Edit tour

Windows Analysis Report
DIS_37745672.pdf

Overview

General Information

Sample name:	DIS_37745672.pdf
Analysis ID:	1582672
MD5:	22580ddeddfac4774357117d59d4fc12
SHA1:	583cb9a33f0a9329f543140335216fc42c9f75a2
SHA256:	f32765486369c771c3a03e6a71db3e451110dce12f2f2c626e0884024ff7d3b3
Infos:

Detection

KnowBe4, PDFPhish

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found potential malicious PDF (bad image similarity)

Yara detected KnowBe4 simulated phishing

Yara detected PDFPhish

AI detected landing page (webpage, office document or email)

Machine Learning detection for sample

Suspicious PDF detected (based on various text indicators)

Detected non-DNS traffic on DNS port

IP address seen in connection with other malware

PDF has an OpenAction (likely to launch a dropper script)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 3560 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DIS_37745672.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 764 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7208 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2140 --field-trial-handle=1736,i,7585332165472003638,14988995419090937621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1972,i,3090987453707917928,8843376742662094765,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
DIS_37745672.pdf	JoeSecurity_PDFPhish_1	Yara detected PDFPhish	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Machine Learning detection for sample

Source: DIS_37745672.pdf

Joe Sandbox ML: detected

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Yara detected PDFPhish

Source: Yara match

File source: DIS_37745672.pdf, type: SAMPLE

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'Secure Open' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains prominent button: 'secure open'

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: Adob Adobe Document Cloud This document is encrypted using Adobe Secure CloudTM. Click below to securely view contents. Secure Open Please note: Some webmail clients are not compatible with Adobe obat Secure CloudTM. If that happens, download the file and open on Desktop.

Source: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==

HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.5:49753 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:63569 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:61516 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.17.246.203 104.17.246.203
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.17.247.203 104.17.247.203

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850 HTTP/1.1Host: https.docusign.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing_pages/oops/styles.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1 HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure.encryptedconnection.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: https.docusign.click
Source: global traffic	DNS traffic detected: DNS query: secure.encryptedconnection.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: helpimg.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com

Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_230.10.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_230.10.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_230.10.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://semver.org/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_230.10.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_230.10.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_230.10.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_230.10.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_230.10.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_221.10.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_226.10.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: DIS_37745672.pdf	String found in binary or memory: https://https.docusign.click/XK3d3NjhpaGVHdDMzc01GVnRlaVpwMm94Q1VZTXdBZkFUZUViendBdmladFBWSllRdUcrcV
Source: DIS_37745672.pdf	String found in binary or memory: https://https.docusign.click/XT3ZtYUhITFVCMHJuZklVdlBYUEM2NHlDTjlEVU9tQ25uL244akpKV2loOXdxYVdWM2VxQW
Source: DIS_37745672.pdf	String found in binary or memory: https://https.docusign.click/XTkdHa0drejNQY0JNc0p0UXcrNjRmbkYzQnBaUTJYQVRDVzJkK3FsL0YxdWNYTGRlVHBwS3
Source: DIS_37745672.pdf	String found in binary or memory: https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVl
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_230.10.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_231.10.dr	String found in binary or memory: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMW
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_226.10.dr	String found in binary or memory: https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf
Source: chromecache_226.10.dr	String found in binary or memory: https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8
Source: chromecache_226.10.dr	String found in binary or memory: https://training.knowbe4.com/packs/js/vendor-954761ad0dceb106b971.js
Source: chromecache_226.10.dr	String found in binary or memory: https://unpkg.com/petite-vue
Source: chromecache_225.10.dr	String found in binary or memory: https://utopia.fyi/type/calculator?c=320
Source: chromecache_230.10.dr, chromecache_229.10.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_230.10.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 61740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61729
Source: unknown	Network traffic detected: HTTP traffic on port 61730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61743
Source: unknown	Network traffic detected: HTTP traffic on port 61749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61726
Source: unknown	Network traffic detected: HTTP traffic on port 61747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61748
Source: unknown	Network traffic detected: HTTP traffic on port 61726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61749
Source: unknown	Network traffic detected: HTTP traffic on port 61745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61742
Source: unknown	Network traffic detected: HTTP traffic on port 61737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61736
Source: unknown	Network traffic detected: HTTP traffic on port 61746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61737
Source: unknown	Network traffic detected: HTTP traffic on port 61729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61739
Source: unknown	Network traffic detected: HTTP traffic on port 61744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61731

System Summary

Found potential malicious PDF (bad image similarity)

Source: DIS_37745672.pdf

Static PDF information: Image stream: 21

Source: classification engine

Classification label: mal76.phis.winPDF@39/76@21/10

Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/xu2psemnwsvq4nuvhsfcwohnwr2tqqxiwqlhtzudymwm4tg16l0hccmj2cnvnz0vnwhuvvlmymxf5znpwanjicmpln05jdtftmwg3rfjjb0l2qjbsr1ptneo4tecyquvvyva2l3jlrwy5relknxdbtzvhm1boogdkynq4q05pdk5rd24xcfprq0zoaitrl2sycxlxm3fvvznrkzc0ehprunczvkfiykx5bvnosvjzag9zruz6sgtpzfvdrgruenrzahc5de53pt0tluhpwe1jchdlewpxtfrhzvotlw80s2tvzjffr1nmt0f0vm9cwlfwsmc9pq==?cid=304330850
Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/xk3d3njhpagvhddmzc01gvnrlavpwmm94q1vztxdbzkfuzuviendbdmladfbwsllrducrcvnmt0pfrk5qse95seh0v2fkr2e4teeyawtvnllhs3hkytizdhvmtfn2shyrbuw0nxz5uxromwhcaxu5t1lbk1hbzgvmbfb6slevbu9isnb4mdrewwx5yvdnk1fxewxoq0u4nxfpl1pct0voc0nwz0n5vghgyuxkntvqb2xzc1baetn2ritqqmfxbhb6tlbkc3lnpt0tltvvywm0r1jkunlql2vgndktlvi0rm1zt1a4t2q2r0rilznosuj2vfe9pq==?cid=304330850
Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/XT3ZtYUhITFVCMHJuZklVdlBYUEM2NHlDTjlEVU9tQ25uL244akpKV2loOXdxYVdWM2VxQWw5NWZwb011aWZqa25ZSGtIT2NjN0UvSmVKZEd0Q2ZqOHNZWmE5M1o3WC81WmI1SUhXRC9BMGJzSHJsZ1V0dTRMY1NjME5TTVFJdTdjU0w1QWpsR21PclBpQlJEVGkwVnpZUWlhUngxQ0RZSGljbTYwTGFSVnFqYkhOVGE3NzZVMmtSWUlGRDdiK1p3YkZzU2hBPT0tLUZNRnplMFlraHkvME5FOWYtLTBJRnhJcjdidTFjV1FyNC9RaWFKU1E9PQ==?cid=304330850
Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/xt3ztyuhitfvcmhjuzklvdlbyuem2nhldtjlevu9tq25ul244akpkv2looxdxyvdwm2vxqww5nwzwb011awzqa25zsgtit2njn0uvsmvkzed0q2zqohnzwme5m1o3wc81wmi1suhxrc9bmgjzshjsz1v0dtrmy1njme5ttvfjdtdju0w1qwpsr21pclbpqljevgkwvnpzuwlhungxq0rzsgljbtywtgfsvnfqykhovge3nzzvmmtswulgrddik1p3ykzzu2hbpt0tluznrnplmflrahkvme5fowytltbjrnhjcjdidtfjv1fync9rawfku1e9pq==?cid=304330850
Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/XK3d3NjhpaGVHdDMzc01GVnRlaVpwMm94Q1VZTXdBZkFUZUViendBdmladFBWSllRdUcrcVNmT0pFRk5QSE95SEh0V2FkR2E4TEEyaWtvNllhS3hKYTIzdHVMTFN2SHYrbUw0NXZ5UXROMWhCaXU5T1lBK1hBZGVmbFB6SlEvbU9ISnB4MDREWWx5YVdnK1FxeWxoQ0U4NXFPL1pCT0Voc0NWZ0N5VGhGYUxKNTVQb2xzc1BaeTN2RitqQmFXbHB6TlBkc3lnPT0tLTVvYWM0R1JkUnlqL2VGNDktLVI0Rm1zT1A4T2Q2R0RILzNOSUJ2VFE9PQ==?cid=304330850
Source: DIS_37745672.pdf	Initial sample: https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-31 02-59-16-481.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DIS_37745672.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2140 --field-trial-handle=1736,i,7585332165472003638,14988995419090937621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1972,i,3090987453707917928,8843376742662094765,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2140 --field-trial-handle=1736,i,7585332165472003638,14988995419090937621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1972,i,3090987453707917928,8843376742662094765,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: DIS_37745672.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: DIS_37745672.pdf

