 fd 7c f8 fe a4 46 50 22 e0 db bd 08 00 dc f8 dc 07 24 42 68 3a 4c 78 b4 e0 00 02 00 88 fd c0 06 88 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 15 23 22 2e 02 35 35 01 35 21 15 21 11 23 11 04 04 90 60 4c 88 54 9a 78 46 fd 7c 06 00 fd 7c f8 a4 78 48 dc 35 68 98 63 a8 07 24 dc dc f8 dc 07 24 00 02 00 88 fe fc 06 88 09 04 00 03 00 0b 00 00 01 01 33 01 01 35 21 15 21 11 23 11 01 68 03 90 e4 fc 70 fe 3c 06 00 fd 7c f8 fe fc 0a 08 f5 f8 08 28 dc dc f8 dc 07 24 ff ff 00 88 00 00 06 88 08 00 02 06 01 99 00 00 00 01 00 f8 ff Data Ascii: <&b&!#!"#5463\|FP"$Bh:Lx!33#".555!!#`LTxF\|\|xH5hc$$35!!#hp<\|($
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 61 ff ff 00 90 ff e0 06 00 08 34 02 26 03 07 00 00 00 07 06 6b 00 88 00 00 00 03 00 90 ff ac 06 00 06 48 00 03 00 13 00 23 00 00 05 27 01 17 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 01 7c 98 04 30 98 fd 9c d0 fe c7 af af 01 39 d0 d0 01 39 af af fe c7 d0 9e cc 62 62 cc 9e 9e cc 62 62 cc 54 68 06 34 68 fa 00 c6 01 64 ee f0 01 66 c6 c6 fe 9a f0 ee fe 9c c6 d4 a2 01 08 9a 9a 01 0a a4 a4 fe f6 9a 9a fe f8 a2 00 03 00 90 ff e0 06 94 06 74 00 08 00 18 00 28 00 00 01 33 14 02 23 35 32 36 36 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 b8 dc c7 f9 64 61 1f fd 90 d0 fe c7 af af 01 39 d0 d0 01 39 af af fe c7 d0 9e cc 62 62 cc 9e 9e cc 62 62 cc 06 74 e4 fe f4 Data Ascii: a4&kH#'"$54$32'2654&#"\|099bbbbTh4hdft(3#5266"$54$32'2654&#"da99bbbbt
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 00 00 27 09 89 01 fc 00 00 00 07 09 8b 00 d0 00 00 00 02 00 d8 fd c0 05 e4 08 1c 00 1b 00 39 00 00 01 33 32 04 12 15 14 02 04 23 22 26 27 07 11 14 16 16 33 32 36 36 35 34 26 26 23 23 13 32 1e 02 15 14 06 04 23 23 35 33 32 36 36 35 34 26 23 22 06 06 15 11 23 11 34 36 24 02 c4 c8 d2 01 09 7d a2 fe e4 b6 6f d9 54 10 61 b3 7c 82 bc 66 5b a5 70 c4 74 8f dd 99 4f 80 fe f8 cc 74 70 74 a5 57 d3 99 66 a9 65 ec 9d 01 13 04 a0 b2 fe ee 90 ae fe e9 a3 53 75 08 01 88 62 a6 64 6e b4 6a 64 b3 71 04 48 5c 9b c0 65 7e f9 a5 cc 60 9a 56 8a b6 54 96 62 f7 cc 08 34 9e fa 90 00 01 00 60 fd c0 05 80 06 00 00 08 00 00 13 21 01 01 21 01 11 23 11 60 01 00 01 94 01 8c 01 00 fd e8 ec 06 00 fb 70 04 90 fa 20 fd a0 02 60 00 02 00 60 ff e4 05 94 08 5e 00 25 00 37 00 00 01 34 24 33 32 Data Ascii: '932#"&'326654&&##2##5326654&#"#46$}oTa\|f[ptOtptWfeSubdnjdqH\e~`VTb4`!!#`p ``^%74$32
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 00 00 02 00 d4 fd f8 02 3c 06 08 00 03 00 10 00 00 01 21 13 33 03 32 16 15 14 06 23 22 26 35 34 36 36 02 10 fe f0 14 e8 74 4a 6a 6a 4a 4a 6a 31 52 fd f8 05 c0 02 50 6a 4a 4a 6a 6a 4a 32 51 31 ff ff 00 d4 ff f0 08 18 08 1c 00 26 05 31 00 00 00 07 05 35 03 10 00 00 00 02 00 70 ff f0 05 08 08 1c 00 23 00 30 00 00 01 35 3e 02 37 3e 02 35 34 26 26 23 22 06 06 07 23 36 36 24 33 32 04 16 15 14 06 06 07 0e 02 07 15 03 22 26 35 34 36 33 32 16 15 14 06 06 02 0c 02 4c 8c 62 3b 5e 37 5c 9a 5e 52 98 66 08 fc 08 a1 01 09 a2 b0 01 05 8f 43 7d 58 58 6a 30 02 70 4a 6a 6a 4a 4a 6a 31 51 02 40 0c bf e2 8c 3b 24 63 82 4f 62 90 4e 44 92 76 aa f2 80 8c f4 9c 6e b2 8c 36 37 79 a6 7c 0c fd b0 6a 4a 4a 6a 6a 4a 31 52 31 ff ff 00 70 ff f0 0a 9c 08 1c 00 26 05 35 00 00 00 07 05 35 Data Ascii: <!32#"&5466tJjjJJj1RPjJJjjJ2Q1&15p#05>7>54&&#"#66$32"&54632Lb;^7\^RfC}XXj0pJjjJJj1Q@;$cObNDvn67y\|jJJjjJ1R1p&55
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 03 01 33 01 04 e4 64 ba 82 78 ac 5c 5c ac 78 82 ba 64 cc 68 6c 6c 64 67 69 6c 68 01 c0 5e ae 78 82 ba 64 63 b9 80 7a b0 5e b0 6c 6c 69 67 68 6c 69 6b f8 cc 5d b3 80 82 b0 5a 5b b1 80 82 b2 5c cc 58 6c 69 57 54 6c 69 5b 80 05 80 e4 fa 80 01 80 6c 70 bb 71 71 bb 70 6c 70 bb 71 71 bb dc 6c 5d 93 93 5d 6c 5d 93 93 c9 6c 70 bb 71 71 bb 70 6c 70 bb 71 71 bb dc 6c 5d 93 93 5d 6c 5d 93 93 03 cb 6c 70 bb 71 71 bb 70 6c 70 bb 71 71 bb dc 6c 5d 93 93 5d 6c 5d 93 93 f9 23 08 00 f8 00 00 09 00 ec ff e4 0d 08 08 1c 00 11 00 1f 00 31 00 3f 00 51 00 5f 00 71 00 7f 00 83 00 00 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 Data Ascii: #"&&7326554&#"546632#"&&7326554&#"3dx\\xdhlldgilh^xdcz^llighlik]Z[\XliWTli[lpqqplpqql]]l]lpqqplpqql]]l]lpqqplpqql]]l]#1?Q_q546632#
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 01 21 36 12 36 24 33 20 00 12 11 15 10 02 00 21 11 32 24 12 11 35 10 02 00 23 22 04 02 13 01 17 01 13 01 17 01 01 4c fe e0 17 82 e2 01 49 dc 01 4e 01 c4 e6 f1 fe 3d fe c4 f0 01 46 a6 a9 fe b4 f5 ad fe fc a7 96 04 34 70 fb c8 a8 04 38 54 fb e4 04 e6 9c 01 26 ec 8a fe b4 fd ba fe 88 90 fe 88 fd d1 fe cb 01 00 f6 01 bc 01 2a 94 01 3a 01 db 01 09 8a fe f8 fd f8 02 70 c0 fd 90 fe 4c 02 6c cc fd a0 00 01 00 bc ff e4 07 38 08 1c 00 29 00 00 05 22 24 02 11 35 21 15 21 15 14 12 16 33 32 24 12 35 35 34 02 26 26 23 22 06 06 07 27 3e 03 33 20 04 12 11 15 10 02 04 03 da ee fe 99 c9 05 cc fb 50 7e e5 9b ba 01 02 86 52 a1 ef 9e 49 9d a1 51 44 2d 7e 93 9f 4f 01 17 01 99 e0 d3 fe 7d 1c d8 01 9b 01 25 ac d8 2c c4 fe f4 88 b9 01 4c db a0 b0 01 13 be 63 16 2e 24 d0 1d 30 24 Data Ascii: !66$3 !2$5#"LIN=F4p8T&*:pLl8)"$5!!32$554&&#"'>3 P~RIQD-~O}%,Lc.$0$
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 11 21 11 fb c4 02 2c fe 68 01 00 fd 64 02 2c fd d4 01 98 ff 00 01 00 00 01 00 7c fd f4 05 74 06 14 00 2b 00 00 01 35 32 36 35 34 26 27 25 2e 03 35 35 34 12 24 33 32 04 12 17 21 26 26 23 22 06 06 15 15 14 16 16 17 05 16 16 15 14 0e 02 03 b8 4e 5e 59 3f fe 9c 61 b2 89 50 92 01 28 e2 b2 01 07 95 06 fe fc 09 b1 96 9a aa 44 59 97 5c 01 88 81 8f 35 6e a7 fd f4 e4 40 3c 3f 45 0c 54 1a 59 97 e5 a5 60 c6 01 53 cf 94 fe fa aa 9f c9 9d f1 7e 60 8a b0 66 1c 70 27 8f 8a 51 86 60 35 ff ff fb b0 fd 88 fd e0 ff 80 00 07 08 13 fa d0 fc 9c 00 02 fb b8 fd 9c fd dc ff ac 00 03 00 07 00 00 01 11 33 11 25 35 21 15 fd 0c d0 fd dc 02 14 fd 9c 02 10 fd f0 a8 c0 c0 00 02 fb c8 fd 9c fd ec ff ac 00 03 00 07 00 00 01 11 33 11 27 35 21 15 fb c8 cc c0 02 18 fd 9c 02 10 fd f0 a8 c0 c0 Data Ascii: !,hd,\|t+52654&'%.554$32!&&#"N^Y?aP(DY\5n@<?ETY`S~`fp'Q`53%5!3'5!
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 02 7a 3c ac fd 30 01 88 82 d4 7e 7e d4 82 8e d2 74 7f d5 80 3a 5e 38 79 57 3c 60 38 7a 02 fc 05 04 f8 d8 01 e0 05 48 fb 0c 58 05 4c f7 e4 7e d4 82 80 d5 7f 89 d7 74 82 d4 7e f8 32 62 48 6f 71 32 64 4a 6c 70 00 03 00 88 fd a8 06 78 06 00 00 04 00 12 00 27 00 00 01 01 13 27 01 01 32 36 36 35 34 26 23 22 06 06 15 14 16 17 22 26 26 35 34 36 36 33 32 16 16 15 27 37 01 21 01 0e 02 02 94 01 40 7c ec fd fa 01 02 3a 5e 38 79 57 3c 60 38 7a 56 80 d5 7f 7f d5 80 82 d4 7e b0 14 01 b0 01 34 fd a8 22 7a b2 06 00 fc 08 fe 3c 14 05 a8 f8 a0 32 62 48 6f 71 32 64 4a 6c 70 f8 7e d4 82 80 d5 7f 7f d5 80 48 e0 05 5c f9 00 68 9b 55 ff ff 00 90 ff df 06 7c 08 94 02 26 04 27 00 00 00 07 09 9f 01 d0 00 00 ff ff 00 90 ff e4 05 7c 08 94 02 26 04 44 00 00 00 07 09 9f 01 8c 00 00 ff Data Ascii: z<0~~t:^8yW<`8zHXL~t~2bHoq2dJlpx''26654&#""&&546632'7!@\|:^8yW<`8zV~4"z<2bHoq2dJlp~H\hU\|&'\|&D
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 7c f9 00 01 7d 11 00 01 7d 9a 00 01 7d b2 00 01 7d ca 00 01 7e 28 00 01 7e 40 00 01 7e 50 00 01 7e 68 00 01 7e cd 00 01 7f 46 00 01 7f 5e 00 01 7f a6 00 01 80 3e 00 01 80 f4 00 01 81 49 00 01 81 b9 00 01 81 d1 00 01 81 e9 00 01 82 01 00 01 82 19 00 01 82 63 00 01 82 a3 00 01 82 e3 00 01 82 f5 00 01 83 07 00 01 83 19 00 01 83 29 00 01 83 39 00 01 83 49 00 01 83 59 00 01 83 69 00 01 83 79 00 01 83 91 00 01 83 a9 00 01 83 c1 00 01 84 1f 00 01 84 47 00 01 84 a4 00 01 84 d9 00 01 85 0e 00 01 85 20 00 01 85 55 00 01 85 8b 00 01 86 18 00 01 86 30 00 01 86 da 00 01 87 af 00 01 88 67 00 01 88 80 00 01 88 92 00 01 89 4b 00 01 89 8c 00 01 89 cc 00 01 8a 28 00 01 8a 72 00 01 8a a3 00 01 8b 10 00 01 8b 22 00 01 8b 58 00 01 8b ac 00 01 8b e0 00 01 8c 13 00 01 8c 3e 00 Data Ascii: \|}}}}~(~@~P~h~F^>Ic)9IYiyG U0gK(r"X>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49784	13.32.121.40	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:50 UTC	583	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 08:28:50 UTC	774	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Date: Mon, 30 Dec 2024 08:28:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "d17c0274915408cee0308d5476df9f45" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: a_ujKpV9TbuqIKibXQB6hgT5ReGhbQQC95JDF5l9AlfqQm-zAPxYQg== Age: 14 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-30 08:28:50 UTC	15610	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-30 08:28:50 UTC	2288	IN	Data Raw: ff 00 64 00 00 06 f6 0a 7e 02 26 01 99 00 00 00 07 06 73 00 9a 02 00 ff ff 00 64 fd 70 06 f6 08 00 02 26 01 99 00 00 00 07 06 77 02 2c 00 00 ff ff 00 64 00 00 06 f6 0a 75 02 26 01 99 00 00 00 07 06 70 02 14 02 00 ff ff 00 64 fd c1 06 f6 08 00 02 26 01 99 00 00 00 07 06 8b 06 b2 00 00 ff ff 00 64 fe 19 06 f6 08 00 02 26 01 99 00 00 00 07 08 62 06 ff 00 00 ff ff 00 64 fd ba 06 f6 08 00 02 26 01 99 00 00 00 07 06 89 07 19 00 00 00 01 00 64 00 00 07 58 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 21 07 58 fd 8d fe 54 a3 53 58 21 fe 9a 01 21 01 11 08 00 fe 9b f9 65 06 9b 4a 72 3d 78 c5 f5 01 1c 00 02 00 64 fd c0 06 f6 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 83 88 53 55 c6 64 be 99 5b fd 8d Data Ascii: d~&sdp&w,du&pd&d&bd&dX!!