Initial sample: PDF keyword obj count = 54

Source: DIS_37745672.pdf

Initial sample: PDF keyword /OpenAction

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
DIS_37745672.pdf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://pdfmake.org	0%	Avira URL Cloud	safe
https://utopia.fyi/type/calculator?c=320	0%	Avira URL Cloud	safe
http://flightschool.acylt.com/devnotes/caret-position-woes/	0%	Avira URL Cloud	safe
https://blog.alexmaccaw.com/css-transitions	0%	Avira URL Cloud	safe
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	0%	Avira URL Cloud	safe
https://modernizr.com/)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	16.182.32.57	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
landing.eu.knowbe4.com	34.241.139.243	true	false	high
www.google.com	142.250.186.100	true	false	high
training.knowbe4.com	18.173.205.114	true	false	high
unpkg.com	104.17.247.203	true	false	high
helpimg.s3.amazonaws.com	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high
secure.encryptedconnection.net	unknown	unknown	false	high
https.docusign.click	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850	false	high
https://unpkg.com/petite-vue	false	high
https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css	false	high
https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==	false	high
https://secure.encryptedconnection.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_230.10.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/slide-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/moment/moment/issues/1423	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/accordion/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://stackoverflow.com/a/32954565/96342	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://stackoverflow.com/a/26707753	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jquery/jquery-color	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/position/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://pdfmake.org	chromecache_230.10.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_221.10.dr	false		high
http://api.jqueryui.com/button/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://blog.alexmaccaw.com/css-transitions	chromecache_230.10.dr, chromecache_229.10.dr	false	Avira URL Cloud: safe	unknown
http://www.datatables.net	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://creativecommons.org/licenses/by/3.0/)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/slider/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://utopia.fyi/type/calculator?c=320	chromecache_225.10.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://stackoverflow.com/q/181348	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_230.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_230.10.dr, chromecache_229.10.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/rails/jquery-ujs	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://www.robertpenner.com/easing)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_229.10.dr	false		high
http://jqueryui.com/datepicker/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://datatables.net/license	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/menu/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/checkboxradio/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/controlgroup/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/widget/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://https.docusign.click/XT3ZtYUhITFVCMHJuZklVdlBYUEM2NHlDTjlEVU9tQ25uL244akpKV2loOXdxYVdWM2VxQW	DIS_37745672.pdf	false		high
http://api.jqueryui.com/category/effects-core/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jqueryui.com/tooltip/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/selectmenu/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false		high
http://api.jqueryui.com/shake-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://modernizr.com/)	chromecache_230.10.dr, chromecache_229.10.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://api.jquery.com/jQuery.ajax/)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_230.10.dr, chromecache_229.10.dr	false		high
http://jsperf.com/thor-indexof-vs-for/5	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/uxsolutions/bootstrap-datepicker)	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js	chromecache_230.10.dr, chromecache_229.10.dr	false		high
https://https.docusign.click/XTkdHa0drejNQY0JNc0p0UXcrNjRmbkYzQnBaUTJYQVRDVzJkK3FsL0YxdWNYTGRlVHBwS3	DIS_37745672.pdf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.241.139.243	landing.eu.knowbe4.com	United States	16509	AMAZON-02US	false
104.17.246.203	unknown	United States	13335	CLOUDFLARENETUS	false
16.182.32.57	s3-w.us-east-1.amazonaws.com	United States	unknown	unknown	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.247.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
18.173.205.114	training.knowbe4.com	United States	3	MIT-GATEWAYSUS	false
18.173.205.111	unknown	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582672
Start date and time:	2024-12-31 08:58:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DIS_37745672.pdf
Detection:	MAL
Classification:	mal76.phis.winPDF@39/76@21/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 3.219.243.226, 3.233.129.217, 52.22.41.97, 52.6.155.20, 172.64.41.3, 162.159.61.3, 2.23.197.184, 199.232.214.172, 2.16.168.107, 2.16.168.105, 192.229.221.95, 23.200.0.33, 23.200.0.21, 216.58.212.174, 64.233.167.84, 142.250.186.35, 142.250.181.238, 142.250.185.238, 142.250.186.106, 142.250.185.74, 172.217.18.10, 142.250.184.202, 216.58.206.74, 142.250.186.74, 172.217.18.106, 142.250.181.234, 142.250.186.42, 142.250.185.106, 172.217.23.106, 142.250.186.138, 142.250.184.234, 172.217.16.202, 216.58.206.42, 216.58.212.170, 142.250.186.142, 142.250.186.174, 172.217.18.14, 142.250.184.227, 142.250.74.206, 142.250.184.206, 172.217.16.206, 142.250.185.174, 142.250.186.78, 142.251.35.174, 74.125.0.137, 184.28.90.27, 104.77.220.172, 4.175.87.197, 13.107.246.45, 23.1.237.91
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, www.bing.com, fs.microsoft.com, accounts.google.com, r4.sn-ab5l6nk6.gvt1.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, armmf.adobe.com, r4---sn-ab5l6nk6.gvt1.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:59:27	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.17.246.203	http://ghostbin.cafe24.com/	Get hash	malicious	Unknown	Browse
	https://i.donotreply.biz/XWTZMVjBsbS9FS1Z2NzBoRzFZMy83RkoxVmlXaWlxaHo3VWFucmtuUGw1enh1ZWNEWVVSRmU5SURkU2psUnlGWUVLSzJtc3hJMVRZeXdZQTdKTVMwOTIySXc0dXRmSmkrKzVTSFFkRTlsZ0sycWdFdnhVY3BJNGx5ZnRmWTFhc0tuTTN1bVNUeUdFYkgrRW9rVllXdnIvNEE4aUgwNlR0R291UUxXUmY2L1JsVnZyNmMvbVpoUGJac04xckVKQlBXLS1PZFpzV3ByWmxpaEJybUhrLS1uMXVPRk5IWXlyNFBPNklpRkk0NTB3PT0=?cid=2330206445	Get hash	malicious	KnowBe4	Browse
	http://www.delinian.com	Get hash	malicious	Unknown	Browse
	Yogi Tea Benefits Open Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse
	https://eu.onamoc.comano.us/XaFJNdmNsY0JUVzZrd09aZnpEZk9LNXJHSFV1RTlrbFdPMXQ5dzRKTHV4dEdpUEhTM1I1MCszdjdWWm54V01kSEhOSlpOSFpjMUlsaFNTc0l3eXhVeWl3TGVjWm14bGMxUFkzWWFkVUQvbUlNMGEza0pnOFFCK3N4TDBlc3RyYWJkSE9xVU9ETG5TU1lHQkZwdStVdXhGMzdoQzltdFAwRnc0WTJuMmF3Q1VkTzdMb0lwNXhqOFQ3eGRtK0ZuQUpydjMxSWdnPT0tLUFPWFdqaFhtRnVKaEhNK20tLUlJNFZwQjNETFQyTk1iL0UxMUxBTGc9PQ==?cid=300477933	Get hash	malicious	KnowBe4	Browse
	18037.doc	Get hash	malicious	Unknown	Browse
	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse
	http://abercombie.com	Get hash	malicious	Unknown	Browse
	https://su.onamoc.comano.us/XcEhOOWF1eS9pVi9RYkVJUURCV1RYR0RGd2dHRjNGcUhDdkhxWFpsdUp1UWlVZk83UmwwZjIrYmdvdzh3aFZ3V1NpdnFZTG4zSE16TDBDYU5yc2hZVWQ3UU1GNHRON29GNEpZZkN6SGY0Nk8rdVp2U2tOWmNQbDNnZ0lyalR3OXBmeDlrU0FLKzlVeHI4YXk2YUFmaTRMUUR5TkhWNlhtSzMwQ2IrcU16UzRXUWROZDFlc3k0aldiNy0td25BVUltZUhhSGpCZG5tRS0tN1VocVZyWm1JT2tITW5yVjN4YWNxdz09?cid=2310889346	Get hash	malicious	KnowBe4	Browse
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
239.255.255.250	https://nutricarm.es/wp-templates/f8b83.php	Get hash	malicious	Unknown	Browse
	http://ghostbin.cafe24.com/	Get hash	malicious	Unknown	Browse
	http://parrottalks.info	Get hash	malicious	Unknown	Browse
	https://gogl.to/3HGT	Get hash	malicious	CAPTCHA Scam ClickFix, DcRat, KeyLogger, StormKitty, VenomRAT	Browse
	http://4.ehnf5.michaelhuegel.com/4OqsxI2945YXZc313iyclbcrqjn981XVWUREZAVLOLNZO2481UPMZ15664q13	Get hash	malicious	Unknown	Browse
	https://bs32c.golfercaps.com/vfd23ced/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse
	https://compliance-central.com/route/ed5305641af2fd214861ba268e4a42aa2938b075/	Get hash	malicious	Unknown	Browse
	https://compliance-central.com/route/ed5305641af2fd214861ba268e4a42aa2938b075/	Get hash	malicious	Unknown	Browse
	https://employeeportal.net-login.com/XL0pFWEloTnBYUmM5TnBUSmVpbWxiSUpWb3BBL1lPY1hwYU5uYktNWkd5ME82bWJMcUhoRklFUWJiVmFOUi9uUS81dGZ4dnJZYkltK2NMZG5BV1pmbFhqMXNZcm1QeXBXTXI4R090NHo5NWhuL2l4TXdxNlY4VlZxWHVPNTdnc1M3aU4xWjhFTmJiTEJWVUYydWVqZjNPbnFkM3M5T0FNQ2lRL3EySjhvdVVDNzZ2UHJQb0xQdlhZbTZRPT0tLTJaT0Z2TlJ3S0NMTTZjc2ktLTZGNUIwRnVkbFRTTHR2dUFITkcxVFE9PQ==?cid=2341891188	Get hash	malicious	KnowBe4	Browse
	https://tepco-jp-lin;.%5Dshop/co/tepco	Get hash	malicious	Unknown	Browse
104.17.247.203	https://i.donotreply.biz/XWTZMVjBsbS9FS1Z2NzBoRzFZMy83RkoxVmlXaWlxaHo3VWFucmtuUGw1enh1ZWNEWVVSRmU5SURkU2psUnlGWUVLSzJtc3hJMVRZeXdZQTdKTVMwOTIySXc0dXRmSmkrKzVTSFFkRTlsZ0sycWdFdnhVY3BJNGx5ZnRmWTFhc0tuTTN1bVNUeUdFYkgrRW9rVllXdnIvNEE4aUgwNlR0R291UUxXUmY2L1JsVnZyNmMvbVpoUGJac04xckVKQlBXLS1PZFpzV3ByWmxpaEJybUhrLS1uMXVPRk5IWXlyNFBPNklpRkk0NTB3PT0=?cid=2330206445	Get hash	malicious	KnowBe4	Browse
	https://alluc.co/watch-movies/passengers.html	Get hash	malicious	Unknown	Browse
	bad.html	Get hash	malicious	HTMLPhisher	Browse
	Fw Your flight has been cancelled.eml	Get hash	malicious	Unknown	Browse
	https://addto.password.land/XTi9aSHpxMU9CSkxBVXRhNGJhTWRLelpoTjl5MHNEUndKbFN6WU9rV1E1QnF0azRVN1Z3OEFWTE0rd0NldXVBQ3QyUGw3NXpZcDNMMHZ3QklHeU5CYzJBSmowVWUzYlJtS1FOZlBKQzNHRkV5dDRZckdUSHVVZ1h3VGRxL2VNZkw3RDBlOS9rSTYvK3FOU2UwdUd2OFA0KzZWaWc4ZmMrMzhaTnBpSzc3aU55UVlxUnlKZXRwdm9nPS0td0ZVSjRCSTRJclFTRVBuVS0tc2h0a3RIa3J5VGJRUUt5NUZCdmxvdz09?cid=2310145655	Get hash	malicious	KnowBe4	Browse
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://emailtransaction.com/?u=84775-2a97acb5884211437e2511ddc7c4e345386c33487a558c479c7af49e7f66170e	Get hash	malicious	Unknown	Browse
	https://merchbkofin.com/	Get hash	malicious	Unknown	Browse
	https://important-wholesale-dress.glitch.me#clerk@tkbtc.co.uk	Get hash	malicious	Unknown	Browse
18.173.205.114	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
18.173.205.114	https://2fa.com-token-auth.com/XLzgrdk01ellQd1gvQjlDc2VyNTJoRHlpQ0lSMHBKeFZZV0RyZ1Q3YUlVbENaRG50WDFzWjhWZTNmMllYNjZHN283dE8vOG02QklSQUZxNVRFUzZVRkovMnJ0YVZweExPcjhwdHlNdXRpbzhWVWJnZDdSbTVCSkhId0dHcjNzTkovc3F3MFV6eWFjdEZGNkpHTlVPdWxRTlVUOHZ6RUVGN3FlL2VVSzlzY09tVldDN2l2OVlFalZtWW9RPT0tLUpSRGZWdnhOOENBUTNhcGEtLUU0RE5seTEwRHZtK043c1QyOTFrV3c9PQ==?cid=2293130893	Get hash	malicious	KnowBe4	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s3-w.us-east-1.amazonaws.com	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	16.182.35.201
	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	54.231.199.241
	j6ks0Fxu6t.exe	Get hash	malicious	LummaC	Browse	52.216.216.113
	fnCae9FQhg.exe	Get hash	malicious	LummaC	Browse	16.182.108.137
	SFtDA07UDr.exe	Get hash	malicious	LummaC	Browse	16.182.108.137
	Gq48hjKhZf.exe	Get hash	malicious	LodaRAT	Browse	3.5.8.193
	2oM46LNCOo.exe	Get hash	malicious	LummaC	Browse	52.217.14.36
	tTGxYWtjG5.exe	Get hash	malicious	LummaC	Browse	16.15.177.52
	iaLId0uLUw.exe	Get hash	malicious	LummaC	Browse	3.5.17.0
	yuij5p5p3W.exe	Get hash	malicious	LummaC	Browse	54.231.128.9
training.knowbe4.com	https://employeeportal.net-login.com/XL0pFWEloTnBYUmM5TnBUSmVpbWxiSUpWb3BBL1lPY1hwYU5uYktNWkd5ME82bWJMcUhoRklFUWJiVmFOUi9uUS81dGZ4dnJZYkltK2NMZG5BV1pmbFhqMXNZcm1QeXBXTXI4R090NHo5NWhuL2l4TXdxNlY4VlZxWHVPNTdnc1M3aU4xWjhFTmJiTEJWVUYydWVqZjNPbnFkM3M5T0FNQ2lRL3EySjhvdVVDNzZ2UHJQb0xQdlhZbTZRPT0tLTJaT0Z2TlJ3S0NMTTZjc2ktLTZGNUIwRnVkbFRTTHR2dUFITkcxVFE9PQ==?cid=2341891188	Get hash	malicious	KnowBe4	Browse	3.88.121.169
	https://chase.com-onlinebanking.com/XWmJkMGsxak5lZzdVZUczR3RxTGFWN1g0Q2NKLy96RURPVEpZbEdkOC9nQzY1TStZSjU0T0x4Q05qOXZBRHZnZTZpMmh2eGFmSm9rcVRmV2xBeENiMEF1V3VTOVAvL2dKemVQZkZGNHAxQ1hqTU9WY0R5SGpYeDQ3UVNtNGZpWDJYdWxBUFY5OUFVc3VFU041aHl6aUxrMlBZaGs1Y25BV0xHL1Vhc1BYNVQ5d3laZ2piV3gvTjlUMmc3QWV4QUs2Q0h6Yi0tZ1lEV1pac1JHRzl5ZFpFaC0tcVVpc09xQzZsUzY0bzY0YWpuS1N2Zz09?cid=2342337857	Get hash	malicious	KnowBe4	Browse	3.88.121.169
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	18.173.205.50
	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	3.212.32.86
	https://spamchallenge.msftemail.com/XdEd3bDVBUzZOQUwzUmxzRWVLU3huK0JqbXFtZHA3cUlvcXhnRlhWaFBaSDJIMnMyYVN0MGpGNGN3c0Q1NE0xMUpGT3JuT2xOaVZKczlQL2VBWE9sa0pRN2VuUERVTlFWMkdmNjZoUlV4SGhDaFJQR2RQNGg2UVRmaUNIVFM2cVl4WXBaTTNCMTg4eS9XU1RyNEJ1R2VsdVdPN0JBaWZtUWRWb25EN3pIdkgyNGRYaHhjRHFWNnJ6NWFuREk4N3Q5WmdUOXIwNFYxeDA9LS1FQ0krTzhnQnV6bDJBd2tOLS1vZDl3bzRPTTR5Nk4wandOR3dTZDd3PT0=?cid=2315281580	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	3.224.166.12
	https://gmail.net-login.com/Xb1Rnb3pKRC9CUEdpbldIVTREbHhIK1Vza1NvaWlrblBIbkN4aUdCZUt0Y2NlSGJiWmZ2d0M1dTB5dEpRbnRoVDdBVkFTcEJqWGowNVZycWJNWHlIUHlLOG1qS0FvemVPSXpFRFhGcUhmaVU1ekQwMklrVmM0QjVpNmhLaDdoY1I4UlhMcFo1TTJaSFhtaWpiWWFqWGZ5WEg4TnBiOUl4MDI1RFMyWStQRFoyNFo5UFZNUUpmWXBtaUg0Y0FjUG1jejdSVnFVOXJQL2VzdmNLM1lEaWtmRkZnZEk2Vi0tVHFIeU0vOWxTN01YVEtXbS0tTTh5Skh1eEtsc0xTT0J5Rzg2Q2ZJQT09?cid=2330416057%3EOpen	Get hash	malicious	KnowBe4	Browse	3.160.188.40
	https://i.donotreply.biz/XWTZMVjBsbS9FS1Z2NzBoRzFZMy83RkoxVmlXaWlxaHo3VWFucmtuUGw1enh1ZWNEWVVSRmU5SURkU2psUnlGWUVLSzJtc3hJMVRZeXdZQTdKTVMwOTIySXc0dXRmSmkrKzVTSFFkRTlsZ0sycWdFdnhVY3BJNGx5ZnRmWTFhc0tuTTN1bVNUeUdFYkgrRW9rVllXdnIvNEE4aUgwNlR0R291UUxXUmY2L1JsVnZyNmMvbVpoUGJac04xckVKQlBXLS1PZFpzV3ByWmxpaEJybUhrLS1uMXVPRk5IWXlyNFBPNklpRkk0NTB3PT0=?cid=2330206445	Get hash	malicious	KnowBe4	Browse	18.173.166.72
	https://eu.onamoc.comano.us/XaFJNdmNsY0JUVzZrd09aZnpEZk9LNXJHSFV1RTlrbFdPMXQ5dzRKTHV4dEdpUEhTM1I1MCszdjdWWm54V01kSEhOSlpOSFpjMUlsaFNTc0l3eXhVeWl3TGVjWm14bGMxUFkzWWFkVUQvbUlNMGEza0pnOFFCK3N4TDBlc3RyYWJkSE9xVU9ETG5TU1lHQkZwdStVdXhGMzdoQzltdFAwRnc0WTJuMmF3Q1VkTzdMb0lwNXhqOFQ3eGRtK0ZuQUpydjMxSWdnPT0tLUFPWFdqaFhtRnVKaEhNK20tLUlJNFZwQjNETFQyTk1iL0UxMUxBTGc9PQ==?cid=300477933	Get hash	malicious	KnowBe4	Browse	13.227.8.37
	18037.doc	Get hash	malicious	Unknown	Browse	18.164.78.13
	https://welsfargo.com-onlinebanking.com/XTFlySnlzYzQ1UXhqajFTVmtsYW50WkJBemRTamR4ME9mMGtnVWViL3dEU3g5cFRIUkFHOWdJQkxybzhJL1ZUSmJ4cExVZnk0UjVRcnFEc21wK2tXeGYyeG42TzJjREZmN05JQkhyZHViMldUakRRM3REKzU5ZS9HektFNXF4bEx3bXR2dzBnSytmRzIyOG4xU3NyNFc5RVlOY0h5Q2xMTFlLRVhEWnUwTVVQb2o2cUU3QURVMUhjbnJ3ST0tLU50cDlIc1hXNURmNmFNV0ctLXdjQnpKeTJDTUVxeHg3KzJKWVVIOVE9PQ==?cid=2324924114	Get hash	malicious	KnowBe4	Browse	3.82.118.141
landing.eu.knowbe4.com	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	52.208.202.62
	https://eu.onamoc.comano.us/XaFJNdmNsY0JUVzZrd09aZnpEZk9LNXJHSFV1RTlrbFdPMXQ5dzRKTHV4dEdpUEhTM1I1MCszdjdWWm54V01kSEhOSlpOSFpjMUlsaFNTc0l3eXhVeWl3TGVjWm14bGMxUFkzWWFkVUQvbUlNMGEza0pnOFFCK3N4TDBlc3RyYWJkSE9xVU9ETG5TU1lHQkZwdStVdXhGMzdoQzltdFAwRnc0WTJuMmF3Q1VkTzdMb0lwNXhqOFQ3eGRtK0ZuQUpydjMxSWdnPT0tLUFPWFdqaFhtRnVKaEhNK20tLUlJNFZwQjNETFQyTk1iL0UxMUxBTGc9PQ==?cid=300477933	Get hash	malicious	KnowBe4	Browse	52.211.171.55
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.249.122.247
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	18.203.54.200
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.250.213.208
	https://scam-report.malwarebouncer.com/XT2VkOUF6UWhJRkJORWRibzhzMytNYjdrNS9teUZ4OEhhK3BwL2pVdGJ6b3JVOHpQdlFFU1pVSDVwZC9ObHAzN2ptMTRIald2TXl0dXh0VEFrYzlWbTU4eU9qdTAycjN0VVRRalNHOVJzSkIzcm9hTDFRYnhOU2xkSVYrV2RLRjJ2dk9ITUdnRldMR2hKYzJsb0NuQWJTNG1rSjFaeEpyVDBsS1pYcWpsVTh5bThKUENydWxvcjdmbWR1ZkdvbjRzaElWWUFEMXN4R3ZKcXZaa3NzWnZ2N3ZBS3VjUUcwdz0tLXBNenBsNlZQeDgzanJXMEUtLXRsSDVDalFBbzhFdVNOMnltY2sxcUE9PQ==?cid=294625424	Get hash	malicious	KnowBe4	Browse	46.137.49.168
	https://cardpayment.microransom.us/XYmdKR004c2prdTQ3eFRYdTZlUlAwSGhsclU2V3JnMWpuZ2h3Njg2emV0U3ZLY1Z4RkpNZm9HbkpHck9SNjFHb01Yem5jSDVSb2RmaXRIWUNvN2g1UHR4NlNzM05yeWg0R2VJSzhzSFlRVTN6UFZHYWpZSUxBeXpsYmtPMjFua1J5RFlLdm5OUVBGRnl2UWRxSjhpUFRwL1VXS1RqNEJjMmJwNkVPOVkvV2o3S3R0MkYzS1VXOG5uS1hHVll2eDdUb3hmcGtBb2VBTUdHc3hweEtXV25WRVZKdDBwWCtVZGtobzFsamp3PS0tYVREdUlIcWNwNFJ5RjAxci0tQWs2bGpCejYzaGsxMWJqSll4TWFNQT09?cid=293298779	Get hash	malicious	KnowBe4	Browse	52.214.139.140
	https://covid19.auth-verify.com/XUXIrOHR6RjhQNXRDVW5iWmFYNTZaZlB0Z1ZnZHBzcVhlTW1qdU04ZXpTUXRDVmJVWGZzaSsxd05aQUF3emJmeFZyVkhKN3RPM2cwU3NDMWkrMFhSbTcwSEh5N09lN256QnJjRG9sWklQRy9KZm14M1JhMER1NzVYVjFlZUxmeTZnQVc4Z0t1T2pTTnJ5dHN3NVNSTFljQzlxOFJRb2NraUtMVVZ4ckN0eVF1WTFCS3VqVnNZazlaSlUrK3ZjUE1PcVM1eFhrQT0tLUs1UUpQQ3gzcDZ1VzRKVVEtLW44eGZTZUNwWmFkTnlqMFJCODNDZUE9PQ==?cid=289532680	Get hash	malicious	KnowBe4	Browse	52.209.169.238
	SpamLog.pptx	Get hash	malicious	Unknown	Browse	52.16.38.212
	https://add-to.password.land/XNllJMExLQVFyaWl5RE1YdDdhREtzbDBIbUhKUWZTY2ZQVkZiR3Ywa2p5V3k2UkMrNWZ5UzVndXdpaEgvVnQ0QU8wOHpNN3hlNmFRc2EzWUo4ajB3eHp2WE0vVWpoanlDVHlVU05nYytLS0doVmZ4bzdSKzhTMFJLdUlMb1IvMXgrUmtkRzFHWWp3OGJub29qR0paOGovZzgwNjJwN1l0bVJNeS9lcktlUTVKcC9SUGF5N0ZsLS16Q2pVSTZxanFackJzbkFELS02ZFg0VzVRcHhlYVZJTGxKMjZLS2h3PT0=?cid=289916869	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	52.19.48.43
bg.microsoft.map.fastly.net	https://gogl.to/3HGT	Get hash	malicious	CAPTCHA Scam ClickFix, DcRat, KeyLogger, StormKitty, VenomRAT	Browse	199.232.214.172
	222.msi	Get hash	malicious	XRed	Browse	199.232.214.172
	universityform.xlsm	Get hash	malicious	Unknown	Browse	199.232.210.172
	universityform.xlsm	Get hash	malicious	Unknown	Browse	199.232.210.172
	Payment-Order #24560274 for 8,380 USD.exe	Get hash	malicious	AsyncRAT, PureLog Stealer, zgRAT	Browse	199.232.214.172
	SecuredOnedrive.ClientSetup.exe	Get hash	malicious	ScreenConnect Tool	Browse	199.232.214.172
	dsoft.exe	Get hash	malicious	Python Stealer, Creal Stealer	Browse	199.232.210.172
	Installer eSPT Masa PPh versi 2.0#U007e26022009.exe	Get hash	malicious	BlackMoon	Browse	199.232.210.172
	Installer eSPT Masa PPh versi 2.0#U007e26022009.exe	Get hash	malicious	BlackMoon	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	ARMV7L.elf	Get hash	malicious	Mirai	Browse	54.247.62.1
	systempreter.exe	Get hash	malicious	AsyncRAT	Browse	3.69.157.220
	http://ghostbin.cafe24.com/	Get hash	malicious	Unknown	Browse	13.32.99.103
	rjnven64.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	https://gogl.to/3HGT	Get hash	malicious	CAPTCHA Scam ClickFix, DcRat, KeyLogger, StormKitty, VenomRAT	Browse	18.245.31.129
	Epsilon.exe	Get hash	malicious	Unknown	Browse	185.166.143.48
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	kwari.arm.elf	Get hash	malicious	Unknown	Browse	54.168.12.166
	kwari.mpsl.elf	Get hash	malicious	Unknown	Browse	52.63.235.181
	kwari.arm7.elf	Get hash	malicious	Mirai	Browse	52.17.112.151
CLOUDFLARENETUS	Poket.mp4.hta	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://nutricarm.es/wp-templates/f8b83.php	Get hash	malicious	Unknown	Browse	104.21.96.1
	Exlan_setup_v3.1.2.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	RtU8kXPnKr.exe	Get hash	malicious	Quasar	Browse	104.26.12.205
	http://ghostbin.cafe24.com/	Get hash	malicious	Unknown	Browse	104.18.27.193
	http://parrottalks.info	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://gogl.to/3HGT	Get hash	malicious	CAPTCHA Scam ClickFix, DcRat, KeyLogger, StormKitty, VenomRAT	Browse	104.17.208.240
	Fizzy Loader.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.138.232
	Loader.exe	Get hash	malicious	Meduza Stealer	Browse	104.26.13.205
	https://bs32c.golfercaps.com/vfd23ced/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
CLOUDFLARENETUS	Poket.mp4.hta	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://nutricarm.es/wp-templates/f8b83.php	Get hash	malicious	Unknown	Browse	104.21.96.1
	Exlan_setup_v3.1.2.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	RtU8kXPnKr.exe	Get hash	malicious	Quasar	Browse	104.26.12.205
	http://ghostbin.cafe24.com/	Get hash	malicious	Unknown	Browse	104.18.27.193
	http://parrottalks.info	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://gogl.to/3HGT	Get hash	malicious	CAPTCHA Scam ClickFix, DcRat, KeyLogger, StormKitty, VenomRAT	Browse	104.17.208.240
	Fizzy Loader.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.138.232
	Loader.exe	Get hash	malicious	Meduza Stealer	Browse	104.26.13.205
	https://bs32c.golfercaps.com/vfd23ced/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.192923961231739
Encrypted:	false
SSDEEP:	6:5lIcSFnQ+q2P92nKuAl9OmbnIFUt8MlI9pdWZmw+MlI9pQVkwO92nKuAl9OmbjLJ:bIje+v4HAahFUt8IIg/+IIQV5LHAaSJ
MD5:	68CDC3E4369D31C99B46354288E082F4
SHA1:	7964C02B0F5DD8EB4CBEA829EBAA0EEBF66D5CFA
SHA-256:	07130C183DA0B11BF58C95237E6B292649CA580689F44AE072872E07BF05C866