#"!54!XTSX!!eJr=xd!33#".55!!!SUd[
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 11 07 e2 f8 37 21 01 e5 01 d3 14 01 d3 01 e5 fd 15 fe 52 06 55 de de 01 ab fc 8e 03 72 fa d4 fd 2c 02 d4 ff ff 00 3a 00 00 07 be 08 00 02 06 01 d5 00 00 ff ff 00 22 00 00 09 f2 08 93 00 27 01 d5 02 34 00 00 00 07 06 67 fe f7 00 00 ff ff 00 3a 00 00 07 be 0a 69 02 06 01 d9 00 00 ff ff 00 69 00 00 09 5a 08 00 00 27 01 d5 01 9b 00 00 00 07 09 a2 ff 62 00 00 ff ff 00 57 00 00 0b 12 08 00 00 27 01 d5 03 53 00 00 00 06 09 95 ab 00 ff ff 00 1d 00 00 0b b4 08 00 00 27 01 d5 03 f6 00 00 00 07 09 97 ff 17 00 00 ff ff 00 16 00 00 0a f2 09 55 00 27 01 d5 03 34 00 00 00 06 09 99 8b 30 ff ff 00 3a 00 00 07 be 0a 18 02 26 01 d5 00 00 00 07 06 6e 01 55 02 00 ff ff 00 3a 00 00 07 be 0a 00 02 26 01 d5 00 00 00 07 06 6d 00 e1 02 00 ff ff 00 62 00 00 09 90 08 00 00 27 01 d5 Data Ascii: 7!RUr,:"'4g:iiZ'bW'S'U'40:&nU:&mb'
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 05 40 89 cc 71 73 cd 86 85 ca 72 6e ca 00 03 00 aa fd c0 06 84 07 97 00 0d 00 24 00 34 00 00 01 21 34 36 21 32 16 17 11 26 26 27 26 06 01 11 21 11 33 3e 02 33 32 04 12 11 10 02 04 23 22 26 26 27 23 11 03 14 16 16 33 32 36 36 35 34 26 26 23 22 06 06 02 4e fe 5c f6 01 03 4b 72 1d 12 4d 29 55 52 fe 5c 01 a4 13 1c 6b ad 81 a8 01 1c aa a5 fe e5 af 7c ad 6e 1d 0d 09 4c 90 67 68 90 4b 4a 90 69 68 8f 4c 06 00 d8 bf 10 08 fe e4 05 0e 01 01 3b f7 83 08 40 fe fe 3e 81 57 af fe a1 fe f8 fe ff fe 9f b5 52 7d 40 fc ca 05 40 89 cc 71 73 cd 86 85 ca 72 6e ca ff ff 00 aa fd c0 06 84 08 8d 02 26 03 3b 00 00 00 07 06 64 01 12 00 00 ff ff 00 aa fd c0 06 84 08 75 02 26 03 3b 00 00 00 07 06 70 02 27 00 00 ff ff 00 aa fd c0 06 84 06 14 02 06 03 3b 00 00 00 02 00 71 fd c0 06 4a Data Ascii: @qsrn$4!46!2&&'&!3>32#"&&'#326654&&#"N\KrM)UR\k\|nLghKJihL;@>WR}@@qsrn&;du&;p';qJ
2024-12-30 08:28:50 UTC	10463	IN	Data Raw: d4 ad a1 d6 41 3d 02 02 51 4c 67 ef ff 32 62 8e 5c fe 19 04 6b fb 95 08 00 ec fd 86 74 bf b3 64 5c 85 21 20 38 bf 78 78 f4 6d a0 41 76 2d 2b 45 14 1a 3b 01 0c bf 83 d0 b9 bd 6f 02 ba fe 9e 00 01 00 aa fd c0 06 32 06 14 00 16 00 00 01 11 21 11 21 11 33 36 36 33 32 16 12 15 11 21 11 34 26 23 22 06 06 02 54 fe 56 01 96 12 34 f0 aa a1 ee 83 fe 56 90 81 55 84 4a 03 78 fc 88 06 00 fe f1 87 9c 8c fe fe b4 f9 ee 05 c6 8d 9f 4a 8d ff ff 00 aa fd c0 06 32 08 a4 02 26 04 53 00 00 00 07 08 cd 01 c0 00 11 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 88 02 5e 00 a8 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 a1 01 9c 00 b0 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 8d 00 b4 00 a8 ff ff 00 aa fd c0 06 32 08 ae 02 26 04 53 00 00 00 Data Ascii: A=QLg2b\ktd\! 8xxmAv-+E;o2!!36632!4&#"TV4VUJxJ2&S2&S^2&S2&S2&S
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: a9 fb e2 04 1e fb e2 01 5c 04 66 fc 9e 89 b7 42 7e 0b 48 64 35 03 7a bb 01 0d 92 91 fe fb ad 56 64 2b 36 70 fe c2 e0 e0 fe 89 df df 00 03 00 43 00 00 07 f6 08 00 00 03 00 07 00 0f 00 00 13 35 21 15 01 35 21 15 01 21 01 21 01 21 01 23 52 07 96 f8 6a 07 96 fa 2b fe 30 02 c3 02 2e 02 c2 fe 30 fd ff 10 03 8e c8 c8 fe 58 c8 c8 fe 1a 08 00 f8 00 06 2c 00 04 00 ff ff e4 07 42 08 1c 00 16 00 1a 00 1e 00 34 00 00 01 22 06 07 21 36 36 24 33 32 04 16 15 14 06 06 07 25 36 36 27 36 26 01 21 11 21 11 21 11 21 01 20 00 27 3e 02 37 05 06 06 07 16 16 33 32 36 37 21 06 06 04 04 2e 75 77 04 fe 4c 0b 9a 01 21 d6 d5 01 29 9a 34 56 32 fe a7 35 35 01 01 74 02 a3 f9 bd 06 43 f9 bd 06 43 fc e4 fe a7 fe 9f 01 01 3a 5e 38 01 56 3a 3c 01 01 8f 7b 7b 97 06 01 b9 0b 9f fe c8 06 bc 5e Data Ascii: \fB~Hd5zVd+6pC5!5!!!!#Rj+0.0X,B4"!66$32%66'6&!!!! '>73267!.uwL!)4V255tCC:^8V:<{{^