SHA-512:	D4F2C39CF59F34E651BB3F1EA75DA3847096AC01A31F8564AA2852C79F6C90A5BE23075AF9623EC8F56ED14025E64E8DE5201CF1932D7D2149750AE44DC8A24E
Malicious:	false
Reputation:	low
Preview:	2024/12/31-02:59:16.657 1c0c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/31-02:59:16.660 1c0c Recovering log #3.2024/12/31-02:59:16.660 1c0c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.192923961231739
Encrypted:	false
SSDEEP:	6:5lIcSFnQ+q2P92nKuAl9OmbnIFUt8MlI9pdWZmw+MlI9pQVkwO92nKuAl9OmbjLJ:bIje+v4HAahFUt8IIg/+IIQV5LHAaSJ
MD5:	68CDC3E4369D31C99B46354288E082F4
SHA1:	7964C02B0F5DD8EB4CBEA829EBAA0EEBF66D5CFA
SHA-256:	07130C183DA0B11BF58C95237E6B292649CA580689F44AE072872E07BF05C866
SHA-512:	D4F2C39CF59F34E651BB3F1EA75DA3847096AC01A31F8564AA2852C79F6C90A5BE23075AF9623EC8F56ED14025E64E8DE5201CF1932D7D2149750AE44DC8A24E
Malicious:	false
Reputation:	low
Preview:	2024/12/31-02:59:16.657 1c0c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/31-02:59:16.660 1c0c Recovering log #3.2024/12/31-02:59:16.660 1c0c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.198449682509409
Encrypted:	false
SSDEEP:	6:5lINAq2P92nKuAl9Ombzo2jMGIFUt8MlIdZmw+MlIozkwO92nKuAl9Ombzo2jMmd:bIuv4HAa8uFUt8IId/+IIU5LHAa8RJ
MD5:	83AC05A1A5181BA2A72960771F3DC7F8
SHA1:	4E87C600E9CF41725970E121E404B9702AACF9AA
SHA-256:	985A02156F40469185CEFA9464E7C9EB00B837C2DDF9113E511C2E7EB0E64F8D
SHA-512:	A7E6CDCA82298B7DE4A77DC219FB038BBDBF9C4DB0621844A3C9B5CF3969E24EE91B8B31DCAEBA9E702F40690B6D73299718440B49404574ECC26B1DB0943B05
Malicious:	false
Reputation:	low
Preview:	2024/12/31-02:59:16.731 1c70 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/31-02:59:16.733 1c70 Recovering log #3.2024/12/31-02:59:16.752 1c70 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.198449682509409
Encrypted:	false
SSDEEP:	6:5lINAq2P92nKuAl9Ombzo2jMGIFUt8MlIdZmw+MlIozkwO92nKuAl9Ombzo2jMmd:bIuv4HAa8uFUt8IId/+IIU5LHAa8RJ
MD5:	83AC05A1A5181BA2A72960771F3DC7F8
SHA1:	4E87C600E9CF41725970E121E404B9702AACF9AA
SHA-256:	985A02156F40469185CEFA9464E7C9EB00B837C2DDF9113E511C2E7EB0E64F8D
SHA-512:	A7E6CDCA82298B7DE4A77DC219FB038BBDBF9C4DB0621844A3C9B5CF3969E24EE91B8B31DCAEBA9E702F40690B6D73299718440B49404574ECC26B1DB0943B05
Malicious:	false
Reputation:	low
Preview:	2024/12/31-02:59:16.731 1c70 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/31-02:59:16.733 1c70 Recovering log #3.2024/12/31-02:59:16.752 1c70 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8c6bb17b-b32b-4478-92f4-d9645f1fa321.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.054967407511474
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq28WsBdOg2HdkAcaq3QYiubxnP7E4T3OF+:Y2sRdsp87dMHI3QYhbxP7nbI+
MD5:	9C9FA336F91B86EA0A61A86DBD3D8A5F
SHA1:	CAAF955C23CACE3C658B36B6B5E55D96F4572C3F
SHA-256:	5AFB0AEADCF60064391332AD5FF973ED0028DB45B0D764E7272444AC807A9FBC
SHA-512:	7C377CA18317D7080A24FCE30479CFC487AE6C15D8012F047E42B5C68A966C00A1A1FADFA0F6B9E30DDBA274A24BD69DCF6089124AC7AA981926D0C4EA0225AA
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13380191966811478","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":150968},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.054967407511474
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq28WsBdOg2HdkAcaq3QYiubxnP7E4T3OF+:Y2sRdsp87dMHI3QYhbxP7nbI+
MD5:	9C9FA336F91B86EA0A61A86DBD3D8A5F
SHA1:	CAAF955C23CACE3C658B36B6B5E55D96F4572C3F
SHA-256:	5AFB0AEADCF60064391332AD5FF973ED0028DB45B0D764E7272444AC807A9FBC
SHA-512:	7C377CA18317D7080A24FCE30479CFC487AE6C15D8012F047E42B5C68A966C00A1A1FADFA0F6B9E30DDBA274A24BD69DCF6089124AC7AA981926D0C4EA0225AA
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13380191966811478","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":150968},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.241287979245004
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLULu3z3iJZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLK
MD5:	CCBC4BADD1B3D6A0BFF983BF2ADFF858
SHA1:	07F1BB21711475CAF67A2EC0B74E42E5E66C53E4
SHA-256:	A96CB4AC2881C91C8EAA1C01560082A4D60F09765FD2F70190CE6B3A746A4330
SHA-512:	12523A3D2E2391B5E73144DC50C013C30EB52A67D31CC94AB92BD0E4AC22D864940E7ECDB35F0344067FF91193BACA76ABCB714A9F19A1FF685F68FF666DF216
Malicious:	false
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.160891322144923
Encrypted:	false
SSDEEP:	6:5lttGTq2P92nKuAl9OmbzNMxIFUt8Ml86vZZmw+Ml86vzkwO92nKuAl9OmbzNMFd:b+Tv4HAa8jFUt8IDh/+ID75LHAa84J
MD5:	90B82EB432F88FFFB18F3191EF32C799
SHA1:	B33752BD2B3D389CEF81EE5EE5DA0211F9383DC7
SHA-256:	F4376593AE541194F5152B1E37A7D3F1444CB5ACC3AC9BE19A8D38BFC7AE85E9
SHA-512:	93FE2E0C1D0E5D36BCEE568C85D71089E7FDFB39814843CBDA9ABDEF9835805D3EC45A2A93F7BF347C388A49278D0E5B7FE6F9BC651482E15B41FC301DF39EBD
Malicious:	false
Preview:	2024/12/31-02:59:17.029 1c70 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/31-02:59:17.030 1c70 Recovering log #3.2024/12/31-02:59:17.030 1c70 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.160891322144923
Encrypted:	false
SSDEEP:	6:5lttGTq2P92nKuAl9OmbzNMxIFUt8Ml86vZZmw+Ml86vzkwO92nKuAl9OmbzNMFd:b+Tv4HAa8jFUt8IDh/+ID75LHAa84J
MD5:	90B82EB432F88FFFB18F3191EF32C799
SHA1:	B33752BD2B3D389CEF81EE5EE5DA0211F9383DC7
SHA-256:	F4376593AE541194F5152B1E37A7D3F1444CB5ACC3AC9BE19A8D38BFC7AE85E9
SHA-512:	93FE2E0C1D0E5D36BCEE568C85D71089E7FDFB39814843CBDA9ABDEF9835805D3EC45A2A93F7BF347C388A49278D0E5B7FE6F9BC651482E15B41FC301DF39EBD
Malicious:	false
Preview:	2024/12/31-02:59:17.029 1c70 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/31-02:59:17.030 1c70 Recovering log #3.2024/12/31-02:59:17.030 1c70 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241231075918Z-164.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	2.338682311988844
Encrypted:	false
SSDEEP:	384:CMBiqxTK4Mkwsovk3bPNFX/m00El6m20Bmgu1SuRKN6/Ls3m:CMBiizlw1MzsElZziSucN6r
MD5:	8728457C021B84949313963AD3935AF0
SHA1:	2A168D21FDC43A97948D173C218C34F511A17BAD
SHA-256:	E7FDF43ED0439F878CB6942B8F8DE670F7DA27C026E5D0F635EF1F9CE6F64DF2
SHA-512:	7CFACFB1FEAA09EFFFE57A1152844E1641165016EF2D8B288EECD396F9C41CF3C48E01C5E82202FB15BE8F7DFD9AE5CBFC685D4091D9B9BE286ECBE8476A2384
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 3, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.2936702144535652
Encrypted:	false
SSDEEP:	192:/edRBlVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:/eLci5H5FY+EUUUTTcHqFzqFP
MD5:	5F61193FFD440201DE8855AF2D4C3266
SHA1:	D6520A02ACF4D5A2C78D8604252389FA4D59B1A9
SHA-256:	D398380DE2F9B4E14F2395E307484552078CFED1F7B6299932EE4CBAA1AC66CB
SHA-512:	9DB166546F0652B41501D6FFEB35F5BB9316EE78C9C4A4929E8C88DF12DBEE05F3D9896FD70178DB45D4A927B6CB5D1510A48D3AC9A56956BB9FB9BE067841B5
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	2.2026807822423997
Encrypted:	false
SSDEEP:	24:7+t+MEWewKTWqLazkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf1:7MvU6qemFTIF3XmHjBoGGR+jMz+Lh9
MD5:	467E7C878429C6C7E6EF14E50F65CD5E
SHA1:	50241746492099387C3B815333121B81BE3313DA
SHA-256:	998BF03845508B71F9E9DA3C5B2D7C3136050DC2A406CA7DD157DE76F6FE4DA5
SHA-512:	F7842CB137FE19687D1C0A7919ECF4224A4687B70749161C9AAAAA6C209A95D9E4BFD69A8C85D5D14CB5C04D5150BCA00F07F7C72F93C0724FFDEA9B4C648BF6
Malicious:	false
Preview:	.... .c......j.n........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7673182398396405
Encrypted:	false
SSDEEP:	3:kkFkluxuMmkfllXlE/HT8khCzvNNX8RolJuRdxLlGB9lQRYwpDdt:kK3xuMm9T8ogNMa8RdWBwRd
MD5:	12B99C2136E8BFB98E695EDE83FF9A9C
SHA1:	22564AF77F6A248577E119887E958E8B95EEAE61
SHA-256:	BC5630EE45A63CCAD5DCCE7D3040A278E8B182E2AF22495E2DEB8BEB9E1FD3EB
SHA-512:	24D134F4169982628E7824F6FA289F0C3072388CA7E6F82A08A84366854DCCE2BF438E7747B01922A229B09A3249AEDE88BC6B0DAC055C1B085DCB231D3BBE4B
Malicious:	false
Preview:	p...... ............Y[..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2418003062782916
Encrypted:	false
SSDEEP:	6:kK3n9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:eDImsLNkPlE99SNxAhUe/3
MD5:	C6F4F0321054E480DAF2B9CC031A495C
SHA1:	EDAED7DE46C975DCBFCC5DD1B8742560C725942A
SHA-256:	324FF8C74872F6389157F2B31CBBDCDC29B918604E988C9729D3DABB590EFBD5
SHA-512:	D976E00D1DD90BAA39DF4C57ED8340E22CB5C3CE87AE0A0C881C09952688A4318E7B28560923A35DE0C815639F4196EF25B3F85A7CAD63E286B026F4A2E2D366
Malicious:	false
Preview:	p...... ........&...Z[..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.364459285341226
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJM3g98kUwPeUkwRe9:YvXKXq9fxnESYpW7SXxOGMbLUkee9
MD5:	1A333936805FF6296C1B08439394EB27
SHA1:	683AAD7193DB2CAFA689693335EF8737C54EF7F5
SHA-256:	0AA48124CAF8AB57FF4FD21A3589765E95E5E0368614997CBC39557C7FF0AC79
SHA-512:	C1B49C6DDAAD08F185E3C1E11ED509082509238712363DBC63CF5DEC46ADA9CBCD798B945FF0DF0716B526F60C3AAE38A04E8FF9455FE70A590E1E4BF90485AC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.30598516599111
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfBoTfXpnrPeUkwRe9:YvXKXq9fxnESYpW7SXxOGWTfXcUkee9
MD5:	3F34BA9BFC38C31C2E560E913A26C194
SHA1:	8D6C4F0D5C335FCFAAAB04D3B78B6F740FB1932C
SHA-256:	C7B52C93C3F166A14742B97699E5939C66CA08B095C72E4D6D7F21F42DCC7843
SHA-512:	E6CE528E0DDE057C897FB66FDABE6E28F6EAD6E05FE7A2781F817F8112BB08A5FEA4AB0A2CE13993795430B3CAD15813B5B5940A521887A7559E46C0F6F42FBA
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.284384484859541
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfBD2G6UpnrPeUkwRe9:YvXKXq9fxnESYpW7SXxOGR22cUkee9
MD5:	83AC6C2782B6ED6B0F3B2F069C219385
SHA1:	7B4FB9FC27B29CA6E577F7FCB4FDE5501AE3F7EF
SHA-256:	8E0CEBE7D667EB5CE96C624AA8D8A9092CBC90BBB9561ABC479664D8BE5C394E
SHA-512:	47E701F3EF1C95CA3E891D4346BC51CE7A1A415832E24E04FA195618234185FED03E57BDEF873DD5C46D5D2887C766645A00178F82F9F4223198EA887811D5BB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.343390615592496
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfPmwrPeUkwRe9:YvXKXq9fxnESYpW7SXxOGH56Ukee9
MD5:	073150354F221CDD14FC17FE1C436788
SHA1:	A05E86DBAE98E0B67201FB6A3560C17B805E8658
SHA-256:	9A06E42D3392FF944D5D6F39401D9AADE8BAABFE4824DFC2890778D8685A9A9C
SHA-512:	FCB0EEEB3DED5CB8B28775E3E5FB7EA4301D727AB9BCC49BA93B7A906012C292B6127028E3D24FF20075B2B34E26BD8A03275A9BB391FE4F223F6797429A77D2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.697548122396193
Encrypted:	false
SSDEEP:	24:Yv6XIfxnWiypLgE9cQx8LennAvzBvkn0RCmK8czOCCSjz:Yvthyhgy6SAFv5Ah8cv/jz
MD5:	76759DE66E86A6062BA35D304F9C93C5
SHA1:	E3E4CDC165B45B0F1B3B38680E83B97C04B52659
SHA-256:	782138BABF5309C3E5EFD85843E6B241B0B23B48CDABB068DB41324BD4FEB86F
SHA-512:	3819B5ACBA327787A267336A4E6D05AD6F485A92EBC43F0090F1C9FDBC0B27218D09631D2A3FFA4BC4EA6E71B50C4E28D2B83CD9188E8F1EB8A918F60B744C8E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.294231156972717
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJf8dPeUkwRe9:YvXKXq9fxnESYpW7SXxOGU8Ukee9
MD5:	89D26E34C0E6B655E39946F4BAC9B332
SHA1:	64D0B9751E012500CCD06754D6477884BE28D42B
SHA-256:	A7344B9306F83E54CF9CC8BC8E46446291CD5836064CF8C83D916C2FE84CF009
SHA-512:	870C537CA8059D07C739A224DD1FC0D697543E8987F4E67C2D8FE89BE9159E41D4EAE7D55E14E8C9FA2A50E88F1FD50661B70AC91A53EA134E243E9D7560E4BB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.295224997870024
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfQ1rPeUkwRe9:YvXKXq9fxnESYpW7SXxOGY16Ukee9
MD5:	F713F2F25600B72D41F3034A289C3C27
SHA1:	B76065F28D4B98899E991BFBA68D124C1190A5BA
SHA-256:	FE01B83C4D9635A8D025CD8A9D6E61180BBC7E4838902B07F9F316A9ADC94B13
SHA-512:	E76FD616442E57099198C7C062FFA6631F8938D6ADA3B2821CA26AE76019241D9B6A1BFD6B6FEE224D6FF90FC6B2191D902CE2C6BBE4203EB53C3B38092237B2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.316514690595918
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfFldPeUkwRe9:YvXKXq9fxnESYpW7SXxOGz8Ukee9
MD5:	0FBFEDC017F09CC0254067D47600FF9E
SHA1:	22AD5929944017A7C69B636582C4D0E214FA77AC
SHA-256:	83FD5EC9DE91A88CF4AC2554E9739176CDF096D9EE03E8EC5097299C0145AEE9
SHA-512:	3DF5FC02530A1376BF240D710A2B255F8FA455A1DD115CA92224C3DC3200168F8D03B88F170E2C8AE65A2EC7A7F0AD573C2553F703E0A3B03BE0D23014CB5A92
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.322212450540823
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfzdPeUkwRe9:YvXKXq9fxnESYpW7SXxOGb8Ukee9
MD5:	BF5460BBAFE0B7382B2072535D597BB2
SHA1:	09404DDEF7687F496B75E2CB9C1A3DB7E9255EA2
SHA-256:	A69B4CAD7D7C5C017902B40DAFAC6EB007F9493D0EEA3E1B46485BA749CD6219
SHA-512:	A9DCDDECFC4F875BA62C965B086A9906AFE499B530FD9E30C1F1C2633A0CF926DF7F1FA7DC1E6323D0DE70E00CB7F97C71621F888C4BA0A3E1CDFE424C863EE8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.302309315525236
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfYdPeUkwRe9:YvXKXq9fxnESYpW7SXxOGg8Ukee9
MD5:	1D39C627B9F93C4C6C3664E953B90062
SHA1:	8D7EE6ADCB9225060A50550063B5D9E5229991B8
SHA-256:	FC460E141DCDCD2534D92B0CA414016261A7EA83775546BAE70B8168483F341C
SHA-512:	A0062A9DCF8A656A7432C53AEA332F39B136781CB2758822AA1CBAE544E06EE8AF2142CAB021E6D599372131165F93D8EE813F1372A9A86DE6FB2F7B4F507685
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.288082643778542
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJf+dPeUkwRe9:YvXKXq9fxnESYpW7SXxOG28Ukee9
MD5:	D2E1CDEFF4FB8AA415962FAE81903AAD
SHA1:	007FB156FE2647B0F4AA593971938D6A13D1A57A
SHA-256:	BD2C6A34FC3971B629D61A8A1A8E91B14631A6684D234B5B23BC11FE4C4C0AF9
SHA-512:	E2237475E12620320E3C6A769E6AFE0FC48DB2D4C3479F14D301FCFD79DE9F6E7A5066BBA3EEAEA2E63DE610B11D0E68DF1D9CA62421730CAE8F60B4E41AE61C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.285840541614734
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfbPtdPeUkwRe9:YvXKXq9fxnESYpW7SXxOGDV8Ukee9
MD5:	C5150F78286764B174C931FDF72A5C7E
SHA1:	19C0FD3CDDC8C6E31DB26ACFE89026F1BF8C8269
SHA-256:	06835F503CCC128071AABB2536D52073B0915153BE6A3CAEC0C32764A7830020
SHA-512:	C75C0449AD0E8BD914F3B105B69BD0F75E34202A7E4F8F1FC1C2055086477806EC5225C6A096F364E5818337D44C0F3900995DC62524B26A6BF807817627CACE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.286895975183209
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJf21rPeUkwRe9:YvXKXq9fxnESYpW7SXxOG+16Ukee9
MD5:	657D9191B6DF6C6808CE367521E092F1
SHA1:	8A6A0932F886C3225F8E88EF3C4BB085EC8E1AD3
SHA-256:	D76A6DB161574F315C87609736BDFAA73E6191400B1916F6C3E0489117AA2DB7
SHA-512:	AB90383E17136F63BFD67779F3C6EA1E605B2C95FF65A41A5D0CEC51430DBA00A6BA83434D7E91816CDE98538F07BC40E0E710554D6DFE293923A89FCB879837
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.667128884756622
Encrypted:	false
SSDEEP:	24:Yv6XIfxnWiuamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSjz:YvthwBgkDMUJUAh8cvMjz
MD5:	18F9067215F46E350BA07BCE29B02582
SHA1:	928781DF05BABB24342DF9DB64A5AF1FD78D6C1D
SHA-256:	48F16EA1AAA9996055A44BF687428EAD96F65BFE79D22FA266AC5607BEA7E029
SHA-512:	C63BF849D639E3BC8D8782C9D946C95DE4047068A44B2884DFB588C48E294730448598AB88AC5CDD1CB09BB094F419147BD88E831204B58CCB73EA2999E20920
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.263846982067841
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJfshHHrPeUkwRe9:YvXKXq9fxnESYpW7SXxOGUUUkee9
MD5:	929A423B45D8B6A6B979D82CB0724207
SHA1:	5F5AB44E04B07F659A6123E61C64185DB75D1D90
SHA-256:	CE6D17A7520B219B61FD13514A02F102C1F4316FE4230A2405C92F21CC114CF7
SHA-512:	BE4A42ACF5AA42E724CD0AFA27722FB23DDE957EB7E93BC337CD5E8527B1D0BF7E73F99A5753DFEA42623B8F230C5D5972E2C7B6668D9C2552641ABF6B5E95CD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.2699376588011555
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPSeAfPJnEH7+FIbRI6XVW7+0YHXxRDoAvJTqgFCrPeUkwRe9:YvXKXq9fxnESYpW7SXxOGTq16Ukee9
MD5:	87A5ADD2E74710C2ED60BE09DE5E2613
SHA1:	930C4FBD5CF64DE8B3551988CA5060208A4454F6
SHA-256:	1C4BB047EF84747A92DEC45AF258A86859B6F782B74500972A1F4A11BC020A08
SHA-512:	E2B2E09D0936DFDD97ABDAE7C8F4E8EAC6B9042C6C95D707354830D005FCC57C8E07281372DC0827D07A4DA30703FF2AE560CF4231FBAB49423AEF129A21261B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"871b26fb-0669-4158-85b4-307727cbf351","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1735810267165,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.135986091273518
Encrypted:	false
SSDEEP:	24:YDa8Z93aytustVk4RNkWhpB9RJcc9ofjqij0SxInl21UlM2LSTCrLc2RvMQyLy5p:YXBVxRNZHnTg9+eUlMlaLc2xMQyuky97
MD5:	9BB46267BFBB975C01528643C512A8D9
SHA1:	27687E91975897078040403908796277F7C87591
SHA-256:	9503F919B514C2B46C818988BD05F0025B20B3B511A1139123FDEE146222288B
SHA-512:	82763E9402CC45335DAFC3D3B638E0D3DA39E09300106C7CAF3ADE0717E9CE1A7E20E9A76EC37194BA2763D8315579987F230FC24D473CA1F749F9539AE58E57
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"c8ebef4ae6c0074b484a2d32a91bddbe","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1735631961000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"cf0cc788632935265153804f10bb0929","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1735631961000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"db08e199e831f5218c55d9dd172538ba","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1735631961000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"6026c790a07e8b4f50e54b03b361b8dc","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1735631961000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"071e59f9f45dd23eb3ba1ffc5fe5edd5","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1735631961000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"ffaf1c324c6a9f0c492e14badf1ebaac","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 24, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 24
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9962031037771094
Encrypted:	false
SSDEEP:	24:TLhx/XYKQvGJF7ursQ1RZKHs/Ds/Sp+aYsnpyYPPuV5YfLEYfenYfeoZYfOkaYsF:TFl2GL7msogOVp+4pDPucLdRNKOk4F
MD5:	CD63714A9E7D9430E53F873E0B0E22F3
SHA1:	2037BB4DA707D5EB42C885BFCF08FE84E3412FA0
SHA-256:	CAF45B70D1EFA0716F4584B31EBDA6AE3E3C7D8818E9C47300A37BBFAB199AB8
SHA-512:	919728458139B1659AFF8882C580B9060E7E96B49B3C7D4C691267AF670174DC5FD108809ECAFA688FAE344B69AA072D36291912AD37882ED6A182910A4820F3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3533419887061962
Encrypted:	false
SSDEEP:	24:7+tz1RZKHs/Ds/Sp+aYsnlzJmYfLEYfenYfeoZYfOkaYsnePqLxx/XYKQvGJF7uA:7MBgOVp+4lzFLdRNKOk4cqVl2GL7msN
MD5:	49EB41B776BD6E94DA247DE2E1529DBA
SHA1:	2BDC485D8EE3F541A91C37BFE11768D63E14B9BB
SHA-256:	160875F1AEFF25B90FE2F7CEDB405BF8DBA2E7100C3216B3D1666832AEDB446C
SHA-512:	62A17018BC5CCB37E8D343279B54AFC07C32476463558155FFDA55F3DFEC28906465E69CFECCEF4390EE9F54E8D040981F1255EC8A31D1B67944B28958436711
Malicious:	false
Preview:	.... .c.....7.77......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#...z.>.....#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgxvwSrW0EtIhtTreSPGfLHjId6gYyu:6a6TZ44ADExvDyIhtTJeDgK
MD5:	043920A5DC64CB11143DE464770C9F4A
SHA1:	3A6FBF9D7641094EB5DD097CF5421AD6310DFAA6
SHA-256:	D91B0C322261A231942E0EBD2DE81333F01B0F3C0D864AF799B72557020643C9
SHA-512:	46FD7391DCD3B7F131B1D8487D81B0CC037C6E04BD6449D886742D6F3750DE75C9974B0523A8DA4A0CBED26C246ADF1415FAED7D7992178E6194349F9D01E915
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIa505c.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.513199765407527
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8fQDelVNlH:Qw946cPbiOxDlbYnuRKu/VN9
MD5:	E7D987A05AC5510FC0F004123033C9BC
SHA1:	B2ADB71D1745D5B8DFCC9D7CF9AA1F90CF568D39
SHA-256:	7E3A9870605F370EA8926899FC96A1B4739C476CAD729E93E2A83FE14B88322F
SHA-512:	FB36A08381C3A773B19626CB26C5FC07495BF53E302B00E5938C2CD96ABB3CC8D87C220F16023EA27F893C2A2C820743847C1889280425FA9D43464977307CD6
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.1./.1.2./.2.0.2.4. . .0.2.:.5.9.:.2.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91feat1b_t8okdk_3ps.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Zip data (MIME type "application/vnd.adobe.air-ucf-package+zip"?)
Category:	dropped
Size (bytes):	144514
Entropy (8bit):	7.992637131260696
Encrypted:	true
SSDEEP:	3072:OvjeSq37BcXWpJ/PwBI4lsRMoZVaJctHtTx8EOyhnL:Cjc7BcePUsSSt38snL
MD5:	BA1716D4FB435DA6C47CE77E3667E6A8
SHA1:	AF6ADF9F1A53033CF28506F33975A3D1BC0C4ECF
SHA-256:	AD771EC5D244D9815762116D5C77BA53A1D06CEBA42D348160790DBBE4B6769D
SHA-512:	65249DB52791037E9CC0EEF2D07A9CB1895410623345F2646D7EA4ED7001F7273C799275C3342081097AF2D231282D6676F4DBC4D33C5E902993BE89B4A678FD
Malicious:	false
Preview:	PK.........D.Y...>)...).......mimetypeapplication/vnd.adobe.air-ucf-package+zipPK.........D.Y.+.`............message.xml.]is.8...[.....Oq.'...S...g.X+;....%X."U$.....}.P.%....8.tl. ...../..}......A.......,...a...r.....=..i{......0H..v.g.c0.3~....G.b....,.BvJ.'./.`xJ]..O./.!K...XG?.$.,=.Z...q.f~...,..:b.Pl..f..\|....,.A.....Z..a<.C._..../G\|....q.....~.?...G.............y+.. ...s.,.2...^uon..:....~....C....i.>.<hy..x..?....F.w..4e.\|.'...#?..a......i...W.".+...'.......,..6..... ..}.........llj.>.3v.."..CdA.".....v...4H..C]>........4..$.O........9._..C{(....A~.k...f.x8.<... l!..}...ol.q.......2.s.Y..&:....>...l.S..w.t^D.C....]0......L...z[`J<.....L.1t-.Z.n..7.)...aj;.0.r\|.._.V......JWT.>.p.?s....boN.....X.jkN.9..3jN.9..t...o..c.nX4......0.D.....Cv .....!k..........d.1B....=3.Bq.E.bo.....6..r..6@.b...T......Ig...(..(K].:...#..k..q2G."o.Tz...qJ.......;?\|~..1...J...RA...'..*C...T...dNMZ.3.z-..LCI..I..-.,.Y.J.....m.KY}.Lw......G........-.(E....b..^..}..