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: fe 1f 03 4f fe 33 01 dc 04 00 b6 02 4c 08 f6 c7 fd c3 08 f4 00 02 00 5b 03 e3 04 bb 08 dc 00 0b 00 17 00 00 01 20 00 11 10 00 21 20 00 11 10 00 01 32 36 35 34 26 23 22 06 15 14 16 02 8b fe f9 fe d7 01 2b 01 05 01 05 01 2b fe d5 fe fb 70 87 87 70 6e 88 85 03 e3 01 53 01 2e 01 2e 01 4a fe b8 fe d0 fe cf fe b0 01 01 bc c4 c2 bc bc c2 c3 bd 00 01 00 66 04 00 02 b8 08 cc 00 07 00 00 01 11 23 05 11 25 21 11 01 94 07 fe d9 01 3f 01 13 04 00 03 b5 b9 01 06 ca fb 34 00 01 00 62 04 00 04 4c 08 dc 00 1c 00 00 13 35 01 3e 02 35 34 26 23 22 06 15 21 34 24 33 32 16 16 15 14 06 06 07 07 15 21 15 7b 01 e7 38 52 2e 76 54 5a 6d fe d9 01 18 da 95 dc 79 49 97 77 b2 02 17 04 00 dd 01 85 2e 4a 4c 2e 48 4e 57 52 c0 db 67 b0 6d 58 97 91 4f 84 0b fa 00 01 00 5b 03 f0 04 82 08 dc Data Ascii: O3L[ ! 2654&#"++ppnS..Jf#%!?4bL5>54&#"!4$32!{8R.vTZmyIw.JL.HNWRgmXO[
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 0f 28 0b 84 00 27 05 1f 04 39 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 31 05 db 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 35 04 b3 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 4b 04 12 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 5e 05 10 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 9b 03 bf 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 9c 04 0f 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 9f 03 e7 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 a1 03 e7 00 00 00 07 07 06 03 b7 00 00 ff ff 00 20 fc 7c 0f 28 0b 84 00 27 05 a2 03 e7 00 00 00 07 07 06 03 b7 00 00 ff Data Ascii: ('9 \|('1 \|('5 \|('K \|('^ \|(' \|(' \|(' \|(' \|('
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: aa 00 00 06 68 08 8d 02 26 04 c1 00 00 00 07 06 64 00 88 00 00 00 03 00 c2 00 00 06 6f 08 01 00 03 00 08 00 0d 00 00 01 11 21 11 01 01 21 35 09 02 21 01 21 05 9f fb fc 02 a3 fd ed fe 97 01 bc 03 f1 fe 68 fe 3f 02 04 01 55 04 90 fe b3 01 4d 03 71 fb 42 f3 03 cb fb ac fc 53 04 90 00 02 00 8e fe 0f 05 c9 06 14 00 1b 00 1f 00 00 01 11 22 24 02 35 35 34 12 24 33 32 04 12 15 21 36 26 26 23 22 06 06 15 15 14 16 16 21 11 21 11 03 53 e9 fe c4 a0 a0 01 3b e8 bc 01 1d 9f fe 73 01 37 6d 51 6e 7a 31 31 7f 01 87 fe 5a 01 33 fe b1 c8 01 55 d5 30 e2 01 61 cb 91 fe e7 ca 59 84 48 7d cb 77 30 6a c0 79 fc dc 03 24 00 01 00 83 06 18 01 e2 08 08 00 0b 00 00 01 15 14 06 06 07 27 3e 02 35 35 01 e2 3d 69 43 76 2a 30 14 08 08 83 56 8e 69 20 7d 1d 4a 5b 36 7b ff ff fb c0 04 aa fd Data Ascii: h&do!!5!!h?UMqBS"$554$32!6&&#"!!S;s7mQnz11Z3U0aYH}w0jy$'>55=iCv*0Vi }J[6{
2024-12-30 08:28:50 UTC	4542	IN	Data Raw: fe ac 01 e4 14 fe 30 01 6c 5c 01 14 88 14 02 3c a8 88 60 c0 02 4c 01 c4 5c fe 64 84 ff ff ff c9 00 00 06 cc 08 00 02 06 07 cc 00 00 ff ff 00 8e ff e4 07 26 0a 69 02 26 04 19 00 00 00 07 06 68 00 e8 02 00 ff ff 00 6c ff e4 05 aa 08 69 02 26 04 e3 00 00 00 06 06 68 18 00 ff ff 00 b2 fe 12 06 01 08 00 02 26 03 da 00 00 00 07 08 03 01 9f 00 00 ff ff 00 aa fe 0f 04 c6 06 00 02 26 04 b8 00 00 00 07 08 03 01 86 ff fd ff ff 00 51 00 00 07 8b 08 00 02 26 01 cf 00 00 00 07 07 fe 01 42 ff da ff ff 00 46 00 00 06 0a 06 00 02 26 03 b1 00 00 00 07 07 fe 00 7e fe da 00 03 00 7e 03 68 04 ce 09 5c 00 11 00 1f 00 23 00 00 01 22 26 02 35 35 34 12 36 33 32 16 12 15 15 14 02 06 03 32 36 35 35 34 26 23 22 06 15 15 14 16 01 21 11 21 02 a8 91 fd 9c 9a fc 92 93 fb 9a 99 f9 94 87 Data Ascii: 0l\<`L\d&i&hli&h&&Q&BF&~~h\#"&55463226554&#"!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49787	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:50 UTC	1273	OUT	GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALBCORS=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ
2024-12-30 08:28:59 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:59 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 484 Connection: close Set-Cookie: AWSALB=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/ Set-Cookie: AWSALBCORS=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-30 08:28:59 UTC	484	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 70 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 37 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 27 0d 0a 2c 27 73 74 61 74 65 27 3a 39 0d 0a 2c 27 6c 6f 63 61 6c 65 27 3a 27 65 6e 27 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 32 39 33 35 30 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 34 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 73 65 73 73 69 6f 6e 49 64 27 3a 27 38 37 36 45 39 45 37 35 42 45 33 46 34 38 37 35 41 44 45 33 38 39 39 42 39 43 38 43 34 31 31 38 27 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 27 3a 27 75 6e 64 69 73 63 6c Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qp,'action':'open','status':17,'message':'','state':9,'locale':'en','reqTime':1735547329350,'reqNumber':4,'success':true,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118','recipient':'undiscl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49788	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:50 UTC	697	OUT	GET /websafe/images/skins/googleSignIn.png HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=AC60A683F74E774E90C5C4C13F184EEF; AWSALB=b0P8VIh012mTaFoPtP+bSujkGDa0IfWRh2Q0BXOqotINI6tXPR07Tm3XOkMdl9QyuIZu/HzYTNn6SvbqneIK7o6XGBLSuspfZZ5PR48rDF9YKsWGPitgISGZ/GjJ; AWSALBCORS=GmlzQZwOS9y/24JVXjstcHnkPxX3Nbv1cj2CSMkAHHj8SlLdcThm9jTjmnPZdIe8a/Rn8SmrOGOORgvyTSe5lUOMdt1IU7obsxwAQegUmACeBf0mJCldV2aRo1sg
2024-12-30 08:28:50 UTC	881	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:50 GMT Content-Type: image/png Content-Length: 62336 Connection: close Set-Cookie: AWSALB=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/ Set-Cookie: AWSALBCORS=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; Expires=Mon, 06 Jan 2025 08:28:50 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-f380" Server: unknown
2024-12-30 08:28:50 UTC	8549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9a 00 00 01 9a 08 06 00 00 00 36 06 85 63 00 00 0c 15 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 08 09 2d 10 01 29 a1 f7 2e 5d 20 10 aa 20 20 1d 6c 84 24 40 28 11 12 82 8a 1d 5d 54 70 ed 22 82 a2 a2 2b 22 b6 b5 00 b2 a8 88 5d 59 04 7b 7f 28 a2 b2 b2 2e 16 6c a8 bc 49 01 5d 5f fb de f9 be b9 f3 e7 cc 39 67 fe 33 f7 dc c9 0c 00 aa 8e 9c bc bc 1c 54 0d 80 5c 61 81 28 26 24 80 99 94 9c c2 24 f5 00 14 10 01 05 a8 01 94 c3 15 e7 f9 47 47 47 00 28 23 fd df e5 dd 4d 80 48 fb 6b 76 d2 58 ff 3a fe 5f 45 9d c7 17 73 01 40 a2 21 4e e3 89 b9 b9 10 1f 01 00 d7 e6 e6 89 0a 00 20 b4 43 bd c9 cc 82 3c 29 1e 80 58 53 04 09 02 40 c4 a5 38 43 8e b5 a5 38 4d 8e 6d 65 36 71 31 Data Ascii: PNGIHDR6ciCCPICC ProfileHWXS[R-).] l$@(]Tp"+"]Y{(.lI]_9g3T\a(&$$GGG(#MHkvX:_Es@!N C<)XS@8C8Mme6q1
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: db ac e5 7c a3 42 11 df ec 2e eb b5 e4 d0 76 53 42 01 03 9a 29 21 f3 e8 2f a1 4d 0e 9b 82 eb c9 b1 21 32 3e 25 0b f4 ea 92 b6 e1 7a 81 38 49 3b 82 18 67 f1 f2 25 29 bd ba 4b fa 31 07 66 f0 b1 c7 30 93 7f 9b 04 fd 3d 50 8f e1 51 35 01 1d de e8 98 e6 f0 70 64 a3 53 26 30 3c 8a 1d 1b 05 26 99 02 23 eb 18 eb a0 56 76 7d cb c8 33 5e d2 8a 8c 2d fe 30 e9 93 75 ba 0c bf 69 c1 69 27 4b c3 c6 4b a5 e1 c2 8b a5 6e c5 d9 50 a7 35 68 9b 61 95 77 a0 82 34 b5 47 e5 ce 29 c2 bb 76 84 f4 f4 40 23 f2 a6 85 29 a2 80 01 cd 14 11 fa d8 af 61 33 72 7e 8d 9d 74 c1 98 ae 27 87 1d 02 fb 74 6c 68 38 21 02 71 2e 0c 2c c6 e2 83 fb a4 e7 d7 8f 4a 1e 6a b2 c2 0b 3b 24 80 6f b2 00 6a 34 3f 6d 60 74 ed ae cf 33 0d 0b 46 81 99 49 01 d6 7d 06 57 ad 9d 64 44 65 70 d8 d2 28 99 b3 ce 82 75 Data Ascii: \|B.vSB)!/M!2>%z8I;g%)K1f0=PQ5pdS&0<&#Vv}3^-0uii'KKnP5haw4G)v@#)a3r~t'tlh8!q.,Jj;$oj4?m`t3FI}WdDep(u
2024-12-30 08:28:50 UTC	1616	IN	Data Raw: 68 8c db f4 3d 0b 98 dd 0f b0 29 61 d9 01 1d 33 81 fa 50 69 41 39 8f 6a 38 a6 05 64 38 4a d0 37 e0 36 9d 47 07 18 88 a1 f5 1e c7 5e d4 2b 26 e2 97 41 b3 60 ed 06 99 8f 25 00 b2 e7 ac 12 c9 d2 9c 19 f7 29 5a 31 7f 87 65 f1 28 af b0 4b 46 01 a3 80 51 60 5a 29 30 09 40 e3 e0 85 ac 94 cb 02 f8 f0 06 50 dc f1 55 38 d2 bc 4d 72 58 be 19 6c 53 d9 ec 6c b0 8c 72 a0 c0 2d d5 81 fc 5e 80 43 91 de 9f 3d 35 81 e6 ea 9d 32 88 09 9e b8 a9 2b 59 02 5c bc 18 63 28 15 cf cf 47 47 05 4a 42 4c cf 11 8a 2b e0 b8 39 47 1c c8 2a b7 b6 49 f3 35 d7 4a cb 95 57 8b df d6 0e 90 41 44 e8 e9 14 f0 0c 68 a6 b5 f1 d8 cb 8d 02 46 81 b1 51 60 92 80 86 86 be e0 7f b4 36 2b 1d 80 34 f3 7f 4b 74 e8 51 0c 96 3b 77 fb 3a f2 3f b6 fc d4 7c 2c 32 78 4a 28 94 40 08 ae 5c 17 cd 87 24 12 1e c2 cc Data Ascii: h=)a3PiA9j8d8J76G^+&A`%)Z1e(KFQ`Z)0@PU8MrXlSlr-^C=52+Y\c(GGJBL+9G*I5JWADhFQ`6+4KtQ;w:?\|,2xJ(@\$