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-31 02-59-16-481.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.364256976093019
Encrypted:	false
SSDEEP:	384:o6WPGWUoygXfjhteAoZ81VHV4scv7AOR5LNmbnZxBMdZutMM75J252j6hLWYeyKP:wd5Fb
MD5:	2E7FE0287EB09FE06393BDE0A05EFB23
SHA1:	055E87B57781C81748786256DEFF5728CC357B2D
SHA-256:	3BB51FD062B4D39DC9095FEF4EFD4AEE5C578EEFEA5EFAC33646CEEA9ADEB0F6
SHA-512:	452789E6BA1DA235A9321415076D63B572F45FE3FF42544D029E1A86CF22F8F0FA2FEC46C38848833BD20110128E2B587279D6FD18D0C266E0CF28BA8C490178
Malicious:	false
Preview:	SessionID=f02ebbf6-518b-4707-95fb-0a23991316af.1735631956494 Timestamp=2024-12-31T02:59:16:495-0500 ThreadID=5008 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=f02ebbf6-518b-4707-95fb-0a23991316af.1735631956494 Timestamp=2024-12-31T02:59:16:495-0500 ThreadID=5008 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=f02ebbf6-518b-4707-95fb-0a23991316af.1735631956494 Timestamp=2024-12-31T02:59:16:495-0500 ThreadID=5008 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=f02ebbf6-518b-4707-95fb-0a23991316af.1735631956494 Timestamp=2024-12-31T02:59:16:495-0500 ThreadID=5008 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=f02ebbf6-518b-4707-95fb-0a23991316af.1735631956494 Timestamp=2024-12-31T02:59:16:495-0500 ThreadID=5008 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.404947304598053
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbX:7
MD5:	1F2FE2C55DF59303FB64CEE6FBE6FB48
SHA1:	2CB2286A5DABF6F5E683AA5A77E43D4A01CD4946
SHA-256:	3A8BACF856FE9D4DBC9555E075FCF5D77F63727C4C2C26A7A6A3C66F2F7445C8
SHA-512:	255ED0C7A6433A419CDCB6605610FDD06A4354E11715CF7244EF0F146E48E3080F741F5557357A12A2352FD0AFB60AAF9429CE1031E062575A2D6E63DFCD9F99
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1dd94ff2-279e-43b3-a949-29097f420ce7.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\3f76c911-fce4-4233-82e4-72b5aa14f583.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\4e08df3a-36d3-4bb6-a059-0aae64c8e834.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\dbc78972-5dd4-4fef-af1d-a4abb4f848e6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	98682
Entropy (8bit):	6.445287254681573
Encrypted:	false
SSDEEP:	1536:0tlkIi4M2MXZcFVZNt0zfIagnbSLDII+D61S8:03kf4MlpyZN+gbE8pD61L
MD5:	7113425405A05E110DC458BBF93F608A
SHA1:	88123C4AD0C5E5AFB0A3D4E9A43EAFDF7C4EBAAF
SHA-256:	7E5C3C23B9F730818CDC71D7A2EA01FE57F03C03118D477ADB18FA6A8DBDBC46
SHA-512:	6AFE246B0B5CD5DE74F60A19E31822F83CCA274A61545546BDA90DDE97C84C163CB1D4277D0F4E0F70F1E4DE4B76D1DEB22992E44030E28EB9E56A7EA2AB5E8D
Malicious:	false
Preview:	0...u0...\...0....H........0i1.0...U....US1.0...U....DigiCert, Inc.1A0?..U...8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1..240807121815Z..240814121815Z0..~.0!.......0.E....[0...210531000001Z0!...7g...(..^`.x.l...210531000001Z0!...\./M.8..>.f.....210531000001Z0!...B.Sh...f...s.0..210531000001Z0!..../n...h..7....>..210601000001Z0!....0..>5..aN.u{D..210601000001Z0!...-...qpWa.!n.....210601000001Z0!..."f...\..N.....X..210601000001Z0!...in.H...[u...]....210602000001Z0!......`......._.]...210602000001Z0!...{..e..i......=..210602000001Z0!......S....fNj'.wy..210602000001Z0!......C.lm..B.*.....210602000001Z0!... .}...\|.,dk...+..210603000001Z0!...U.K....o.".Rj..210603000001Z0!.....A...K.ZpK..'h..210603000001Z0!.....&}{ ......l..210603000001Z0!...:.m...I.p.;..v..210604000001Z0!...1"uw3..Gou.qg.q..210607000001Z0!...1.o}...c/...-R}..210608000001Z0!................210608000001Z0!...[.N.d............210609000001Z0!......x..i........210610000001Z0!...(... (..#.^.f...210