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 06 bd f8 da 5b 45 53 b3 5e 33 1b 02 31 5d d9 44 58 bd b3 e8 6d 90 e6 d7 ff 89 78 4d cb 40 3c 3a ce 74 05 6d 30 5d 33 c5 a5 19 49 3b 58 0e 6c a8 20 86 c5 20 ea ba 5a 16 3a 39 3e c9 b0 95 5c 6d 95 9c e5 e6 70 0a b8 35 b6 38 f1 9c bc da c9 08 14 10 38 29 3d 55 db bb 85 1d 09 3c ac cf e9 fe f0 94 46 3f 9f 14 a0 09 7b 37 c3 23 c0 97 25 e8 7c 0c 1d 77 ce a9 41 86 30 17 91 59 b2 30 3a 05 14 68 10 a5 00 b7 35 b9 d5 1f 93 dc a9 b7 80 86 2d b0 d6 4b 7a c7 20 a5 b1 ab d1 69 38 95 77 1d c8 b8 4e 56 1f ca ec 27 bf ee 94 52 98 4d 80 06 39 a9 74 ae 28 8d 5a 30 0a d4 26 05 94 37 93 b7 90 57 e3 9f 9d 26 76 6c 05 93 cc 17 b5 66 e4 b2 d5 8d d2 52 c7 f1 61 40 10 e2 28 3b e2 98 c8 f4 01 4d 49 c2 ae 5f 4b 7e eb 97 24 e8 dd 02 a9 0b 0d 8c 66 bc 00 1a fd 06 43 9b 51 6b 9a 32 2e Data Ascii: [ES^31]DXmxM@<:tm0]3I;Xl Z:9>\mp588)=U<F?{7#%\|wA0Y0:h5-Kz i8wNV'RM9t(Z0&7W&vlfRa@(;MI_K~$fCQk2.
2024-12-30 08:28:50 UTC	1616	IN	Data Raw: da 32 d4 70 99 81 ee c9 9c c6 7c ba de bb 0a 8c 1f 3e 19 c6 92 f6 02 1a 6b b4 34 91 bb 5e a4 c0 46 9c a9 b1 19 f6 39 19 62 e6 f5 6d 69 fc 94 9a cc a6 bd d4 c4 39 f0 af b9 0b be 7d 0f bc 6e 64 36 57 67 5d 2d b9 90 ef c2 b5 2b ab f1 85 cb ea d1 54 49 99 40 da c6 0c c5 07 fe fc fe dc 39 2a 40 a3 0c 9a 87 49 5e 21 be f7 21 bd f1 af 80 5d 4f 10 5d dd 4c 60 45 09 20 df e1 30 7b da af a4 2a f0 64 27 5d 97 b3 35 68 a7 a7 14 87 5d 78 15 11 99 cc a9 88 ad 3e 9d 98 02 ea 07 9a 13 86 1a 34 27 23 09 c4 6d 1e 02 01 a7 82 73 8d 96 4e 58 88 4f 2d b9 06 e7 4f 5d 8e ea 78 15 eb 42 e6 09 d1 d4 d0 e6 c4 0f f6 67 3c 05 fa 4c 81 00 69 6c 23 de e2 8e f6 c9 67 da c8 0b 95 d6 32 ac db 99 c5 9d cf b7 e2 ad 5d 5c 0a 20 47 cf 48 9e 0d 17 e9 ea f3 ab fc 85 47 52 80 ed 59 8e 57 82 f4 Data Ascii: 2p\|>k4^F9bmi9}nd6Wg]-+TI@9@I^!!]O]L`E 0{d']5h]x>4'#msNXO-O]xBg<Lil#g2]\ GHGRYW
2024-12-30 08:28:50 UTC	16384	IN	Data Raw: 77 f5 50 c0 31 9a e8 2b 8d 52 60 ee 22 e7 ba 48 02 75 d1 3a 5c 32 e7 3c 5c 7b fa 15 58 d4 34 0f 55 0c f9 a3 b9 4b bd 05 83 8d ef a8 92 7c 1a 97 14 20 cb b0 d5 3a 21 a6 1d 09 3b 1d b1 85 0c d9 61 51 db 4e 73 25 90 75 1f a6 71 37 97 62 5e bb 4d c2 91 a1 a3 d4 ae d5 c1 d4 bf e7 9f 01 f2 8e 03 9a 68 9e 4e 52 6c c3 b6 94 0a dd 99 15 6a 4b 66 b4 e5 33 a9 cd 5c 51 8b 45 33 39 de 4a 3a 6b 4c c6 86 1f 44 74 26 f7 3d c0 57 f7 f3 b6 51 04 9a 90 45 65 33 e4 3e 99 4e 3d 9f 0c 57 e1 7c eb c0 06 7c f7 b5 9f 60 dd a1 ad 36 24 60 f0 6c 54 71 f6 5f 63 4c a9 89 3e 0d 8a 02 e4 4d 4b d2 14 d5 e6 05 f6 8a 89 24 a6 35 f2 92 3b ab b8 be cf d9 53 96 70 4d 9b 2b 6d 5b 97 e0 b8 0d 8f 3b fd c6 09 19 3f 71 76 50 d5 50 f6 37 8b 8d 2c 60 ad b5 64 35 54 6b d1 06 24 ed 69 e0 f5 ed 5d f8 Data Ascii: wP1+R`"Hu:\2<\{X4UK\| :!;aQNs%uq7b^MhNRljKf3\QE39J:kLDt&=WQEe3>N=W\|\|`6$`lTq_cL>MK$5;SpM+m[;?qvPP7,`d5Tk$i]
2024-12-30 08:28:50 UTC	1403	IN	Data Raw: 7c 08 8c 91 53 72 eb e3 05 e1 35 98 68 64 de 0d c6 cc 37 08 5f 11 40 2f be 13 ef c6 28 69 e3 7b b7 9a e8 d2 08 63 fe cf e4 01 67 0d 8b 8b 02 62 88 c8 1b 73 56 f2 c0 43 ef 01 28 98 12 fd 15 48 c9 d8 e1 69 71 19 ca be 83 41 35 38 2e 04 07 6c a2 2f b9 74 16 a0 92 85 0a ac 4b 57 dd f7 65 7b 21 b1 0c 01 48 86 65 08 92 4b 7f a6 1b 8b 28 7b 65 a0 ab 07 2a b2 6e c9 60 d5 3e d6 e5 6b 5e fa 2e 40 09 8e a7 e8 bb d0 d5 5e 42 6f a4 46 f8 c7 3b d8 9c 34 75 80 23 bf 42 c9 07 1f 35 ad 0f d1 d5 ef 6d 4e 01 07 9a 36 af 00 7b e9 f3 39 3e a3 26 30 2b 82 10 39 1e a5 9e 12 a4 99 22 d6 ee 2c 03 54 16 b1 40 f4 c9 ca 82 aa db 16 4b b0 2f cd cb d3 ea 82 2c ae 14 a5 c0 1f a4 23 ae f3 e1 a4 03 4e ab e6 1c 83 08 30 ca 18 c9 50 f1 8b bb 58 6b ae 21 2f 5b 50 c8 f0 cc 9a e1 c8 dc ed b5 Data Ascii: \|Sr5hd7_@/(i{cgbsVC(HiqA58.l/tKWe{!HeK({e*n`>k^.@^BoF;4u#B5mN6{9>&0+9",T@K/,#N0PXk!/[P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:51 UTC	722	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=hYpGGb3zQ/j47hETV/Th1EFI62yLRBDO0ysEuPb+5LjTyO/Corb2s/ctRtfm2UBgpx5ninVnmuxTMNe+VKO2+BKeab02XYpiek3N+gmYY3PC0/Eu/aPBjMm2RvRA