C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	737
Entropy (8bit):	7.501268097735403
Encrypted:	false
SSDEEP:	12:yeRLaWQMnFQlRKfdFfBy6T6FYoX0fH8PkwWWOxPLA3jw/fQMlNdP8LOUa:y2GWnSKfdtw46FYfP1icPLHCfa
MD5:	5274D23C3AB7C3D5A4F3F86D4249A545
SHA1:	8A3778F5083169B281B610F2036E79AEA3020192
SHA-256:	8FEF0EEC745051335467846C2F3059BD450048E744D83EBE6B7FD7179A5E5F97
SHA-512:	FC3E30422A35A78C93EDB2DAD6FAF02058FC37099E9CACD639A079DF70E650FEC635CF7592FFB069F23E90B47B0D7CF3518166848494A35AF1E10B50BB177574
Malicious:	false
Preview:	0...0.....0....H........0b1.0...U....US1.0...U....DigiCert Inc1.0...U....www.digicert.com1!0...U....DigiCert Trusted Root G4..240806194648Z..240827194648Z.00.0...U.#..0.......q]dL..g?....O0...U........0....H.............vz..@.Nm...6d...t;.Jx?....6...p...#.[.......o.q...;.........?......o...^p0R.......~....)....i.n;A.n.z..O~..%=..s..W.4.+........G...*..=....xen$_i"s..\...L..4../<.4...G.....L...c..k@.J.rC.4h.c.ck./.Q-r53..a#.8#......0.n......a.-'..S. .>..xAKo.k.....;.D>....sb '<..-o.KE...X!i.].c.....o~.q........D...`....N... W:{.3......a@....i....#./..eQ...e.......W.s..V:.38..U.H{.>.....#....?{.....bYAk'b0on..Gb..-..).."q2GO<S.C...FsY!D....x..]4.....X....Y...Rj.....I.96$.4ZQ&..$,hC..H.%..hE....

C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\addressbook.acrodata

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ISO-8859 text, with very long lines (3486), with CRLF, CR line terminators
Category:	dropped
Size (bytes):	14456
Entropy (8bit):	4.2098179599164975
Encrypted:	false
SSDEEP:	192:gcPqYV/saFlwwR+kMqe8TlZMX1sgUVa3ddMVsuNeMcGdSD9obOUAVlcMudM/Y14e:g7Q/X4kMb0lZ6mgtdHOelGdWaolvsTZ
MD5:	32FCA302C8B872738373D7CCB1E75FD4
SHA1:	DA85FAF24ED0ECFD5D69CCFD6286D8B77D7EB4F1
SHA-256:	CD0DD26304B88C20801FE80B33C49C009E2E5D4411B5D7F83252E1D90CD461C6
SHA-512:	57F8CC85FAFB15455074431216E47433E50DF5DE74ED74C395B7FF2C433DB7CE06F0A1C1FE1EFDC17229DBC33325D559789F43901556DD1A12963B94F01D5A1F
Malicious:	false
Preview:	%PPKLITE-2.1.%......1 0 obj.<</PPK<</AddressBook<</Entries[2 0 R 3 0 R 4 0 R 5 0 R 6 0 R]/NextID 1006/Type/AddressBook>>/Type/PPK/User<</Type/User>>/V 65537>>/Type/Catalog>>.endobj.2 0 obj.<</ABEType 1/Cert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

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 07:00:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982746953496805
Encrypted:	false
SSDEEP:	48:8ZdXTPLOHJidAKZdA19ehwiZUklqehr1ny+3:8Df8S5y
MD5:	E544B41A8AFB75B1B412F2F7B505BBFA
SHA1:	C3F72BA845A3EE41D611D983E1542D7A81C98B5B
SHA-256:	2C47BA77A48D950407F355BAA4514F0A52D31CF8B28FFBD698DEE11FEBD5B9F9
SHA-512:	25D3597F56CDEBE4FA7AB518A1FFD8ED77EFA296627D756E99ECEA39531D10073B4D4F599C46A3F1C3EE0BEA8D6688C08BAE460B1579B0EC6F9E00809279149A
Malicious:	false
Preview:	L..................F.@.. ...$+.,....;..Z[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 07:00:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99584916583055
Encrypted:	false
SSDEEP:	48:8KdXTPLOHJidAKZdA1weh/iZUkAQkqehC1ny+2:82fO9Ql5y
MD5:	0F35A99D4A89695628EFA6AFA65C3343
SHA1:	9DB8948B3765F31E9A654AFD26542ABCFF2AAAAC
SHA-256:	7552153060B8775B4FFAED06FDBC69DCF050F38B915E740D05B23539DB7C4BD4
SHA-512:	8FDBF23ACB11AACC67A0112423D05CC32BCBD24B09A9B45E3B52FDA0D9517A888DA5BD6C067538EC199EA0E7ADC89CC926956803DCA65E9D5C1C72BBF3722028
Malicious:	false
Preview:	L..................F.@.. ...$+.,....F.{.Z[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00740589441258
Encrypted:	false
SSDEEP:	48:8xadXTPLsHJidAKZdA14tseh7sFiZUkmgqeh7sc1ny+BX:8xmfwnW5y
MD5:	057CBAC03D75DDB61B57A43817F1A403
SHA1:	69623D764D9171BA7553F6393FB9205B4B19310E
SHA-256:	547C97C8D8B3804A5A57BC00994D776654EEE002CC82D85DEF045DAB085E18BF
SHA-512:	3E4AFD27D8FD85B0A23728F2A6D92F5EC90B0BCFE717FAD5240069BAF13BC4DCA3EF4652B43C5800E3FCD74AA02E24AD4C88A1213F54D8106C325693657E879A
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 07:00:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9960662826406304
Encrypted:	false
SSDEEP:	48:8YdXTPLOHJidAKZdA1vehDiZUkwqeh+1ny+R:8ofVE5y
MD5:	6F6EEDC7B57B4A9788984B3767DB7190
SHA1:	95A2ABC975FF74BDF6516E9E76619657A03C705C
SHA-256:	0D8D6124055873D231F4127AA5B903F702D3FD26F8C11A273807DF0A5E4E453D
SHA-512:	1AD0ED36DD46D985AB4190C53E414578DC8B2A4CD03862B1E9111A2F9CC1B23AB906C029DD4C3B77DD5F514E4EF05DE109510FDF2B40E41467EB65725606FC53
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....^u.Z[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 07:00:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9835272967100015
Encrypted:	false
SSDEEP:	48:8RdXTPLOHJidAKZdA1hehBiZUk1W1qehw1ny+C:8LfF9Q5y
MD5:	9BA41AB7859F0AF9E2187D375BEF9A07
SHA1:	2B66FDA120D1B6B4C10F44E7479B927B416F9D44
SHA-256:	41D9859104220F1E48655459449BAB9FC06BF4702BC8847263BF8C98615F4B05
SHA-512:	BB53203A6B5ADA3DC074AB24AF978FC8F27A70263B0D4883EBEDFEE682CF023BD3304C76D0AE7BD2D8901085EF07D51B7A314E74ABDD5D1B5A13FE2E26EDB38C
Malicious:	false
Preview:	L..................F.@.. ...$+.,....l..Z[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 07:00:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.991474561531593
Encrypted:	false
SSDEEP:	48:8jdXTPLOHJidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbW1ny+yT+:8RfZT/TbxWOvTbW5y7T
MD5:	CD239D9858ADBFB14D93A5407848974C
SHA1:	BDB16324010CAFA6A2EFFDCE0A44C1DCEE804F69
SHA-256:	2FC4AC85245AED08BDB94A8FA6ED25B3C54C15790859B43B517179032D28141C
SHA-512:	55D397893D8B9270636AB55914915BB80B284382E333B4764AAA5CB2EC3CB8B0C7C7B90108FC604FF5D63C039C1A0358CA29A493B03AF3EE3270ADCDE0A8D87D
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Fl.Z[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yg?....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.@....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.@....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.@..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............EZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
URL:	https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
URL:	https://secure.encryptedconnection.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	dropped
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5649
Entropy (8bit):	5.250605215538956
Encrypted:	false
SSDEEP:	96:KGJW/OplIczjJxwvcS2dOCERJ7EnXKEh9sk4QfkOtjt:T1Ickv9RJ7SKesk4Qfk+
MD5:	B13B4F098D80AC49DCC6BED4E459D560
SHA1:	81FFB3DD594A82F9453D1C45DA812DFC008CAA65
SHA-256:	5FC2013E8D4F5A97667A0A5BFEF9A2E148363D89A46BE49F14CB2C60B1461CA9
SHA-512:	4FEAEA5336B3E1B7B1D26C5D576C655208955D4C7657B967D11A9D58A3086EB0D087DE53606E0AC4E0F3AEFD9993E616BD7B9B343AE23DEB20477BD7EFD75ECC
Malicious:	false
URL:	https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Preview:	:root {..--clr-neutral-100: #ffffff;..--clr-neutral-200: #f5f5f5;..--clr-neutral-300: #d5d5d5;..--clr-neutral-400: #ababab;..--clr-neutral-500: #707070;..--clr-neutral-600: #2c2c2c;.../* Padding /..--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);..--padding-sm: clamp(1rem, 3%, 1.5rem);..--padding-md: clamp(1.5rem, 6%, 3rem);..--padding-lg: clamp(3rem, 12%, 6rem);.../ Margin /..--block-flow-xs: min(1rem, 2vh);..--block-flow-sm: min(2rem, 4vh);..--block-flow-md: min(4rem, 8vh);..--block-flow-lg: min(8rem, 16vh);.../ Font Sizes /.../ @link https://utopia.fyi/type/calculator?c=320,18,1.2,1240,20,1.25,5,2,&s=0.75\|0.5\|0.25,1.5\|2\|3\|4\|6,s-l&g=s,l,xl,12 /.../ Step -1: 15px . 12.003px /..--step--1: clamp(0.7502rem, 1.0027rem + -0.3258vi, 0.9375rem);../ Step 0: 18px . 16px /..--step-0: clamp(1rem, 1.1685rem + -0.2174vi, 1.125rem);../ Step 1: 21.6px . 21.328px /..--step-1: clamp(1.333rem, 1.3559rem + -0.0296vi, 1.35rem);../ Step 2: 25.92px . 28.4302px */..--step-2: clamp(1.62rem,

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (382)
Category:	downloaded
Size (bytes):	75074
Entropy (8bit):	6.138406589178574
Encrypted:	false
SSDEEP:	1536:crpvhGe1FSmB10lpn/n3Bzx0rEO3pQpE03ejrfodzWUc:mxhGe1FSmB10lpn/nRzx0AO3pQHejrfZ
MD5:	D8798AAE777F6C93C53155F081A8C8EA
SHA1:	81B8A61366B8F08C3D3A8A2E1CFE499CEC5521B8
SHA-256:	69FEB31D20F8340079383EB02BD89606E55D53476E2C1A9D70646E3A19FE4A25
SHA-512:	495DAB5208A42596D39852997A20433395648AE68D384EE13AB648D5EBF8C936B2E903F19CA8918E6E70D8DEEF1D036AC6962EA5C58B696A5D7F07146E274239
Malicious:	false
URL:	https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />.. </head>. .......<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">... Stylesheet for default styles -->...<link rel="stylesheet" href="https://helpimg

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
URL:	https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	1762
Entropy (8bit):	4.935533253428407
Encrypted:	false
SSDEEP:	48:0EY3OZgl2mrk+zWrDNl613A3h7tm0FiC7WA8u:zY3OZglVavT61wR7TFiC7su
MD5:	D5E3158E82340391E333DE30349BB337
SHA1:	DB24B9953F3A9B48E538CE37F48757A3AE60466E
SHA-256:	54225BCAE249AB0F55827A5C3A50A5AEFD58BBC5501E5ECDCFF9E9C2AC4972CF
SHA-512:	8138232E4702EBDA8D4FF2D0FB207CC2051A244CC55435F6C76F2ADEAD5CF333E92BD414A1E1D8757308E52D8C57F0133F8BC2E4E5F19C9007DC5C86AA6004D1
Malicious:	false
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.css" rel="stylesheet"/><link href="/ui/fonts/notosans.css" rel="stylesheet"/><title>KnowBe4</title><style media="screen">.loader {. margin: 40vh auto;. display: block;. position: relative;. width: 64px;. height: 64px;. }.. .loader div {. box-sizing: border-box;. display: block;. position: absolute;. width: 51px;. height: 51px;. margin: 3px;. border: 3px solid #bdbdbf;. border-radius: 50%;. animation: loader 1.2s cubic-bezier(0.5, 0, 0.5, 1) infinite;. border-color: #bdbdbf transparent transparent;. }.. .loader div:nth-child(1) {. animation-delay: -0.45s;. }.. .loader div:nth-child(2) {. ani

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
URL:	https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (435)
Category:	downloaded
Size (bytes):	489
Entropy (8bit):	5.82517286756573
Encrypted:	false
SSDEEP:	12:3R+xnunlNr0WUmIVbPT/F8TUn0Rm8DtLqVYWOw/dRVwIizj4AEdeIQL:3EulIhT/G0t8DtLqaWOwXVwHvNEkj
MD5:	9FC388081E0926D1C66E5AD6424A8C05
SHA1:	399B1F59F3E9B63F37D2C9FC58F666C288B6E0BB
SHA-256:	D598C873218286BF14429E9BC135A42714CB95A6A1A90A2639ECFC6000FFE7E4
SHA-512:	19FF8571B3EE53D7921FDF9FB4FB50B7B399627887C8F5444BBBA678D5D2C964A5504D77ED1015CFBB466E748179B92F4B77AA723B524D527FD413A35CB22087
Malicious:	false
URL:	https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850
Preview:	<html>. <head>. <script>window.location.href = 'https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
URL:	https://secure.encryptedconnection.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Static File Info

General

File type:	PDF document, version 1.6, 0 pages
Entropy (8bit):	7.173194758377682
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	DIS_37745672.pdf
File size:	109'595 bytes
MD5:	22580ddeddfac4774357117d59d4fc12
SHA1:	583cb9a33f0a9329f543140335216fc42c9f75a2
SHA256:	f32765486369c771c3a03e6a71db3e451110dce12f2f2c626e0884024ff7d3b3
SHA512:	36d57597ca24c2f8d12134ed0a6b0d526fad4d0551178c369db62cbeab969670d48b8f5462456590ab2ab7e8bc6382346228d5e198c9dca6d3841b577e386cab
SSDEEP:	1536:9yZo6SH7RbBcq/hBOitOOdG538OZU+KaSxtLRU+9S/BqK365UBmcuY4t:4ZobBd/zLdy38AU+1SBU+wT3KUBmf
TLSH:	58B35915EC06FCC4B045CBA172B9795D461D3003649B1DBBF69C8BCADFC3588AE8A16B
File Content Preview:	%PDF-1.6.%.....%QDF-1.0..%% Original object ID: 14 0.1 0 obj.<<. /AcroForm 3 0 R. /Metadata 4 0 R. /OpenAction 6 0 R. /Outlines 7 0 R. /Pages 8 0 R. /Type /Catalog.>>.endobj..%% Original object ID: 12 0.2 0 obj.<<. /CreationDate (D:20180612094110-0

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.6
Total Entropy:	7.173195
Total Bytes:	109595
Stream Entropy:	7.767135
Stream Bytes:	82416
Entropy outside Streams:	3.782091
Bytes outside Streams:	27179
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	54
endobj	54
stream	14
endstream	14
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	6
/JS	1
/JavaScript	1
/AA	0
/OpenAction	1
/AcroForm	1
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
21	c6c6874b6b62f0e2	7d0ee0aed29d30b2155af6893379f1f7
23	4a4d08a957113862	127ed9be986e6e9bf0e5a75b9ea98c45
25	494519d4cc49554d	90f15dad1a7916b8c4ddf3784dc5ba38

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 31, 2024 08:59:31.826092958 CET	49753	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:31.830941916 CET	53	49753	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:31.831043959 CET	49753	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:31.835926056 CET	53	49753	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:32.303333998 CET	49753	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:32.308392048 CET	53	49753	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:32.308532000 CET	49753	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:42.186362982 CET	61516	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:42.192401886 CET	53	61516	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:42.192482948 CET	61516	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:42.192523956 CET	61516	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:42.199161053 CET	53	61516	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:42.656230927 CET	53	61516	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:42.656508923 CET	61516	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:42.661453009 CET	53	61516	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:42.661529064 CET	61516	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:40.502747059 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:40.502790928 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:40.502860069 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:40.503870964 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:40.503890991 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.428374052 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.428724051 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.428738117 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.430216074 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.430269957 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.430279016 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.430310965 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.434097052 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.434216976 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.435467005 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.435473919 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.482381105 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.851016998 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.851119041 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:41.851196051 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.985930920 CET	61726	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:41.985968113 CET	443	61726	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.067101955 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.067153931 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.067233086 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.067837954 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.067893982 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.067955971 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.068356037 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.068372011 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.068821907 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.068835020 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.945369005 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.945615053 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.945632935 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.946688890 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.946763039 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.947133064 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.947966099 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.948033094 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.948179007 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.948201895 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.948406935 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.948417902 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.949248075 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.949316978 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.950442076 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:42.950505972 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:42.988095999 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:43.003212929 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:43.003237963 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:43.049566031 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:44.492733955 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:44.492814064 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:44.492888927 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:44.493350983 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:44.493366957 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.135251045 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.135696888 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:45.135766029 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.136928082 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.137007952 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:45.138693094 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:45.138797998 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.186810970 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:45.186836958 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:45.234358072 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:45.390424967 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390456915 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390465975 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390500069 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390520096 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390525103 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.390543938 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.390563965 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.390582085 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.397562027 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.397584915 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.397622108 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.397639990 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.397671938 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.397686958 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.416522026 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.416590929 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.416666985 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.416827917 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.417669058 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.417685032 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.438420057 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.438462019 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.438528061 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.438584089 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.438626051 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.438679934 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.438828945 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.438838005 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.438884020 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.439362049 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.439374924 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.439553022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.439568043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.439699888 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:45.439712048 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:45.453903913 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:45.453919888 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:45.453980923 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:45.454229116 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:45.454240084 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:45.459331989 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.476777077 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.476809025 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.476855993 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.476874113 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.476905107 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.476926088 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.483066082 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.483087063 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.483135939 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.483144999 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.483177900 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.484092951 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.484132051 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.484157085 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.484162092 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.484194040 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.484201908 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.484244108 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.485189915 CET	61729	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.485208035 CET	443	61729	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.724256992 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.724284887 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.724332094 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.724364042 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.724381924 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:45.724733114 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.726376057 CET	61730	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:45.726394892 CET	443	61730	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.031347990 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.031615973 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.031641960 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.033126116 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.033273935 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.034374952 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.034375906 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.034461021 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.034694910 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.034770966 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.034876108 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.034888029 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.035125971 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.035518885 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.035592079 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.035676003 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.078464031 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.078473091 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.078499079 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.157903910 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.158133030 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.158220053 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.158219099 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.158310890 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.160720110 CET	61739	443	192.168.2.5	16.182.32.57
Dec 31, 2024 09:00:46.160742044 CET	443	61739	16.182.32.57	192.168.2.5
Dec 31, 2024 09:00:46.176765919 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.176965952 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.176976919 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.176980019 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.177197933 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.177215099 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.177999020 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.178088903 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.178241014 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.178332090 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.179322004 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.179328918 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.179384947 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.179389954 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.179605007 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.179800034 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.179809093 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.185952902 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.186142921 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.186151981 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.187170029 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.187330961 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.187786102 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.187844992 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.188018084 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.227330923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.233995914 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.234003067 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.234026909 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.234026909 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.234049082 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.281246901 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.281249046 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.411612034 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411636114 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411645889 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411654949 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411691904 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411741972 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.411814928 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.411851883 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.411936045 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.413727999 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.413747072 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.413871050 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.413887978 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.466289043 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.526878119 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.526891947 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.526926994 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.526958942 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.526968956 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.526998043 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.527043104 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.527065039 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.527930021 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.527946949 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.528047085 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.528047085 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.528065920 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.528158903 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.528898954 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.528914928 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.529088974 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.529100895 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.529828072 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.530117035 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.530133009 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.530221939 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.530234098 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.530356884 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.613101959 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.613123894 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.613426924 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.613449097 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.613732100 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.613981962 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.613996029 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.614097118 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.614097118 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.614114046 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.614219904 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.614729881 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.614743948 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.614872932 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.614892960 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.614958048 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.615626097 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.615641117 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.615753889 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.615767002 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.615824938 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.616528034 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.616544008 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.616636038 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.616636038 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.616650105 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.616705894 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.653291941 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.653312922 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.653561115 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.653585911 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.653980017 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.700690031 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.700716019 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.700817108 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.700818062 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.700901031 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.701327085 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.701385975 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.701404095 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.701491117 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.701491117 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.701504946 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.701672077 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.702074051 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.702092886 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.702435970 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.702449083 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.702662945 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.702783108 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.702799082 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.702902079 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.702902079 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.702915907 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.703022957 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.706233025 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.706255913 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.706335068 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.706335068 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.706347942 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.706412077 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.706897020 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.706913948 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707298994 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.707310915 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707521915 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.707557917 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707575083 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707648039 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.707648039 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.707675934 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707783937 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.707927942 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.707942963 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.708064079 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.708075047 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.708127975 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.786582947 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.786617041 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.786700964 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.786736012 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.787275076 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.787292957 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.787328005 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.787342072 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.787375927 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.787545919 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.788463116 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.788482904 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.788528919 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.788562059 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.788562059 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.788575888 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.788599014 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.788624048 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.788655043 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.883001089 CET	61735	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:46.883044004 CET	443	61735	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:46.925314903 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925328970 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925365925 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925369978 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.925376892 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925395012 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925405979 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.925409079 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:46.925422907 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.925441027 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:46.970127106 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.007858992 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007869005 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007910013 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007920027 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007930994 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007941008 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.007957935 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.007988930 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.008014917 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.010966063 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.010973930 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.010999918 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.011009932 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.011025906 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.011034012 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.011060953 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.011080027 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.015499115 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.015515089 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.015564919 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.015571117 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.015613079 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.088745117 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.088824034 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.089545012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.089617968 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.095021963 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.095038891 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.095088005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.095102072 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102539062 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102557898 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102590084 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102601051 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.102606058 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102632046 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.102669001 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.102746010 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.103341103 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.103358030 CET	443	61736	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.103365898 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.103404999 CET	61736	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.131160021 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131180048 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131216049 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131231070 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131242037 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.131242990 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131258965 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131283998 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.131321907 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.131340981 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.131393909 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.137352943 CET	61738	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.137362003 CET	443	61738	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.138394117 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.152479887 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.152534962 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.152767897 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.152971029 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.152987003 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.177067995 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.177078009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.177109003 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.177134991 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.177148104 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.177158117 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.177181005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.177200079 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.178406954 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.178423882 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.178471088 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.178479910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.178510904 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.193614960 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.193655014 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.193677902 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.193686008 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.193717003 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.207595110 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.207628965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.207653999 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.207663059 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.207700968 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.249252081 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.249263048 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.265727043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.265750885 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.265777111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.265808105 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.265820980 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.265911102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.267036915 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.267050028 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.267083883 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.267088890 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.267096996 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.267127037 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.279273033 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.279309988 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.279334068 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.279341936 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.279376030 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.290370941 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290406942 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.290461063 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290574074 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290617943 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.290754080 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290819883 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290833950 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.290968895 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.290982008 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.291270971 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.291306019 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.291337967 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.291349888 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.291380882 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.301723003 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.301753044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.301772118 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.301781893 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.301806927 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.313086987 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.313119888 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.313150883 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.313155890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.313169003 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.313205957 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.313220024 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.322720051 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.322738886 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.322773933 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.322777033 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.322786093 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.322824955 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.353693962 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.353713036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.353765965 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.353775978 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.354661942 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.354693890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.354722023 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.354723930 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.354736090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.354759932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.354779005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.359345913 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.359360933 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.359389067 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.359424114 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.359432936 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.359442949 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.369826078 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.369856119 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.369896889 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.369906902 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.369939089 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.379915953 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.379931927 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.379973888 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.379982948 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.380038023 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.385065079 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.396364927 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.396378994 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.396424055 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.396435022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.396464109 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.404844999 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.404871941 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.404906988 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.404932022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.404942036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.404982090 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.414372921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.414386988 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.414465904 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.414474010 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.443361998 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.443391085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.443423986 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.443432093 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.443465948 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.444516897 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.444530964 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.444564104 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.444585085 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.444591999 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.444638968 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.447974920 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.447994947 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.448035955 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.448044062 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.448080063 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.448086977 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.461489916 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:47.461540937 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:47.461604118 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:47.461837053 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:47.461854935 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:47.462480068 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.462498903 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.462539911 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.462547064 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.462579012 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.462589979 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.473603964 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.473622084 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.473675013 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.473684072 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.473740101 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.478663921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.478727102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.488279104 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.488295078 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.488331079 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.488337994 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.488346100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.488383055 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.498044968 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.498061895 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.498122931 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.498130083 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.498378992 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.531373978 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.531390905 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.531430960 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.531439066 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.531480074 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.531487942 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.532090902 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532107115 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532174110 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.532181025 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532414913 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.532794952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532809973 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532854080 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.532861948 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.532910109 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.540510893 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.540549040 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.540576935 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.540582895 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.540613890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.540630102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.540636063 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.540653944 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.540680885 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.556698084 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.556715012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.556768894 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.556777954 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.556823015 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.567169905 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.567253113 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.567262888 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.573246002 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.573278904 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.573307991 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.573327065 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.573520899 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.581965923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.581981897 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.582025051 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.582032919 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.582065105 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.582079887 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.591327906 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.591346979 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.591414928 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.591424942 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.591541052 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.609843969 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.610053062 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.610080957 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.611181021 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.611254930 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.612131119 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.612214088 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.612343073 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.620065928 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620085001 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620124102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.620132923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620160103 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.620181084 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.620492935 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620521069 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620547056 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.620553017 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.620676994 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.621181965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.621207952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.621246099 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.621252060 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.621287107 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.621304989 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.624802113 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.624834061 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.624864101 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.624871969 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.624919891 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.639516115 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.639533043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.639571905 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.639580011 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.639611006 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.639631033 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.650509119 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.650537014 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.650566101 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.650577068 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.650648117 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.655913115 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.655930996 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.661782980 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.661802053 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.661858082 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.661865950 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.661901951 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.665283918 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.665318012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.665349007 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.665355921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.665395021 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.674981117 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.675013065 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.675064087 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.675074100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.675084114 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.675106049 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.701807976 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.709103107 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709122896 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709165096 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.709172964 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709208012 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.709224939 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.709657907 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709673882 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709705114 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709721088 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.709729910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.709745884 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.710180044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.710200071 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.710230112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.710252047 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.710259914 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.710285902 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.710310936 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.713757038 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.713819981 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.713828087 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.718035936 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.718067884 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.718099117 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.718106985 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.718152046 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.733704090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.733730078 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.733788013 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.733795881 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.733828068 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.733848095 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.739877939 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.739994049 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.740065098 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.741056919 CET	61740	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.741075993 CET	443	61740	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.744112015 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.744143009 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.744196892 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.744218111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.744245052 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.744285107 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.744292021 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.744343042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.744811058 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:47.744823933 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:47.753701925 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.753721952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.753791094 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.753808975 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.756686926 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.763386965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.763422012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.763452053 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.763463020 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.763493061 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.796972990 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.796993017 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797038078 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.797048092 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797086954 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.797569990 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797588110 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797621965 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.797626019 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797641993 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797653913 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.797682047 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.797971010 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.797986984 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.798018932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.798026085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.798051119 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.806066036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.806093931 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.806129932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.806138992 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.806191921 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.822443962 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.822463989 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.822493076 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.822510958 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.822530985 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.832755089 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.832787991 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.832837105 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.832845926 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.832869053 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.838737965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.838788986 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.838797092 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.838917017 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.847412109 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.847431898 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.847476959 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.847484112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.847522020 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.847542048 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.856957912 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.856981039 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.857043028 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.857053041 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.857093096 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.886223078 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886262894 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886291027 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.886306047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886349916 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.886683941 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886702061 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886744976 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.886753082 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.886780024 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.886796951 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.887619972 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.887645960 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.887715101 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.887722015 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.887795925 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.893063068 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.893100023 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.893121958 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.893129110 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.893167019 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.916126966 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.916153908 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.916203976 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.916214943 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.916265965 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.931833029 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.931849957 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.931902885 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.931911945 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.931937933 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.931962013 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.935405016 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.935779095 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.935795069 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.936873913 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.936925888 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.937611103 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.937689066 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.937756062 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.945103884 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.945152044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.945197105 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.945204973 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.945360899 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.953933954 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.953953981 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.953991890 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.953999043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.954022884 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.954049110 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.963098049 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.963131905 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.963165045 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.963165045 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.963179111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.963215113 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.963228941 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.979392052 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.979953051 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:47.979964972 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:47.993638039 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.993655920 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.993706942 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.993716955 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.993762016 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.994209051 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994227886 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994272947 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.994280100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994298935 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.994318962 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.994571924 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994607925 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994636059 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:47.994642019 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:47.994741917 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.006803036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.006819010 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.006871939 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.006884098 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.007018089 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.022429943 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.022494078 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.022501945 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.031388044 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.037992954 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.038008928 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.038110018 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.038121939 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.046045065 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.046261072 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.046278000 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.047661066 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.047735929 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.048029900 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.048079014 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.048178911 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.048183918 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.051203966 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.051232100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.051244020 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.051265955 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.051280975 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.051294088 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.060178995 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.060199022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.060230970 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.060239077 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.060276031 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.064536095 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.064594030 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.064600945 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.064635992 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.093489885 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.101104975 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101124048 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101170063 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101185083 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.101197958 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101224899 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.101602077 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101627111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101655006 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101667881 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.101675034 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.101696014 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.102499008 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.102514982 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.102566004 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.102572918 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.105797052 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.105828047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.105866909 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.105876923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.105915070 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.128066063 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.128247023 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.128278017 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.128293991 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.128321886 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.128330946 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.128356934 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.128360033 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.129478931 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.129556894 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.129858971 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.129933119 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.129997015 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.136073112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.136094093 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.136132956 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.136145115 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.136219025 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.147284985 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.147315979 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.147337914 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.147346020 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.147370100 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.148646116 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.148660898 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.148698092 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.148705959 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.148731947 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.153105021 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.153126001 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.153167963 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.153176069 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.153203964 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.153218031 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.157702923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.171627045 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.171650887 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.189779043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.189805984 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.189838886 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.189847946 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.189882040 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.190551996 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.190570116 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.190640926 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.190650940 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.194099903 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.194118023 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.194169998 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.194179058 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.201327085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.201340914 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.201397896 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.201406956 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.201446056 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.218306065 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.223548889 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.223567963 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.223606110 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.223615885 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.223639965 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.223659039 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.229983091 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.229999065 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.230036974 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.230045080 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.230077982 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.230093956 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.236490011 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.236505985 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.236552954 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.236561060 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.236588955 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.236603022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.241105080 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.241318941 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.241328001 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.241561890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.241580963 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.241626024 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.241631985 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.241652966 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.241661072 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.241682053 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.242100954 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.242162943 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.242238998 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.244774103 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244788885 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244811058 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244818926 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244831085 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244842052 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.244853973 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.244878054 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.278268099 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278286934 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278331041 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.278340101 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278369904 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.278383017 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.278701067 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278717995 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278768063 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.278774977 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.278798103 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.278812885 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.279417992 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.279433966 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.279495001 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.279501915 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.279546022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.283344030 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.289793968 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.289810896 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.289854050 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.289860964 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.289887905 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.289907932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.295480967 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.295497894 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.312047958 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.312067986 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.312141895 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.312165976 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.312534094 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.312784910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.312828064 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.324213028 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.324229002 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.324274063 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.324287891 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.324309111 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.324328899 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.324742079 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324755907 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324773073 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324781895 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324798107 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.324803114 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324812889 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.324830055 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.324852943 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.325593948 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.325608015 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.325650930 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.325658083 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.325690985 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.325699091 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.329029083 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.329040051 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.329063892 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.329091072 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.329097033 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.329143047 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.334616899 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.334633112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.334672928 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.334680080 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.334717989 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.334732056 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.366858959 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.366878033 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.366939068 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.366947889 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.367136002 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.367753029 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.367770910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.367811918 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.367819071 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.367847919 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.367867947 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.371017933 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.371036053 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.371085882 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.371093035 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.371278048 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.378715992 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.378815889 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.378901958 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.379122019 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.379139900 CET	443	61744	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.379149914 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.379345894 CET	61744	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.380367041 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.380403042 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.380506039 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.380765915 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.380776882 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.393536091 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.393558025 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.393601894 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.393615007 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.393646002 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.393660069 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.406239033 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.406256914 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.406316042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.406326056 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.406378031 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.413579941 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.413609028 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.413645029 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.413659096 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.413687944 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.413698912 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.413703918 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.413757086 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.414002895 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.414012909 CET	443	61741	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.414031029 CET	61741	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.416074991 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.416098118 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.416167021 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.416184902 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.416224957 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.423084974 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423101902 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423139095 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.423146009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423185110 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.423666000 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423681974 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423717022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.423727989 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.423754930 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.423763990 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.455370903 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.455405951 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.455437899 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.455456972 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.455468893 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.455495119 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.456257105 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.456279039 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.456315041 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.456321955 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.456360102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.456372976 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.459424973 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.459448099 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.459501982 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.459508896 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.459749937 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.479839087 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479862928 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479871035 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479896069 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479904890 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479912996 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479935884 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.479964972 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.479983091 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.480003119 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.481098890 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.481116056 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.481162071 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.481173038 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.481184006 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.482249022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.482271910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.482325077 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.482336998 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.484359980 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.494795084 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.494813919 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.494860888 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.494868040 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.494895935 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.494915009 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.504698992 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.504717112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.504765034 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.504775047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.504810095 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.504827023 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.504832029 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.511621952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.511645079 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.511742115 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.511754036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.511765003 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.512075901 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.512089968 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.512130022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.512137890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.512168884 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.533436060 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.543864012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.543885946 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.543927908 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.543956041 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.543967962 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.543996096 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.544032097 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.544034958 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.544049025 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.544096947 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.544805050 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.544821978 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.544913054 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.544919968 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.545054913 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.547914028 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.547930956 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.548028946 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.548037052 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.548136950 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.555121899 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.555202007 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.568502903 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.568515062 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.568551064 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.568572998 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.568603039 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.568622112 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.568650961 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.568671942 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.569777012 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.569787025 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.569813013 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.569860935 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.569879055 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.569906950 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.569992065 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.571033001 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.571050882 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.571115017 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.571131945 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.571222067 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.572628021 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.572645903 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.572701931 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.572710991 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.572782040 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.583102942 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583123922 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583194971 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.583204031 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583652973 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583672047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583714962 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.583723068 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.583756924 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.595525980 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.595539093 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.595578909 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.595612049 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.595623970 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.595674038 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.595674038 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.600382090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.600408077 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.600501060 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.600519896 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.600529909 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.600610018 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.632352114 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.632381916 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.632433891 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.632451057 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.632481098 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.632499933 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.632558107 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.632626057 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.633208990 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633227110 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633290052 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.633300066 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633481979 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633519888 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633537054 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.633543968 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.633585930 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.643734932 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.643763065 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.643812895 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.643838882 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.643846989 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.643868923 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.643910885 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.643914938 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.651371956 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651386023 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651406050 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651426077 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651443958 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.651474953 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651487112 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.651492119 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651571989 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.651617050 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.657345057 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.657368898 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.657407999 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.657430887 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.657444954 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.657460928 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.658265114 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.658279896 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.658334017 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.658343077 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.658457994 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.658931971 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.658946037 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.658993959 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.659003019 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.659029007 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.659043074 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.659985065 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.660000086 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.660046101 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.660054922 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.660099030 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.660840034 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.660855055 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.660902023 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.660911083 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.661173105 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.663346052 CET	61742	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:48.663364887 CET	443	61742	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:48.671637058 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.671668053 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.671704054 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.671714067 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.671725035 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.671751022 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.671787977 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.671792984 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.681590080 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.681612015 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.681658983 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.681669950 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.681710005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.688622952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.688654900 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.688760042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.688760042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.688771009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.689029932 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.689047098 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.689083099 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.689106941 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.689106941 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.689115047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.689141035 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.720978022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.720999002 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.721065998 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.721076965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.721122980 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.721703053 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.721719027 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.721774101 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.721781015 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.724764109 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.724786997 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.724884033 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.724895000 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.732136965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.732176065 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.732264042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.732264042 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.732275009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.732363939 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.745490074 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.745511055 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.745592117 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.745624065 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.745688915 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.746081114 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746095896 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746150017 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.746156931 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746406078 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.746638060 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746658087 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746706963 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.746714115 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.746763945 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747193098 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747208118 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747349024 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747355938 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747517109 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747709036 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747730017 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747770071 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747776985 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.747806072 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747823954 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.747911930 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.747982025 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.748413086 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.748428106 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.748476028 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.748481989 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.748492956 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.748528957 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.749018908 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749034882 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749090910 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.749098063 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749146938 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.749398947 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749413967 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749465942 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.749473095 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.749520063 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.759412050 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.759989977 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.760051966 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.760067940 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.760530949 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.760545015 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.760591984 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.760603905 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.760641098 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.772469044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.772485971 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.772517920 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.772609949 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.772609949 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.772623062 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.772665024 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.777307034 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.777326107 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.777404070 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.777411938 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.777461052 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.777461052 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.809350014 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.809396982 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.809441090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.809453964 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.809469938 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.809513092 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.809513092 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.810141087 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.810157061 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.810256958 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.810266018 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.810321093 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.810415983 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.810482025 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.810488939 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.820512056 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.820532084 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.820589066 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.820601940 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.820633888 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.834254980 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834280014 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834356070 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.834412098 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834444046 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.834469080 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.834630966 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834646940 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834697962 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.834711075 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.834821939 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835189104 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835211039 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835253000 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835258961 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835284948 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835299969 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835711956 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835727930 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835767031 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835773945 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835779905 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835815907 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.835870028 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.835922956 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.836463928 CET	61743	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:48.836477995 CET	443	61743	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:48.837620974 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.837827921 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.837841988 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.838129997 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.838454008 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.838505983 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.838588953 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.848510027 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.848525047 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.848561049 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.848601103 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.848620892 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.848653078 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.848665953 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.849193096 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.849208117 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.849236965 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.849260092 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.849271059 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.849292994 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.861154079 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.861169100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.861213923 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.861228943 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.861285925 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.865843058 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.865856886 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.865896940 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.865922928 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.865933895 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.865952015 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.883326054 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.897758961 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.897777081 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.897828102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.897840977 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.897890091 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.898134947 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898180008 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898205996 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.898216009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898248911 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.898821115 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898838997 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898880005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.898888111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.898911953 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.909001112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.909017086 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.909095049 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.909105062 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.909174919 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.936942101 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.936959028 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.937021017 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.937030077 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.937091112 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.937103033 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.937182903 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.937191010 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.937544107 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.947145939 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.947180986 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.947266102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.947266102 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.947274923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.947331905 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.954005957 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954021931 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954093933 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.954093933 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.954102039 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954377890 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954392910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954440117 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954458952 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.954467058 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.954704046 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.978357077 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.978401899 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.978431940 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.978447914 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.978461027 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.978493929 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.978518963 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979049921 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979077101 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979099035 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.979101896 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979111910 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979142904 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.979671001 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.979722023 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.983042002 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.983083010 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.983127117 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:48.983131886 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:48.986380100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.986397982 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.986450911 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.986464977 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.986498117 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.986521959 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.987030983 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.987061977 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.987098932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.987107038 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.987147093 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.987165928 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.990185022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.990200996 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.990276098 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:48.990283012 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:48.990619898 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.012868881 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.012882948 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.012979984 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.012989044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.013145924 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.026972055 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.026988029 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.027060986 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.027072906 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.027524948 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.031250954 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:49.036825895 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.036843061 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.036942005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.036948919 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.037415981 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.043706894 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.043720961 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.043788910 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.043796062 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.043808937 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.043847084 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.044253111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.044284105 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.044321060 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.044328928 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.044353008 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.068125010 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:49.068216085 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:49.068707943 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:49.068757057 CET	61745	443	192.168.2.5	104.17.247.203
Dec 31, 2024 09:00:49.068770885 CET	443	61745	104.17.247.203	192.168.2.5
Dec 31, 2024 09:00:49.080384016 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.080420017 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.080476046 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.080686092 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.080698013 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.082482100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082503080 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082546949 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.082557917 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082613945 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.082865000 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082878113 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082916975 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.082925081 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.082983971 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.083460093 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.083473921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.083534002 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.083540916 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.101468086 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.101486921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.101562977 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.101569891 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.101594925 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.101650000 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.114268064 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.114283085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.114368916 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.114377022 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.114567041 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.124140024 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.124155998 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.124243021 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.124253988 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.124475002 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.131124020 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131139040 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131242037 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.131249905 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131417990 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131448030 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131479025 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.131488085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131513119 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.131609917 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.131696939 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.131704092 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167498112 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167515039 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167551994 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167582035 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.167594910 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167629004 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.167963028 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.167983055 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.168051958 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.168051958 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.168061018 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.168454885 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.168469906 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.168519974 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.168529034 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.170799017 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.190073013 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.190097094 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.190139055 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.190146923 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.190196037 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.190217972 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.202706099 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.202750921 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.202840090 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.202840090 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.202848911 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.203208923 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.212646961 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.212666035 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.212709904 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.212717056 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.212763071 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.212763071 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.219649076 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.219664097 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.219707966 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.219722033 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.219750881 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.219750881 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.220046043 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.220061064 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.220115900 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.220124960 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.220279932 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.255928993 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.255950928 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256031990 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.256048918 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256346941 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256367922 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256413937 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.256421089 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256438971 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.256911993 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256925106 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.256998062 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.257008076 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.262861967 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.262904882 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.262973070 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.262973070 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.262990952 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.263211966 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.291019917 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291039944 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291131973 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.291146994 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291448116 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291464090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291500092 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.291532993 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.291541100 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.293716908 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.303380013 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.303399086 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.303525925 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.303531885 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.303664923 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.308073044 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.308176041 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.308509111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.308525085 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.308584929 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.308592081 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.308758020 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.344444036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.344465017 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.344535112 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.344549894 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.344582081 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.344619036 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.344881058 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.344897032 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.345010996 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.345021009 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.345264912 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.345381975 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.345427036 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.345454931 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.345463991 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.345477104 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.368758917 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.368792057 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.368843079 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.368846893 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.368861914 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.368900061 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.368900061 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.379646063 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.379666090 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.379719973 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.379735947 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.379771948 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.379854918 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.379957914 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.380013943 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.380095005 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.380103111 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.380114079 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.380184889 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.380881071 CET	61737	443	192.168.2.5	18.173.205.114
Dec 31, 2024 09:00:49.380896091 CET	443	61737	18.173.205.114	192.168.2.5
Dec 31, 2024 09:00:49.386050940 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:49.386101961 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:49.386275053 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:49.386482954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:49.386492968 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:49.562091112 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.565160990 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.565188885 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.566250086 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.566315889 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.566653013 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.566714048 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.566904068 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.566911936 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.606693029 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.644577980 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:49.644634008 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:49.644714117 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:49.645040989 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:49.645056963 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:49.710728884 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710779905 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710813999 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710855007 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710876942 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.710890055 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710896969 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.710901976 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.710995913 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.711008072 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.711066961 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.711098909 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.711146116 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.711155891 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.711220980 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.711833000 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.757550955 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.757565975 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.802900076 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.802984953 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.802993059 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.803003073 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:49.803056955 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.803396940 CET	61746	443	192.168.2.5	104.17.246.203
Dec 31, 2024 09:00:49.803411961 CET	443	61746	104.17.246.203	192.168.2.5
Dec 31, 2024 09:00:50.104038954 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.104516029 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.104546070 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.104908943 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.105276108 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.105329990 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.105412006 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.147334099 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.264663935 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.265073061 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.265105963 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.265476942 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.266990900 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.267045975 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.267158031 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.311331987 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.386245012 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.386259079 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.386442900 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.386473894 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.386569977 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.466274023 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.466396093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.468647003 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.468662024 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.468727112 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.468739986 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.501000881 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.501029968 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.501183033 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.501192093 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.530735970 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.530839920 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.531534910 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.531548023 CET	443	61748	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.531563044 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.531594038 CET	61748	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.534411907 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.534462929 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.534532070 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.534744978 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:50.534758091 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:50.544120073 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.554275990 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.554294109 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.554415941 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.554429054 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.554536104 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.555610895 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.555624962 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.555674076 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.555680037 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.555960894 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.556282997 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.556334019 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.558856010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.558871031 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.558918953 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.558924913 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.606635094 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.641215086 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.641233921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.641304970 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.641311884 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.641341925 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.641777039 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.641801119 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.641843081 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.641848087 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642005920 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642050028 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642057896 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.642067909 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642098904 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.642505884 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642522097 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642577887 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.642585993 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.642663956 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.643002987 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.643018007 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.643054008 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.643059015 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.643090963 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.643109083 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.646315098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.646332026 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.646397114 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.646404028 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.646672010 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.646714926 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.646732092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.646776915 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.646781921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.647183895 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.648511887 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.648526907 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.648581028 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.648586035 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.648875952 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.676255941 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.676275969 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.676347971 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.676373005 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.676839113 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.729129076 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.729145050 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.729213953 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.729223013 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.729617119 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.729645014 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.729661942 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.729706049 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.729712009 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730103016 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.730144024 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730158091 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730212927 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.730218887 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730326891 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730380058 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.730386019 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730417013 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.730598927 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.730647087 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.730650902 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.731468916 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.731482983 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.731590986 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.731596947 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.731617928 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.731652021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.731657028 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733598948 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733613014 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733663082 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.733669996 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733922958 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733936071 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.733992100 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.733998060 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.763639927 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.763658047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.763725042 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.763748884 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.809681892 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.837877035 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.837899923 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.837965012 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.837971926 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838011026 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.838273048 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838287115 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838337898 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.838344097 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838673115 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.838704109 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838717937 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.838756084 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.838761091 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.839093924 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.839286089 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.839299917 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.839344025 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.839349985 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.839584112 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.842333078 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.842346907 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.842396021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.842400074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.842434883 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.845856905 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.845871925 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.845922947 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.845930099 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.846210957 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.846229076 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.846267939 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.846273899 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.846286058 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.846312046 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.875421047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.875442028 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.875514984 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.875519991 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.875556946 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.952115059 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952131987 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952207088 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.952238083 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952280998 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.952480078 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952495098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952549934 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.952559948 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952605963 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.952893019 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.952908039 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.953001022 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.953008890 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.953048944 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.953440905 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.953457117 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.953514099 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.953521013 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.953562021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.956275940 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.956290960 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.956351042 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.956361055 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.956397057 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.959974051 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.959990978 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.960093021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.960104942 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.960184097 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.960390091 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.960403919 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.960474968 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.960483074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.960527897 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.989250898 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.989265919 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.989347935 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:50.989366055 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:50.989404917 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.039732933 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.039751053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.039835930 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.039861917 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.039910078 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.040355921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040371895 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040431023 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.040436983 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040487051 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.040795088 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040810108 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040853024 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.040858984 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.040890932 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.040910006 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.041177034 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.041193008 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.041248083 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.041253090 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.041290045 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.043783903 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.043800116 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.043873072 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.043885946 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.043936968 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.047559977 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.047602892 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.047631979 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.047636986 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.047671080 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.047930956 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.047954082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.048017025 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.048022985 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.081537008 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.081556082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.081614971 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.081625938 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.122195005 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.127387047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127405882 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127469063 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.127481937 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127516031 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.127531052 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127537966 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.127545118 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127571106 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.127931118 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.127948046 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.128012896 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.128022909 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.128556013 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.128571033 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.128623962 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.128631115 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.130997896 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131017923 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131072998 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.131087065 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131114006 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.131613970 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131628036 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131680012 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.131699085 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.131746054 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.135231972 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.135250092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.135288954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.135296106 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.135324001 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.138629913 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.138644934 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.138725996 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.138736010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.184688091 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.210867882 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.211165905 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:51.211195946 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.211550951 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.211846113 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:51.211910009 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.211988926 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:51.214596987 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.214617014 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.214701891 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.214710951 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.214760065 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215080023 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215095043 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215164900 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215171099 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215207100 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215513945 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215528011 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215575933 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215583086 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215615034 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215635061 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215868950 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215884924 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.215965986 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.215971947 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.216010094 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.218606949 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.218621016 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.218702078 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.218715906 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.218766928 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.220199108 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.220213890 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.220292091 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.220305920 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.220357895 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.222799063 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.222815037 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.222882032 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.222894907 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.222944021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.226161957 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.226176977 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.226262093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.226268053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.226309061 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.259321928 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.302186012 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302206039 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302299976 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.302310944 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302350998 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.302651882 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302666903 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302721024 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.302726984 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.302773952 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.303138971 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303153038 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303203106 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.303212881 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303251982 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.303538084 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303553104 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303597927 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.303603888 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.303631067 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.303649902 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.306253910 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.306267977 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.306329966 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.306338072 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.306382895 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.307856083 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.307872057 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.307919979 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.307930946 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.307972908 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.310401917 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.310415983 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.310483932 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.310497046 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.310561895 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.313782930 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.313797951 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.313872099 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.313885927 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.313951015 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.389914989 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.389930010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390010118 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.390042067 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390088081 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.390486956 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390501976 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390573978 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.390579939 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390620947 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.390916109 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390930891 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.390993118 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.391000032 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.391047955 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.391226053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.391241074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.391292095 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.391304970 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.391362906 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.391364098 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.393796921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.393812895 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.393882990 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.393898010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.393925905 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.393946886 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.395308971 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.395329952 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.395402908 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.395416021 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.395472050 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.398498058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.398510933 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.398585081 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.398598909 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.398653984 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.401218891 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.401236057 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.401314020 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.401329041 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.401381969 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.475718975 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.475800991 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.475872993 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:51.477443933 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.477462053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.477535963 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.477545977 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.477591991 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478167057 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478180885 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478244066 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478250027 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478261948 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478283882 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478555918 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478571892 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478636980 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478642941 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478694916 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.478929996 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478948116 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.478996038 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.479001999 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.479038954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.481400013 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.481415987 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.481483936 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.481492043 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.481545925 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.482916117 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.482932091 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.482997894 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.483004093 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.483040094 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.486056089 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.486069918 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.486133099 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.486140966 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.486196041 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.488826990 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.488842010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.488895893 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.488902092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.488956928 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.535799980 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.536432028 CET	61749	443	192.168.2.5	34.241.139.243
Dec 31, 2024 09:00:51.536464930 CET	443	61749	34.241.139.243	192.168.2.5
Dec 31, 2024 09:00:51.565159082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565181017 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565272093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.565284967 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565332890 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.565485001 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565500975 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565553904 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.565560102 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.565598011 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.566090107 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566104889 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566159964 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.566164970 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566211939 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.566570997 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566589117 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566642046 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.566652060 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.566682100 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.566689968 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.568974972 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.568994999 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.569060087 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.569067001 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.569107056 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.570306063 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.570322990 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.570389032 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.570394039 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.570436001 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.573527098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.573543072 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.573612928 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.573618889 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.573671103 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.576653004 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.576677084 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.576744080 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.576751947 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.576792002 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.652791023 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.652858019 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.652890921 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.652914047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.652942896 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.652968884 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653238058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653279066 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653312922 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653326035 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653354883 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653383970 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653626919 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653646946 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653687954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653706074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.653728962 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.653748989 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.654016972 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.654031992 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.654105902 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.654105902 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.654122114 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.654170036 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.656428099 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.656444073 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.656488895 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.656519890 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.656548023 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.656568050 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.658023119 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.658039093 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.658091068 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.658121109 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.658165932 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.661294937 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.661310911 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.661370993 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.661385059 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.661444902 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.663909912 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.663927078 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.663981915 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.663997889 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.664030075 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.664047956 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.742980957 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743012905 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743077040 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743103027 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743129015 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743160009 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743175030 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743177891 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743191957 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743196011 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743226051 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743236065 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743253946 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743257999 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743278980 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743339062 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.743345976 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.743366957 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.745690107 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.745703936 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.745765924 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.745775938 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.747051954 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.747072935 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.747118950 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.747127056 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.748733997 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.748748064 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.748796940 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.748804092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.751404047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.751422882 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.751478910 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.751485109 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.794117928 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.827864885 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.827892065 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.827992916 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.828027010 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828080893 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.828247070 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828263044 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828326941 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.828341007 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828393936 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.828758001 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828774929 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828833103 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.828847885 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.828897953 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.829237938 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.829252958 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.829308033 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.829323053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.829377890 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.831604004 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.831619024 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.831674099 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.831688881 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.831752062 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.833005905 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.833022118 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.833071947 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.833086967 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.833142042 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.836405039 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.836421013 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.836482048 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.836496115 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.836554050 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.838937998 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.838953972 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.839008093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.839023113 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.839070082 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.915497065 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.915517092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.915586948 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.915615082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.915699005 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.915999889 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916014910 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916058064 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916074038 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916101933 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916121006 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916582108 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916598082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916651964 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916666031 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.916692019 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916716099 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.916994095 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.917009115 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.917071104 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.917084932 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.917135000 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.919182062 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.919197083 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.919255972 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.919269085 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.919344902 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.920663118 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.920677900 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.920733929 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.920756102 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.920779943 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.920799017 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.923978090 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.923993111 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.924052000 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.924067974 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.924123049 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.926536083 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.926549911 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.926623106 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:51.926636934 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:51.926691055 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.003166914 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003185034 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003262997 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.003282070 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003349066 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.003674984 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003695965 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003776073 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.003788948 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.003925085 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.004142046 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004158020 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004221916 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.004235029 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004285097 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.004471064 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004487038 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004523039 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.004538059 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.004566908 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.004591942 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.006665945 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.006680965 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.006740093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.006753922 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.006824017 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.008136988 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.008156061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.008205891 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.008224964 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.008280039 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.011476040 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.011491060 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.011549950 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.011563063 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.011612892 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.011612892 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.014151096 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.014164925 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.014228106 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.014244080 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.014291048 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.090740919 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.090761900 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.090881109 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.090897083 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.090934992 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091208935 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091224909 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091253042 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091264009 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091285944 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091305971 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091583014 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091598034 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091630936 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091665983 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.091679096 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.091722965 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.092251062 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.092269897 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.092319012 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.092351913 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.092381954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.092417002 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.094237089 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.094263077 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.094297886 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.094314098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.094342947 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.094361067 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.095658064 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.095674992 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.095714092 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.095727921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.095755100 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.095771074 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.099070072 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.099090099 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.099138975 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.099159002 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.099208117 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.101840973 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.101859093 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.101912022 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.101929903 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.101978064 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178390026 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178419113 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178458929 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178487062 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178513050 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178548098 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178821087 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178837061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178874016 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178880930 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.178905964 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.178925037 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179387093 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179403067 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179449081 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179456949 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179472923 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179491043 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179685116 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179699898 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179759026 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179759026 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.179765940 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.179804087 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.181838036 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.181853056 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.181888103 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.181896925 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.181921959 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.182004929 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.183234930 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.183254957 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.183317900 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.183331966 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.183363914 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.186649084 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.186665058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.186705112 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.186727047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.186743021 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.186767101 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.189435959 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.189451933 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.189502954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.189511061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.189555883 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266048908 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266081095 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266117096 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266129017 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266155958 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266171932 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266549110 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266563892 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266607046 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266613007 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266638994 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266657114 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.266948938 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.266964912 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.267008066 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.267014980 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.267030954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.267071009 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.267442942 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.267460108 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.267503023 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.267509937 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.267560005 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.269357920 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.269372940 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.269418955 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.269424915 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.269481897 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.270792007 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.270807028 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.270847082 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.270853996 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.270881891 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.270895958 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.274363041 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.274378061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.274420023 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.274425983 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.274454117 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.274480104 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.277071953 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.277087927 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.277143955 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.277152061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.277194023 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.353795052 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.353820086 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.353866100 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.353888035 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.353929043 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.353940010 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.354186058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354202986 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354244947 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.354257107 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354290962 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.354631901 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354652882 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354681969 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.354688883 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.354713917 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.354732990 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.355173111 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.355187893 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.355226994 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.355237007 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.355269909 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.355288029 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.356972933 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.356992006 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.357043982 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.357053041 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.357088089 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.358391047 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.358407974 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.358458996 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.358467102 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.358509064 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.362078905 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.362097025 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.362155914 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.362168074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.362206936 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.364609003 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.364629030 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.364677906 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.364689112 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.364732981 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.441405058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441430092 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441493034 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.441513062 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441560030 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.441842079 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441858053 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441885948 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.441891909 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.441920996 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.441936970 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.442332983 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442348003 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442382097 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.442388058 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442409992 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.442425966 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.442605019 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442619085 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442672014 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.442677021 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.442709923 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.444538116 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.444552898 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.444590092 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.444595098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.444621086 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.444639921 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.446037054 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.446052074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.446105003 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.446110964 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.446144104 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.449582100 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.449596882 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.449637890 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.449645042 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.449670076 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.449687004 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.451996088 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.452012062 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.452071905 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.452078104 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.452102900 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529141903 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529165030 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529257059 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529285908 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529339075 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529443026 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529458046 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529495001 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529500961 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529527903 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529540062 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529851913 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529867887 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529905081 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529911995 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.529941082 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.529951096 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.530395031 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.530411005 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.530461073 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.530468941 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.530514956 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.532082081 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.532099009 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.532267094 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.532277107 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.532322884 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.533652067 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.533668041 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.533731937 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.533740044 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.533780098 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.537296057 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.537312984 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.537364006 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.537373066 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.537412882 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.539661884 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.539678097 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.539731979 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.539740086 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.539782047 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.616602898 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.616627932 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.616672993 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.616697073 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.616712093 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.616733074 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.617052078 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617074966 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617110968 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.617119074 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617141008 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.617156029 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.617476940 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617491961 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617538929 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.617546082 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.617579937 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.618149042 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.618166924 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.618213892 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.618218899 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.618257046 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.619821072 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.619834900 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.619878054 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.619890928 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.619929075 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.620980024 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.621037960 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.624614954 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.624629974 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.624691010 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.624702930 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.624742031 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.624953985 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.624969006 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.625005960 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.625011921 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.625050068 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.659010887 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.659025908 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.659085035 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.659101963 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.659140110 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.704444885 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.704461098 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.704530954 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.704550982 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.704587936 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705001116 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705018997 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705065966 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705073118 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705107927 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705333948 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705347061 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705390930 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705396891 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705431938 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705862045 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705876112 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705918074 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.705924034 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.705966949 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708479881 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.708499908 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.708539963 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.708560944 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708571911 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.708592892 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708609104 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708626986 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:52.708663940 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708805084 CET	61747	443	192.168.2.5	18.173.205.111
Dec 31, 2024 09:00:52.708817005 CET	443	61747	18.173.205.111	192.168.2.5
Dec 31, 2024 09:00:55.033521891 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:55.033602953 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:00:55.033711910 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:56.702096939 CET	61731	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:00:56.702125072 CET	443	61731	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:44.484642029 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:44.484700918 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:44.484824896 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:44.485369921 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:44.485385895 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:45.803391933 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:45.804047108 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:45.804069996 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:45.804368973 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:45.805641890 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:45.805702925 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:45.857072115 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:55.025218010 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:55.025290012 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:01:55.025419950 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:56.706257105 CET	61755	443	192.168.2.5	142.250.186.100
Dec 31, 2024 09:01:56.706291914 CET	443	61755	142.250.186.100	192.168.2.5
Dec 31, 2024 09:02:44.553905010 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:44.553965092 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:44.554028034 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:44.554265022 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:44.554279089 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:45.190378904 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:45.191142082 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:45.191164970 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:45.191462994 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:45.192305088 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:45.192365885 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:45.247669935 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:55.113678932 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:55.113755941 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:02:55.113818884 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:55.732963085 CET	61757	443	192.168.2.5	142.250.186.164
Dec 31, 2024 09:02:55.732986927 CET	443	61757	142.250.186.164	192.168.2.5
Dec 31, 2024 09:03:00.785711050 CET	63569	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:03:00.790513039 CET	53	63569	1.1.1.1	192.168.2.5
Dec 31, 2024 09:03:00.790582895 CET	63569	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:03:00.790601969 CET	63569	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:03:00.795346975 CET	53	63569	1.1.1.1	192.168.2.5
Dec 31, 2024 09:03:01.235498905 CET	53	63569	1.1.1.1	192.168.2.5
Dec 31, 2024 09:03:01.235869884 CET	63569	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:03:01.241571903 CET	53	63569	1.1.1.1	192.168.2.5
Dec 31, 2024 09:03:01.241646051 CET	63569	53	192.168.2.5	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 31, 2024 08:59:27.025455952 CET	51691	53	192.168.2.5	1.1.1.1
Dec 31, 2024 08:59:31.825663090 CET	53	65474	1.1.1.1	192.168.2.5
Dec 31, 2024 08:59:42.185862064 CET	53	51279	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:40.455517054 CET	53875	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:40.455734968 CET	57539	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:40.467968941 CET	53	61891	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:40.470231056 CET	53	61770	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:40.476739883 CET	53	57539	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:40.501624107 CET	53	53875	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:41.524645090 CET	53	64064	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:42.021099091 CET	65417	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:42.021753073 CET	57215	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:42.040226936 CET	53	57215	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:42.062736034 CET	53	65417	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:44.478811979 CET	59617	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:44.478941917 CET	61110	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:44.485589981 CET	53	61110	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:44.485738993 CET	53	59617	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:45.023305893 CET	53	64529	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:45.424287081 CET	63283	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:45.424608946 CET	62983	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:45.425278902 CET	65113	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:45.425642014 CET	49372	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:45.431955099 CET	53	65113	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:45.442677975 CET	53	49372	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:45.445384026 CET	53	63283	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:45.453444958 CET	53	62983	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.144840956 CET	65350	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.145200014 CET	53236	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.151616096 CET	53	65350	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.152127981 CET	53	53236	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.272540092 CET	57639	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.272772074 CET	49221	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.275789022 CET	52805	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.275789022 CET	61172	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:47.283229113 CET	53	52805	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.290010929 CET	53	61172	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.350960970 CET	53	49221	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:47.460901976 CET	53	57639	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:49.071901083 CET	58189	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:49.072036028 CET	58178	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:00:49.079716921 CET	53	58189	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:49.080013037 CET	53	58178	1.1.1.1	192.168.2.5
Dec 31, 2024 09:00:58.630561113 CET	53	57701	1.1.1.1	192.168.2.5
Dec 31, 2024 09:01:17.693826914 CET	53	55957	1.1.1.1	192.168.2.5
Dec 31, 2024 09:01:39.747458935 CET	53	59012	1.1.1.1	192.168.2.5
Dec 31, 2024 09:01:40.631933928 CET	53	61112	1.1.1.1	192.168.2.5
Dec 31, 2024 09:02:11.585892916 CET	53	53913	1.1.1.1	192.168.2.5
Dec 31, 2024 09:02:44.545814037 CET	50681	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:02:44.545943022 CET	60176	53	192.168.2.5	1.1.1.1
Dec 31, 2024 09:02:44.552637100 CET	53	50681	1.1.1.1	192.168.2.5
Dec 31, 2024 09:02:44.552659988 CET	53	60176	1.1.1.1	192.168.2.5
Dec 31, 2024 09:02:55.741796017 CET	53	64198	1.1.1.1	192.168.2.5
Dec 31, 2024 09:02:59.191632032 CET	138	138	192.168.2.5	192.168.2.255
Dec 31, 2024 09:03:00.785330057 CET	53	56717	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 31, 2024 09:00:45.442744017 CET	192.168.2.5	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 31, 2024 08:59:27.025455952 CET	192.168.2.5	1.1.1.1	0xbc2	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:40.455517054 CET	192.168.2.5	1.1.1.1	0x312b	Standard query (0)	https.docusign.click	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:40.455734968 CET	192.168.2.5	1.1.1.1	0x11fe	Standard query (0)	https.docusign.click	65	IN (0x0001)	false
Dec 31, 2024 09:00:42.021099091 CET	192.168.2.5	1.1.1.1	0x80cd	Standard query (0)	secure.encryptedconnection.net	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:42.021753073 CET	192.168.2.5	1.1.1.1	0xc863	Standard query (0)	secure.encryptedconnection.net	65	IN (0x0001)	false
Dec 31, 2024 09:00:44.478811979 CET	192.168.2.5	1.1.1.1	0x2b07	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:44.478941917 CET	192.168.2.5	1.1.1.1	0x530b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 31, 2024 09:00:45.424287081 CET	192.168.2.5	1.1.1.1	0x936b	Standard query (0)	helpimg.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.424608946 CET	192.168.2.5	1.1.1.1	0x36c4	Standard query (0)	helpimg.s3.amazonaws.com	65	IN (0x0001)	false
Dec 31, 2024 09:00:45.425278902 CET	192.168.2.5	1.1.1.1	0x75c4	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.425642014 CET	192.168.2.5	1.1.1.1	0xcdf7	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Dec 31, 2024 09:00:47.144840956 CET	192.168.2.5	1.1.1.1	0xd7c9	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.145200014 CET	192.168.2.5	1.1.1.1	0x59db	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 31, 2024 09:00:47.272540092 CET	192.168.2.5	1.1.1.1	0x3459	Standard query (0)	secure.encryptedconnection.net	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.272772074 CET	192.168.2.5	1.1.1.1	0x888f	Standard query (0)	secure.encryptedconnection.net	65	IN (0x0001)	false
Dec 31, 2024 09:00:47.275789022 CET	192.168.2.5	1.1.1.1	0xce31	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.275789022 CET	192.168.2.5	1.1.1.1	0x5816	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Dec 31, 2024 09:00:49.071901083 CET	192.168.2.5	1.1.1.1	0x5d02	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.072036028 CET	192.168.2.5	1.1.1.1	0xa3da	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 31, 2024 09:02:44.545814037 CET	192.168.2.5	1.1.1.1	0x4691	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:02:44.545943022 CET	192.168.2.5	1.1.1.1	0x9d6c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 31, 2024 08:59:27.032366037 CET	1.1.1.1	192.168.2.5	0xbc2	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 08:59:27.696513891 CET	1.1.1.1	192.168.2.5	0xb3c0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 31, 2024 08:59:27.696513891 CET	1.1.1.1	192.168.2.5	0xb3c0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:40.476739883 CET	1.1.1.1	192.168.2.5	0x11fe	No error (0)	https.docusign.click	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:40.501624107 CET	1.1.1.1	192.168.2.5	0x312b	No error (0)	https.docusign.click	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:40.501624107 CET	1.1.1.1	192.168.2.5	0x312b	No error (0)	landing.eu.knowbe4.com		34.241.139.243	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:40.501624107 CET	1.1.1.1	192.168.2.5	0x312b	No error (0)	landing.eu.knowbe4.com		52.51.195.94	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:42.040226936 CET	1.1.1.1	192.168.2.5	0xc863	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:42.062736034 CET	1.1.1.1	192.168.2.5	0x80cd	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:42.062736034 CET	1.1.1.1	192.168.2.5	0x80cd	No error (0)	landing.eu.knowbe4.com		34.241.139.243	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:42.062736034 CET	1.1.1.1	192.168.2.5	0x80cd	No error (0)	landing.eu.knowbe4.com		52.51.195.94	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:44.485589981 CET	1.1.1.1	192.168.2.5	0x530b	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 31, 2024 09:00:44.485738993 CET	1.1.1.1	192.168.2.5	0x2b07	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.431955099 CET	1.1.1.1	192.168.2.5	0x75c4	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.431955099 CET	1.1.1.1	192.168.2.5	0x75c4	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.431955099 CET	1.1.1.1	192.168.2.5	0x75c4	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.431955099 CET	1.1.1.1	192.168.2.5	0x75c4	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.32.57	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.20.46	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.100.177	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.121	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.210.89	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.109.59	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.237	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.445384026 CET	1.1.1.1	192.168.2.5	0x936b	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.207.33	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:45.453444958 CET	1.1.1.1	192.168.2.5	0x36c4	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:45.453444958 CET	1.1.1.1	192.168.2.5	0x36c4	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:47.151616096 CET	1.1.1.1	192.168.2.5	0xd7c9	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.151616096 CET	1.1.1.1	192.168.2.5	0xd7c9	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.151616096 CET	1.1.1.1	192.168.2.5	0xd7c9	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.151616096 CET	1.1.1.1	192.168.2.5	0xd7c9	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.151616096 CET	1.1.1.1	192.168.2.5	0xd7c9	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.152127981 CET	1.1.1.1	192.168.2.5	0x59db	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 31, 2024 09:00:47.283229113 CET	1.1.1.1	192.168.2.5	0xce31	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.283229113 CET	1.1.1.1	192.168.2.5	0xce31	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.283229113 CET	1.1.1.1	192.168.2.5	0xce31	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.283229113 CET	1.1.1.1	192.168.2.5	0xce31	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.350960970 CET	1.1.1.1	192.168.2.5	0x888f	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:47.460901976 CET	1.1.1.1	192.168.2.5	0x3459	No error (0)	secure.encryptedconnection.net	landing.eu.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 31, 2024 09:00:47.460901976 CET	1.1.1.1	192.168.2.5	0x3459	No error (0)	landing.eu.knowbe4.com		34.241.139.243	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:47.460901976 CET	1.1.1.1	192.168.2.5	0x3459	No error (0)	landing.eu.knowbe4.com		52.51.195.94	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.079716921 CET	1.1.1.1	192.168.2.5	0x5d02	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.079716921 CET	1.1.1.1	192.168.2.5	0x5d02	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.079716921 CET	1.1.1.1	192.168.2.5	0x5d02	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.079716921 CET	1.1.1.1	192.168.2.5	0x5d02	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.079716921 CET	1.1.1.1	192.168.2.5	0x5d02	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:00:49.080013037 CET	1.1.1.1	192.168.2.5	0xa3da	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 31, 2024 09:02:44.552637100 CET	1.1.1.1	192.168.2.5	0x4691	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Dec 31, 2024 09:02:44.552659988 CET	1.1.1.1	192.168.2.5	0x9d6c	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