2024-12-30 08:30:36 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:30:36 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Z6l610kSrrYPhfX9MXYlbf76XObmkAc+T1RJCFfKLywC6j6dbPwhDUtDh6W9zaQ0WtEdeHFvfvkyLPOyy6BfzRpqFMWR46BKGQdDqn3pLWjOff2b8tADZD/YUDp+; Expires=Mon, 06 Jan 2025 08:28:51 GMT; Path=/ Set-Cookie: AWSALBCORS=Z6l610kSrrYPhfX9MXYlbf76XObmkAc+T1RJCFfKLywC6j6dbPwhDUtDh6W9zaQ0WtEdeHFvfvkyLPOyy6BfzRpqFMWR46BKGQdDqn3pLWjOff2b8tADZD/YUDp+; Expires=Mon, 06 Jan 2025 08:28:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-30 08:30:36 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-30 08:30:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49789	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:51 UTC	718	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ
2024-12-30 08:30:36 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:30:36 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=yIIQMDTuR+msv8/A+AaOIn2IIhalpV665MJleGoY3f3nrMSED8UU31hoG6dtqSfQEF4sMD2TQFGO7F89T8OqUh09q3/fmflQ9ocC0EwTk4ndsyoow9YzH5hCP2Es; Expires=Mon, 06 Jan 2025 08:28:51 GMT; Path=/ Set-Cookie: AWSALBCORS=yIIQMDTuR+msv8/A+AaOIn2IIhalpV665MJleGoY3f3nrMSED8UU31hoG6dtqSfQEF4sMD2TQFGO7F89T8OqUh09q3/fmflQ9ocC0EwTk4ndsyoow9YzH5hCP2Es; Expires=Mon, 06 Jan 2025 08:28:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-30 08:30:36 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-30 08:30:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49793	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:28:59 UTC	1501	OUT	GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/custom.action?cmd=authFrame Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALBCORS=YG0oHa42jdoyJifQAmfgEHPiTOVkcQphMm7RMQVqjwu9vq0C1lQPGi0AuLbflUrL2BgXIxUyL2+/CKgu59rvHcdzJwr+0uyqNUB04Ccxk3R67pWzKozelnllkLmQ
2024-12-30 08:28:59 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:28:59 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 745 Connection: close Set-Cookie: AWSALB=BsActzj9NQNG7jWQ1FpUIBZPPOg45h07O9pFM5qUrq8k8kwXkgB57I3Qy9MvMZMedDnjpBRjwOSHfGtTMH3cUKL/+1GVnCukKlvwaEjgS6xRFlcz7EVo7NMNXO8m; Expires=Mon, 06 Jan 2025 08:28:59 GMT; Path=/ Set-Cookie: AWSALBCORS=BsActzj9NQNG7jWQ1FpUIBZPPOg45h07O9pFM5qUrq8k8kwXkgB57I3Qy9MvMZMedDnjpBRjwOSHfGtTMH3cUKL/+1GVnCukKlvwaEjgS6xRFlcz7EVo7NMNXO8m; Expires=Mon, 06 Jan 2025 08:28:59 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-30 08:28:59 UTC	745	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 6a 74 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 37 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 54 68 69 73 20 65 6e 76 65 6c 6f 70 65 20 77 61 73 20 6e 6f 74 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 72 65 63 69 70 69 65 6e 74 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 32 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 33 37 38 35 35 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 33 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 63 6f 6f 6b 69 65 73 45 6e Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":jt,'action':'open','status':17,'message':'This envelope was not sent to this recipient.','state':2,'reqTime':1735547337855,'reqNumber':3,'recipientIdentified':false,'success':true,'cookiesEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49795	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:29:00 UTC	1425	OUT	GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&oo=0&ck=0&poll=1&evt=%7b%27ctrlKey%27%3a0%2c%27altKey%27%3a0%2c%27shiftKey%27%3a0%7d&sra=ARC4&rm=0&cf=0&k=base64%3aaes%3aplain%2cWVFxOU5MSE1nK1R2Mk5WSUhmS2YxVFpwcWFkS3BkNE5sM0FGc3Y4ZHk5Zz0%3d&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=2&f=1&d=1735547337855&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3ajt&src=2&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; AWSALBCORS=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y
2024-12-30 08:29:00 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:29:00 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 745 Connection: close Set-Cookie: AWSALB=IPYDyKrwxind2Nw2yhmjJ9dDSbJlAj+NUzb8pOUTzRsenP2/xMJzNFQDX/H4KAS3C/V852QlKI4xrioJOr9t4KXKK/EefgepD987hEX6rJq/rnff06Y3mZtyCRE4; Expires=Mon, 06 Jan 2025 08:29:00 GMT; Path=/ Set-Cookie: AWSALBCORS=IPYDyKrwxind2Nw2yhmjJ9dDSbJlAj+NUzb8pOUTzRsenP2/xMJzNFQDX/H4KAS3C/V852QlKI4xrioJOr9t4KXKK/EefgepD987hEX6rJq/rnff06Y3mZtyCRE4; Expires=Mon, 06 Jan 2025 08:29:00 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-30 08:29:00 UTC	745	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 6a 74 