https.docusign.click

https:

secure.encryptedconnection.net

helpimg.s3.amazonaws.com

training.knowbe4.com

unpkg.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	61726	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:41 UTC	1006	OUT	GET /XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850 HTTP/1.1 Host: https.docusign.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:41 UTC	574	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 489 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"d598c873218286bf14429e9bc135a427" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 1f564120-fe68-49f1-8439-5a83dc753b73 X-Runtime: 0.100208 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-31 08:00:41 UTC	489	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 65 6e 63 72 79 70 74 65 64 63 6f 6e 6e 65 63 74 69 6f 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 63 33 39 35 35 62 31 63 34 38 61 2f 58 55 32 70 53 65 6d 4e 57 53 56 51 34 4e 55 56 48 53 46 63 77 4f 48 4e 57 52 32 74 71 51 58 49 77 51 6c 68 74 5a 55 64 59 4d 57 4d 34 54 47 31 36 4c 30 68 43 63 6d 4a 32 63 6e 56 4e 5a 30 56 6e 57 48 55 76 56 6c 4d 79 4d 58 46 35 5a 6e 70 57 61 6e 4a 49 63 6d 70 4c 4e 30 35 4a 64 54 46 54 4d 57 67 33 52 46 4a 6a 62 30 6c 32 51 6a 42 73 52 31 70 54 4e 45 6f 34 54 45 63 79 51 55 56 76 59 56 41 32 4c 33 4a 4c 52 57 59 35 52 45 6c Data Ascii: <html> <head> <script>window.location.href = 'https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5REl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	61729	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:42 UTC	1389	OUT	GET /pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:45 UTC	833	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 75074 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"69feb31d20f8340079383eb02bd89606" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 1e678ec8-a8d0-4c31-9635-fed46cf3bb9d X-Runtime: 2.058834 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-31 08:00:45 UTC	15551	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2024-12-31 08:00:45 UTC	16384	IN	Data Raw: 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 68 65 5f 69 6c 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 48 65 62 72 65 77 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d7 a2 d7 91 d7 a8 d7 99 d7 aa 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 61 72 5f 6d 6f 64 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 41 72 61 62 69 63 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 Data Ascii: },{id: 'he_il',name_english: 'Hebrew',name_localized: '',rtl: true,},{id: 'ar_mod',name_english: 'Arabic',name_localized: '',rtl: true,},{
2024-12-31 08:00:45 UTC	56	IN	Data Raw: 65 33 3a 0a 09 09 09 09 09 09 09 27 56 c3 a9 72 69 66 69 65 7a 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 Data Ascii: e3:'Vrifiez les courriels suspects auprs de
2024-12-31 08:00:45 UTC	16384	IN	Data Raw: 6c 65 75 72 20 65 78 70 c3 a9 64 69 74 65 75 72 20 c3 a0 20 6c e2 80 99 61 69 64 65 20 64 e2 80 99 75 6e 20 61 75 74 72 65 20 6d 6f 79 65 6e 20 64 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 27 2c 0a 09 09 09 09 09 09 72 65 70 6f 72 74 3a 0a 09 09 09 09 09 09 09 27 53 6f 75 76 65 6e 65 7a 2d 76 6f 75 73 20 3a 20 53 69 67 6e 61 6c 65 7a 20 74 6f 75 6a 6f 75 72 73 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 76 6f 74 72 65 20 73 75 70 65 72 76 69 73 65 75 72 20 6f 75 20 64 65 20 76 6f 74 72 65 20 c3 a9 71 75 69 70 65 20 64 65 73 20 54 49 2e 20 4c 65 73 20 63 72 69 6d 69 6e 65 6c 73 20 64 65 20 6c e2 80 99 49 6e 74 65 72 6e 65 74 20 74 65 6e 74 65 72 6f 6e 74 20 64 65 20 76 6f 75 73 20 65 73 63 Data Ascii: leur expditeur laide dun autre moyen de communication.',report:'Souvenez-vous : Signalez toujours les courriels suspects auprs de votre superviseur ou de votre quipe des TI. Les criminels de lInternet tenteront de vous esc
2024-12-31 08:00:45 UTC	16384	IN	Data Raw: 65 72 61 74 20 6e c3 a4 74 66 69 73 6b 65 74 65 73 74 21 27 2c 0a 09 09 09 09 09 09 72 65 6d 65 6d 62 65 72 3a 0a 09 09 09 09 09 09 09 27 4b 6f 6d 20 69 68 c3 a5 67 20 64 65 73 73 61 20 74 72 65 20 72 65 67 6c 65 72 20 66 c3 b6 72 20 61 74 74 20 6e 61 76 69 67 65 72 61 20 73 c3 a4 6b 65 72 74 20 70 c3 a5 20 6e c3 a4 74 65 74 3a 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 31 3a 20 27 53 74 61 6e 6e 61 20 75 70 70 2c 20 74 69 74 74 61 20 6f 63 68 20 74 c3 a4 6e 6b 20 65 66 74 65 72 20 69 6e 6e 61 6e 20 64 75 20 6b 6c 69 63 6b 61 72 21 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 32 3a 0a 09 09 09 09 09 09 09 27 54 69 74 74 61 20 65 66 74 65 72 20 76 61 72 6e 69 6e 67 73 73 69 67 6e 61 6c 65 72 20 73 6f 6d 20 69 6e 64 69 6b 65 72 61 72 20 61 74 74 20 65 6e 20 6e c3 a4 Data Ascii: erat ntfisketest!',remember:'Kom ihg dessa tre regler fr att navigera skert p ntet:',rule1: 'Stanna upp, titta och tnk efter innan du klickar!',rule2:'Titta efter varningssignaler som indikerar att en n
2024-12-31 08:00:45 UTC	10315	IN	Data Raw: b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 b8 b3 e0 b8 a5 e0 b8 ad e0 b8 87 21 27 2c 0a 09 09 09 09 09 09 6c 61 6e 67 75 61 67 65 3a 20 27 e0 b9 80 e0 b8 a5 e0 b8 b7 e0 b8 ad e0 b8 81 e0 b8 a0 e0 b8 b2 e0 b8 a9 e0 b8 b2 e0 b8 88 e0 b8 b2 e0 b8 81 e0 b9 80 e0 b8 a1 e0 b8 99 e0 b8 b9 e0 b8 94 e0 b8 a3 e0 b9 87 e0 b8 ad e0 b8 9b e0 b8 94 e0 b8 b2 e0 b8 a7 e0 b8 99 e0 b9 8c 27 2c 0a 09 09 09 09 09 09 6f 6f 70 73 3a 20 27 e0 b8 82 e0 b8 ad e0 b8 ad e0 b8 a0 e0 b8 b1 e0 b8 a2 21 27 2c 0a 09 09 09 09 09 09 63 6c 69 63 6b 65 64 3a 20 27 e0 b8 84 e0 b8 b8 e0 b8 93 e0 b8 84 e0 b8 a5 e0 b8 b4 e0 b8 81 e0 b8 9a e0 b8 97 e0 b8 97 e0 b8 94 e0 b8 aa e0 b8 ad e0 b8 9a e0 b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 Data Ascii: !',language: '',oops: '!',clicked: '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	61730	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:45 UTC	999	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:45 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:45 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-31 08:00:45 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	61739	16.182.32.57	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:46 UTC	928	OUT	GET /landing_pages/oops/styles.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:46 UTC	502	IN	HTTP/1.1 200 OK x-amz-id-2: oByKgH03fDCYtPj77wh5SnAAn8NZW+zF29MX8OMIJ23FElcyJpn3jkMNv4EQmA1hRbSQks21QeA= x-amz-request-id: 0D0PNA0X3M439GW9 Date: Tue, 31 Dec 2024 08:00:47 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 05 Dec 2024 22:09:56 GMT ETag: "b13b4f098d80ac49dcc6bed4e459d560" x-amz-server-side-encryption: AES256 x-amz-version-id: euN8e1egT0HP5Qpqr.UG1XrfZxMZiG5f Accept-Ranges: bytes Content-Type: text/css Content-Length: 5649 Server: AmazonS3 Connection: close
2024-12-31 08:00:46 UTC	5649	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 66 66 66 66 66 66 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 32 30 30 3a 20 23 66 35 66 35 66 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 33 30 30 3a 20 23 64 35 64 35 64 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 34 30 30 3a 20 23 61 62 61 62 61 62 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 3a 20 23 37 30 37 30 37 30 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 36 30 30 3a 20 23 32 63 32 63 32 63 3b 0a 0a 09 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 73 Data Ascii: :root {--clr-neutral-100: #ffffff;--clr-neutral-200: #f5f5f5;--clr-neutral-300: #d5d5d5;--clr-neutral-400: #ababab;--clr-neutral-500: #707070;--clr-neutral-600: #2c2c2c;/* Padding */--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);--padding-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	61735	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:46 UTC	978	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:46 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:46 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-31 08:00:46 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-31 08:00:46 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-31 08:00:46 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	61737	18.173.205.114	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:46 UTC	967	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:47 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Date: Tue, 31 Dec 2024 08:00:47 GMT Last-Modified: Thu, 23 May 2024 17:09:54 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b44afb2a44376871c20edb8c123ed47c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: JBy9qr8pp27H3iR0qKFDxX3mO2AX2BHsrw9j4fPlRGnxy6z1DC6juw==
2024-12-31 08:00:47 UTC	1796	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-31 08:00:47 UTC	7153	IN	Data Raw: 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 77 65 20 Data Ascii: / The jQuery object is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make sure we
2024-12-31 08:00:47 UTC	7971	IN	Data Raw: 6f 66 74 20 66 6f 72 67 6f 74 20 74 6f 20 68 75 6d 70 20 74 68 65 69 72 20 76 65 6e 64 6f 72 20 70 72 65 66 69 78 20 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d Data Ascii: oft forgot to hump their vendor prefix (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() =
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 74 65 73 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 3f 29 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 5c 5c 5d 22 2c 20 22 67 22 20 29 2c 0a 0a 09 72 70 73 65 75 64 6f 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 70 73 65 75 64 6f 73 20 29 2c 0a 09 72 69 64 65 6e 74 69 66 69 65 72 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 5e 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 24 22 20 29 2c 0a 0a 09 6d 61 74 63 68 45 78 70 72 20 3d 20 7b 0a 09 09 22 49 44 22 3a 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 5e 23 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 22 20 29 2c 0a 09 09 22 43 4c 41 53 53 22 3a 20 6e 65 77 20 52 65 67 45 Data Ascii: tes = new RegExp( "=" + whitespace + "([^\\]'\"]?)" + whitespace + "*\\]", "g" ),rpseudo = new RegExp( pseudos ),ridentifier = new RegExp( "^" + identifier + "$" ),matchExpr = {"ID": new RegExp( "^#(" + identifier + ")" ),"CLASS": new RegE
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 73 68 6f 75 6c 64 20 72 65 74 75 72 6e 20 73 65 6c 65 63 74 65 64 20 6f 70 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 73 0a 09 09 09 2f 2f 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 32 30 31 31 2f 52 45 43 2d 63 73 73 33 2d 73 65 6c 65 63 74 6f 72 73 2d 32 30 31 31 30 39 32 39 2f 23 63 68 65 63 6b 65 64 0a 09 09 09 2f 2f 20 49 45 38 20 74 68 72 6f 77 73 20 65 72 72 6f 72 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 65 65 20 6c 61 74 65 72 20 74 65 73 74 73 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 3b 0a 09 09 09 7d 0a Data Ascii: should return selected option elements// http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked// IE8 throws error here and will not see later testsif ( !div.querySelectorAll(":checked").length ) {rbuggyQSA.push(":checked");}
2024-12-31 08:00:47 UTC	3778	IN	Data Raw: 65 5b 20 74 79 70 65 20 5d 20 3d 20 5b 20 64 69 72 72 75 6e 73 2c 20 64 69 66 66 20 5d 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 6e 6f 64 65 20 3d 3d 3d 20 65 6c 65 6d 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 2f 2f 20 49 6e 63 6f 72 70 6f 72 61 74 65 20 74 68 65 20 6f 66 66 73 65 74 2c 20 74 68 65 6e 20 63 68 65 63 6b 20 61 67 61 69 6e 73 74 20 63 79 63 6c 65 20 73 69 7a 65 0a 09 09 09 09 09 09 64 69 66 66 20 2d 3d 20 6c 61 73 74 3b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 64 69 66 66 20 3d 3d 3d 20 66 69 72 73 Data Ascii: e[ type ] = [ dirruns, diff ];}if ( node === elem ) {break;}}}}}// Incorporate the offset, then check against cycle sizediff -= last;return diff === firs
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 0a 09 09 09 7d 3b 0a 09 09 7d 29 2c 0a 0a 09 09 2f 2f 20 4d 69 73 63 65 6c 6c 61 6e 65 6f 75 73 0a 09 09 22 74 61 72 67 65 74 22 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 09 76 61 72 20 68 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0a 09 09 09 72 65 74 75 72 6e 20 68 61 73 68 20 26 26 20 68 61 73 68 2e 73 6c 69 63 65 28 20 31 20 29 20 3d 3d 3d 20 65 6c 65 6d 2e 69 64 3b 0a 09 09 7d 2c 0a 0a 09 09 22 72 6f 6f 74 22 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 20 3d 3d 3d 20 64 6f 63 45 6c 65 6d 3b 0a 09 09 7d 2c 0a 0a 09 09 22 66 6f 63 75 73 22 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: };}),// Miscellaneous"target": function( elem ) {var hash = window.location && window.location.hash;return hash && hash.slice( 1 ) === elem.id;},"root": function( elem ) {return elem === docElem;},"focus": function(
2024-12-31 08:00:47 UTC	1024	IN	Data Raw: 65 63 74 6f 72 2c 20 6d 61 74 63 68 20 2f 2a 20 49 6e 74 65 72 6e 61 6c 20 55 73 65 20 4f 6e 6c 79 20 2a 2f 20 29 20 7b 0a 09 76 61 72 20 69 2c 0a 09 09 73 65 74 4d 61 74 63 68 65 72 73 20 3d 20 5b 5d 2c 0a 09 09 65 6c 65 6d 65 6e 74 4d 61 74 63 68 65 72 73 20 3d 20 5b 5d 2c 0a 09 09 63 61 63 68 65 64 20 3d 20 63 6f 6d 70 69 6c 65 72 43 61 63 68 65 5b 20 73 65 6c 65 63 74 6f 72 20 2b 20 22 20 22 20 5d 3b 0a 0a 09 69 66 20 28 20 21 63 61 63 68 65 64 20 29 20 7b 0a 09 09 2f 2f 20 47 65 6e 65 72 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 72 65 63 75 72 73 69 76 65 20 66 75 6e 63 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 65 6c 65 6d 65 6e 74 0a 09 09 69 66 20 28 20 21 6d 61 74 63 Data Ascii: ector, match /* Internal Use Only */ ) {var i,setMatchers = [],elementMatchers = [],cached = compilerCache[ selector + " " ];if ( !cached ) {// Generate a function of recursive functions that can be used to check each elementif ( !matc
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 73 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 0a 20 2a 2f 0a 73 65 6c 65 63 74 20 3d 20 53 69 7a 7a 6c 65 2e 73 65 6c 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 2c 20 72 65 73 75 6c 74 73 2c 20 73 65 65 64 20 29 20 7b 0a 09 76 61 72 20 69 2c 20 74 6f 6b 65 6e 73 2c 20 74 6f 6b 65 6e 2c 20 74 79 70 65 2c 20 66 69 6e 64 2c 0a 09 09 63 6f 6d 70 69 6c 65 64 20 3d 20 74 79 70 65 6f 66 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 73 65 6c 65 63 74 6f 72 2c 0a 09 09 6d 61 74 63 68 20 3d 20 21 73 65 65 64 20 26 26 20 74 6f 6b 65 6e 69 7a 65 28 20 28 73 65 6c 65 63 74 6f 72 20 3d 20 63 6f 6d 70 69 6c 65 64 2e 73 65 6c 65 63 74 6f 72 20 7c 7c 20 73 65 6c 65 63 74 Data Ascii: s to match against */select = Sizzle.select = function( selector, context, results, seed ) {var i, tokens, token, type, find,compiled = typeof selector === "function" && selector,match = !seed && tokenize( (selector = compiled.selector \|\| select
2024-12-31 08:00:47 UTC	1024	IN	Data Raw: 69 72 69 6e 67 0a 09 09 6c 6f 63 6b 65 64 2c 0a 0a 09 09 2f 2f 20 41 63 74 75 61 6c 20 63 61 6c 6c 62 61 63 6b 20 6c 69 73 74 0a 09 09 6c 69 73 74 20 3d 20 5b 5d 2c 0a 0a 09 09 2f 2f 20 51 75 65 75 65 20 6f 66 20 65 78 65 63 75 74 69 6f 6e 20 64 61 74 61 20 66 6f 72 20 72 65 70 65 61 74 61 62 6c 65 20 6c 69 73 74 73 0a 09 09 71 75 65 75 65 20 3d 20 5b 5d 2c 0a 0a 09 09 2f 2f 20 49 6e 64 65 78 20 6f 66 20 63 75 72 72 65 6e 74 6c 79 20 66 69 72 69 6e 67 20 63 61 6c 6c 62 61 63 6b 20 28 6d 6f 64 69 66 69 65 64 20 62 79 20 61 64 64 2f 72 65 6d 6f 76 65 20 61 73 20 6e 65 65 64 65 64 29 0a 09 09 66 69 72 69 6e 67 49 6e 64 65 78 20 3d 20 2d 31 2c 0a 0a 09 09 2f 2f 20 46 69 72 65 20 63 61 6c 6c 62 61 63 6b 73 0a 09 09 66 69 72 65 20 3d 20 66 75 6e 63 74 69 6f 6e Data Ascii: iringlocked,// Actual callback listlist = [],// Queue of execution data for repeatable listsqueue = [],// Index of currently firing callback (modified by add/remove as needed)firingIndex = -1,// Fire callbacksfire = function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	61738	18.173.205.114	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:46 UTC	920	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:47 UTC	14580	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 19 Dec 2024 17:48:28 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FyPJp3w4jkxkJyEC2B08wkOZntFsxSPq Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Tue, 31 Dec 2024 08:00:47 GMT ETag: "d5e3158e82340391e333de30349bb337" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 6331d4bbb4ca00ba6bb24a0730ab986c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 3Cpltg7PCg1jf35sDVpWHsLwpEzYKvvyrV-fuFUcWkBqMH03Zqg1HA==
2024-12-31 08:00:47 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	61736	18.173.205.114	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:46 UTC	965	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:46 UTC	14586	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Date: Tue, 31 Dec 2024 08:00:47 GMT Last-Modified: Thu, 23 May 2024 17:10:02 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b44afb2a44376871c20edb8c123ed47c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 2pRNYtD1gYR1l6tMzM4C5PMmjMBWN9LmewkdOSA5v6xTJGWCzayi5Q==
2024-12-31 08:00:46 UTC	1382	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2024-12-31 08:00:47 UTC	15572	IN	Data Raw: 20 20 2a 20 43 72 65 61 74 65 20 74 68 65 20 69 6e 70 75 74 20 65 6c 65 6d 65 6e 74 20 66 6f 72 20 76 61 72 69 6f 75 73 20 57 65 62 20 46 6f 72 6d 73 20 66 65 61 74 75 72 65 20 74 65 73 74 73 2e 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6e 70 75 74 27 29 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 2c 0a 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 20 20 20 20 73 6d 69 6c 65 20 3d 20 27 3a 29 27 2c 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 0a 20 20 20 20 74 6f 53 74 72 69 6e 67 20 3d 20 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 0a 0a 20 20 20 20 2f 2f 20 54 4f 44 4f 20 3a 3a 20 6d 61 6b Data Ascii: * Create the input element for various Web Forms feature tests. / inputElem />>inputelem/ = document.createElement('input') />>inputelem/ , />>smile/ smile = ':)', />>smile*/ toString = {}.toString, // TODO :: mak
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 65 72 20 61 6e 64 20 70 72 6f 70 65 72 74 79 2d 6d 61 74 63 68 69 6e 67 20 6f 6e 65 2e 0a 20 20 20 20 2f 2f 20 54 68 65 20 6f 6c 64 20 41 50 49 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 31 2e 36 2c 20 62 75 74 20 61 73 20 6f 66 20 32 2e 30 20 77 69 6c 6c 20 74 68 72 6f 77 20 61 20 77 61 72 6e 69 6e 67 2c 0a 20 20 20 20 2f 2f 20 61 6e 64 20 69 6e 20 74 68 65 20 66 69 72 73 74 20 72 65 6c 65 61 73 65 20 74 68 65 72 65 61 66 74 65 72 20 64 69 73 61 70 70 65 61 72 20 65 6e 74 69 72 65 6c 79 2e 0a 20 20 20 20 74 65 73 74 73 5b 27 68 69 73 74 6f 72 79 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 68 69 73 74 6f 72 79 2e 70 75 Data Ascii: er and property-matching one. // The old API is still available in 1.6, but as of 2.0 will throw a warning, // and in the first release thereafter disappear entirely. tests['history'] = function() { return !!(window.history && history.pu
2024-12-31 08:00:47 UTC	16384	IN	Data Raw: 6f 6f 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 70 75 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 27 73 65 61 72 63 68 20 74 65 6c 20 75 72 6c 20 65 6d 61 69 6c 20 64 61 74 65 74 69 6d 65 20 64 61 74 65 20 6d 6f 6e 74 68 20 77 65 65 6b 20 74 69 6d 65 20 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 63 6f 6c 6f 72 27 2e 73 70 6c 69 74 28 27 20 27 29 29 3b 0a 20 20 20 20 20 20 20 20 2f 2a 3e 3e 69 6e 70 75 74 74 79 70 65 73 2a 2f 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2f 20 45 6e 64 20 6f 66 20 74 65 73 74 20 64 65 66 69 6e 69 74 69 6f 6e 73 0a 20 20 20 20 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ool; } return inputs; })('search tel url email datetime date month week time datetime-local number range color'.split(' ')); />>inputtypes/ } />>webforms/ // End of test definitions // --------
2024-12-31 08:00:47 UTC	1642	IN	Data Raw: 6f 75 72 20 69 6e 70 75 74 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 70 72 65 66 69 78 65 64 28 27 62 6f 78 53 69 7a 69 6e 67 27 29 20 2f 2f 20 27 4d 6f 7a 42 6f 78 53 69 7a 69 6e 67 27 0a 0a 20 20 20 20 2f 2f 20 50 72 6f 70 65 72 74 69 65 73 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 61 73 20 64 6f 6d 2d 73 74 79 6c 65 20 63 61 6d 65 6c 63 61 73 65 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 60 62 6f 78 2d 73 69 7a 69 6e 67 60 20 68 79 70 65 6e 74 61 74 65 64 20 73 74 79 6c 65 2e 0a 20 20 20 20 2f 2f 20 52 65 74 75 72 6e 20 76 61 6c 75 65 73 20 77 69 6c 6c 20 61 6c 73 6f 20 62 65 20 74 68 65 20 63 61 6d 65 6c 43 61 73 65 20 76 61 72 69 61 6e 74 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 68 61 74 20 Data Ascii: our input // Modernizr.prefixed('boxSizing') // 'MozBoxSizing' // Properties must be passed as dom-style camelcase, rather than `box-sizing` hypentated style. // Return values will also be the camelCase variant, if you need to translate that