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 37 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 54 68 69 73 20 65 6e 76 65 6c 6f 70 65 20 77 61 73 20 6e 6f 74 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 72 65 63 69 70 69 65 6e 74 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 32 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 33 37 38 35 35 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 35 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 63 6f 6f 6b 69 65 73 45 6e Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":jt,'action':'open','status':17,'message':'This envelope was not sent to this recipient.','state':2,'reqTime':1735547337855,'reqNumber':5,'recipientIdentified':false,'success':true,'cookiesEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49794	44.219.110.92	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:29:00 UTC	1266	OUT	GET /keyserver/keyserver?su=undisclosed-recipients%3a%3b&df=&tf=&lp=en&ck=0&v=2&m=%7c1__498cd2fd00000193e393c372ff93ccff640d284c%40localhost&s=9&f=0&d=1735547329350&action=open&prd=807&prn=1&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqp&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=876E9E75BE3F4875ADE3899B9C8C4118; AWSALB=/2gbygFt0cvPYru7hJ1Uz+tRGm+PxodvUmib84qUvNxR7B8p2V60VNRTGhqKYCM73NNyp7rrV+DtCIfYMmqZe+vTYvm4xM2SzbK4KnEbVTOMtPvJwXU6x+DUoLzH; AWSALBCORS=00M3c9UI9VS/+Z68qp+7yEevpaSNjCI/AxB9sHeQVo5ULJroljP8TbSVvuiZe0Qe5UsPHwQUnKcEuQnv2pgEubhgKDkgUTFLpZ0anlKPWc73sJC8du3dB5EoYG5Y
2024-12-30 08:29:00 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 08:29:00 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 484 Connection: close Set-Cookie: AWSALB=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; Expires=Mon, 06 Jan 2025 08:29:00 GMT; Path=/ Set-Cookie: AWSALBCORS=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; Expires=Mon, 06 Jan 2025 08:29:00 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-30 08:29:00 UTC	484	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 70 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 37 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 27 0d 0a 2c 27 73 74 61 74 65 27 3a 39 0d 0a 2c 27 6c 6f 63 61 6c 65 27 3a 27 65 6e 27 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 35 35 34 37 33 32 39 33 35 30 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 36 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 73 65 73 73 69 6f 6e 49 64 27 3a 27 38 37 36 45 39 45 37 35 42 45 33 46 34 38 37 35 41 44 45 33 38 39 39 42 39 43 38 43 34 31 31 38 27 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 27 3a 27 75 6e 64 69 73 63 6c Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qp,'action':'open','status':17,'message':'','state':9,'locale':'en','reqTime':1735547329350,'reqNumber':6,'success':true,'sessionId':'876E9E75BE3F4875ADE3899B9C8C4118','recipient':'undiscl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50065	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:30:37 UTC	785	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; AWSALBCORS=Z6l610kSrrYPhfX9MXYlbf76XObmkAc+T1RJCFfKLywC6j6dbPwhDUtDh6W9zaQ0WtEdeHFvfvkyLPOyy6BfzRpqFMWR46BKGQdDqn3pLWjOff2b8tADZD/YUDp+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50066	34.199.33.163	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 08:30:37 UTC	781	OUT	GET /envelopeopener/pf/ZGJAVG9rZW45NzAwOjI1MTY1/tMvzlhWXNm.EQ5ETyoBCUF9pSfdw.OFVm9LdfyN1B3f3lwtoH819s58djFb5YOHxPJBxPSfI2c1b7OuR-iGJOEqagx-w8yrdkA!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=ijRGfwKIFOG3hWtNllT84oUYV3L8wJla6fMwe2BrFexokpVq0OWnx/0AkmF87dHNS8uWbYCU3RSQjPGmr8wDTd7nj8aWG7MwBxrbLsHzeqHQa+0YVY4NVg8Gwi84; AWSALBCORS=yIIQMDTuR+msv8/A+AaOIn2IIhalpV665MJleGoY3f3nrMSED8UU31hoG6dtqSfQEF4sMD2TQFGO7F89T8OqUh09q3/fmflQ9ocC0EwTk4ndsyoow9YzH5hCP2Es

Target ID:	0
Start time:	03:28:27
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241220T111852.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	03:28:32
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2168,i,16381702986795633507,2437687583789901785,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report securedoc_20241220T111852.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
securedoc_20241220T111852.html