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	61740	104.17.247.203	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:47 UTC	880	OUT	GET /petite-vue HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:47 UTC	524	IN	HTTP/1.1 302 Found Date: Tue, 31 Dec 2024 08:00:47 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /petite-vue@0.4.1 vary: Accept via: 1.1 fly.io fly-request-id: 01JGDVH0PJM42ENQRPJBEZQ347-lga CF-Cache-Status: HIT Age: 183 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fa8bcea0e9e1875-EWR
2024-12-31 08:00:47 UTC	45	IN	Data Raw: 32 37 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 0d 0a Data Ascii: 27Found. Redirecting to /petite-vue@0.4.1
2024-12-31 08:00:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	61741	18.173.205.111	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:47 UTC	428	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:48 UTC	14593	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Date: Tue, 31 Dec 2024 08:00:47 GMT Last-Modified: Thu, 23 May 2024 17:10:02 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e787a68a5271d06ea7b7e56fa6886dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: -MnrCm8rfHlsBy6m7RFRHnu71GNZXBAJfghanOK_gYndxd2w45rNDA== Age: 2
2024-12-31 08:00:48 UTC	1306	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 45 6c 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 6f 64 29 2c 0a 20 20 20 20 6d 53 74 79 6c 65 20 3d 20 6d 6f 64 45 6c 65 6d 2e 73 74 79 6c 65 2c 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 43 72 65 61 74 65 20 74 68 65 20 69 6e 70 75 74 20 65 6c 65 6d 65 6e 74 20 66 6f 72 20 76 61 72 69 6f 75 73 20 57 65 62 20 46 6f 72 6d 73 20 66 65 61 74 75 72 65 20 74 65 73 74 73 2e 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6e 70 75 74 27 29 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 2c 0a 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 20 20 20 20 73 6d Data Ascii: Elem = document.createElement(mod), mStyle = modElem.style, /** * Create the input element for various Web Forms feature tests. / inputElem />>inputelem/ = document.createElement('input') />>inputelem/ , />>smile*/ sm
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 20 74 65 73 74 73 5b 27 77 65 62 73 6f 63 6b 65 74 73 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 57 65 62 53 6f 63 6b 65 74 27 20 69 6e 20 77 69 6e 64 6f 77 20 7c 7c 20 27 4d 6f 7a 57 65 62 53 6f 63 6b 65 74 27 20 69 6e 20 77 69 6e 64 6f 77 3b 0a 20 20 20 20 7d 3b 0a 0a 0a 20 20 20 20 2f 2f 20 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 2f 72 67 62 61 2d 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 2f 0a 20 20 20 20 74 65 73 74 73 5b 27 72 67 62 61 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 61 6e 20 72 67 62 61 28 29 20 63 6f 6c 6f 72 20 61 6e 64 20 63 68 65 63 6b 20 74 68 65 20 72 65 74 75 72 6e 65 64 20 76 61 6c 75 65 0a 0a 20 20 20 20 20 20 Data Ascii: tests['websockets'] = function() { return 'WebSocket' in window \|\| 'MozWebSocket' in window; }; // css-tricks.com/rgba-browser-support/ tests['rgba'] = function() { // Set an rgba() color and check the returned value
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 65 61 74 75 72 65 4e 61 6d 65 20 20 3d 20 66 65 61 74 75 72 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 5b 66 65 61 74 75 72 65 4e 61 6d 65 5d 20 3d 20 74 65 73 74 73 5b 66 65 61 74 75 72 65 5d 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 65 73 2e 70 75 73 68 28 28 4d 6f 64 65 72 6e 69 7a 72 5b 66 65 61 74 75 72 65 4e 61 6d 65 5d 20 3f 20 27 27 20 3a 20 27 6e 6f 2d 27 29 20 2b 20 66 65 61 74 75 72 65 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 20 20 20 20 2f 2f 20 69 6e 70 75 74 20 74 65 73 74 73 20 6e 65 65 64 20 74 6f 20 72 75 6e 2e 0a Data Ascii: . featureName = feature.toLowerCase(); Modernizr[featureName] = tests[feature](); classes.push((Modernizr[featureName] ? '' : 'no-') + featureName); } } />>webforms/ // input tests need to run.
2024-12-31 08:00:48 UTC	906	IN	Data Raw: 27 20 20 20 20 20 3a 20 27 4d 53 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 27 2c 0a 20 20 20 20 2f 2f 20 20 20 20 20 20 20 27 74 72 61 6e 73 69 74 69 6f 6e 27 20 20 20 20 20 20 20 3a 20 27 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 27 0a 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 0a 20 20 20 20 2f 2f 20 20 20 20 20 74 72 61 6e 73 45 6e 64 45 76 65 6e 74 4e 61 6d 65 20 3d 20 74 72 61 6e 73 45 6e 64 45 76 65 6e 74 4e 61 6d 65 73 5b 20 4d 6f 64 65 72 6e 69 7a 72 2e 70 72 65 66 69 78 65 64 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 29 20 5d 3b 0a 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 70 72 65 66 69 78 65 64 20 20 20 20 20 20 3d 20 66 75 6e 63 74 69 6f 6e 28 70 72 6f 70 2c 20 6f 62 6a 2c 20 65 6c 65 6d 29 7b 0a 20 20 20 20 20 20 69 66 28 21 6f 62 6a 29 20 7b 0a 20 20 Data Ascii: ' : 'MSTransitionEnd', // 'transition' : 'transitionend' // }, // transEndEventName = transEndEventNames[ Modernizr.prefixed('transition') ]; Modernizr.prefixed = function(prop, obj, elem){ if(!obj) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	61742	18.173.205.111	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:48 UTC	383	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:48 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 19 Dec 2024 17:48:28 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FyPJp3w4jkxkJyEC2B08wkOZntFsxSPq Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Tue, 31 Dec 2024 08:00:47 GMT ETag: "d5e3158e82340391e333de30349bb337" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 4966f878e5166e8661305465727dd124.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: wOzLcRv9yipeBUhqQKdALt8Da-WE1tEKnzjWfHxJJcdfGCFwj6rt3A== Age: 1
2024-12-31 08:00:48 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	61743	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:48 UTC	440	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:48 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:48 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Thu, 19 Dec 2024 18:38:00 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-12-31 08:00:48 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-12-31 08:00:48 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2024-12-31 08:00:48 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	61744	104.17.247.203	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:48 UTC	886	OUT	GET /petite-vue@0.4.1 HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:48 UTC	544	IN	HTTP/1.1 302 Found Date: Tue, 31 Dec 2024 08:00:48 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 location: /petite-vue@0.4.1/dist/petite-vue.iife.js vary: Accept via: 1.1 fly.io fly-request-id: 01JBPBV1J08R1Z3M7YCBKXECQG-lga CF-Cache-Status: HIT Age: 5083352 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fa8bcee0bbd7285-EWR
2024-12-31 08:00:48 UTC	69	IN	Data Raw: 33 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 2f 64 69 73 74 2f 70 65 74 69 74 65 2d 76 75 65 2e 69 69 66 65 2e 6a 73 0d 0a Data Ascii: 3fFound. Redirecting to /petite-vue@0.4.1/dist/petite-vue.iife.js
2024-12-31 08:00:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	61745	104.17.247.203	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:48 UTC	910	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:48 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 619163 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fa8bcf1ca3c7c82-EWR
2024-12-31 08:00:48 UTC	794	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: me();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retur
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b 6a Data Ascii: udes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];j
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c 5f Data Ascii: (e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,_
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 65 Data Ascii: r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(e
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 6c Data Ascii: n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");el
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d 65 Data Ascii: e.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextme
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 Data Ascii: .type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{cons
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 72 Data Ascii: [\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].tr
2024-12-31 08:00:48 UTC	1369	IN	Data Raw: 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 29 Data Ascii: !==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	61746	104.17.246.203	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:49 UTC	373	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:49 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 619164 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fa8bcf65bc1de95-EWR
2024-12-31 08:00:49 UTC	794	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: me();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retur
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b 6a Data Ascii: udes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];j
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c 5f Data Ascii: (e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,_
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 65 Data Ascii: r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(e
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 6c Data Ascii: n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");el
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d 65 Data Ascii: e.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextme
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 Data Ascii: .type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{cons
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 72 Data Ascii: [\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].tr
2024-12-31 08:00:49 UTC	1369	IN	Data Raw: 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 29 Data Ascii: !==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	61747	18.173.205.111	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:50 UTC	430	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:50 UTC	14595	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Date: Tue, 31 Dec 2024 08:00:47 GMT Last-Modified: Thu, 23 May 2024 17:09:54 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a7cd2920ac4cbceb2a8f9a130562a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: KMWt0LpLSmuI0M9Q8OqpxIvs-G1XhtNoDSmoWgm2D4BO8c55oJRK4A== Age: 4
2024-12-31 08:00:50 UTC	1789	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-12-31 08:00:50 UTC	7160	IN	Data Raw: 20 7b 0a 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 Data Ascii: {// The jQuery object is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make s
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 6f 66 74 20 66 6f 72 67 6f 74 20 74 6f 20 68 75 6d 70 20 74 68 65 69 72 20 76 65 6e 64 6f 72 20 70 72 65 66 69 78 20 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d Data Ascii: oft forgot to hump their vendor prefix (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() =
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 6e 20 64 69 66 66 3b 0a 09 7d 0a 0a 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 62 20 66 6f 6c 6c 6f 77 73 20 61 0a 09 69 66 20 28 20 63 75 72 20 29 20 7b 0a 09 09 77 68 69 6c 65 20 28 20 28 63 75 72 20 3d 20 63 75 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 20 29 20 7b 0a 09 09 09 69 66 20 28 20 63 75 72 20 3d 3d 3d 20 62 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 2d 31 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 61 20 3f 20 31 20 3a 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 74 75 72 6e 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 75 73 65 20 69 6e 20 70 73 65 75 64 6f 73 20 66 6f 72 20 69 6e 70 75 74 20 74 79 70 65 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 74 79 70 65 0a 20 2a 2f 0a 66 75 6e 63 74 Data Ascii: n diff;}// Check if b follows aif ( cur ) {while ( (cur = cur.nextSibling) ) {if ( cur === b ) {return -1;}}}return a ? 1 : -1;}/** * Returns a function to use in pseudos for input types * @param {String} type */funct
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 73 20 28 6a 51 75 65 72 79 20 23 31 31 31 35 33 29 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 2f 2f 20 54 72 61 76 65 72 73 65 20 69 74 73 20 63 68 69 6c 64 72 65 6e 0a 09 09 09 66 6f 72 20 28 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 66 69 72 73 74 43 68 69 6c 64 3b 20 65 6c 65 6d 3b 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 6e 65 78 74 53 69 62 6c 69 6e 67 20 29 20 7b 0a 09 09 09 09 72 65 74 20 2b 3d 20 67 65 74 54 65 78 74 28 20 65 6c 65 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6e 6f 64 65 54 Data Ascii: s (jQuery #11153)if ( typeof elem.textContent === "string" ) {return elem.textContent;} else {// Traverse its childrenfor ( elem = elem.firstChild; elem; elem = elem.nextSibling ) {ret += getText( elem );}}} else if ( nodeT
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 29 3b 0a 09 09 09 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 0a 09 09 09 09 76 61 6c 75 65 3a 20 6d 61 74 63 68 65 64 2c 0a 09 09 09 09 2f 2f 20 43 61 73 74 20 64 65 73 63 65 6e 64 61 6e 74 20 63 6f 6d 62 69 6e 61 74 6f 72 73 20 74 6f 20 73 70 61 63 65 0a 09 09 09 09 74 79 70 65 3a 20 6d 61 74 63 68 5b 30 5d 2e 72 65 70 6c 61 63 65 28 20 72 74 72 69 6d 2c 20 22 20 22 20 29 0a 09 09 09 7d 29 3b 0a 09 09 09 73 6f 46 61 72 20 3d 20 73 6f 46 61 72 2e 73 6c 69 63 65 28 20 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 46 69 6c 74 65 72 73 0a 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 45 78 70 72 2e 66 69 6c 74 65 72 20 29 20 7b 0a 09 09 09 69 66 20 28 20 28 6d 61 74 63 68 20 3d 20 6d 61 74 63 68 45 78 70 72 5b 20 74 79 70 Data Ascii: );tokens.push({value: matched,// Cast descendant combinators to spacetype: match[0].replace( rtrim, " " )});soFar = soFar.slice( matched.length );}// Filtersfor ( type in Expr.filter ) {if ( (match = matchExpr[ typ
2024-12-31 08:00:50 UTC	6056	IN	Data Raw: 69 73 58 4d 4c 20 29 20 7b 0a 09 09 69 66 20 28 20 21 69 73 58 4d 4c 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 22 69 6e 70 75 74 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 7d 0a 0a 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 0a 2f 2f 20 55 73 65 20 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 20 74 6f 20 66 65 74 63 68 20 62 6f 6f 6c 65 61 6e 73 20 77 68 65 6e 20 67 65 74 41 74 74 72 69 62 75 74 65 20 6c 69 65 73 0a 69 66 20 28 20 21 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 64 69 76 20 29 20 7b 0a 09 72 65 74 75 72 6e 20 64 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 Data Ascii: isXML ) {if ( !isXML && elem.nodeName.toLowerCase() === "input" ) {return elem.defaultValue;}});}// Support: IE<9// Use getAttributeNode to fetch booleans when getAttribute liesif ( !assert(function( div ) {return div.getAttribute("disa
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 66 20 28 20 65 6c 65 6d 2e 69 64 20 21 3d 3d 20 6d 61 74 63 68 5b 20 32 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 72 6f 6f 74 6a 51 75 65 72 79 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 2f 2f 20 4f 74 68 65 72 77 69 73 65 2c 20 77 65 20 69 6e 6a 65 63 74 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 64 69 72 65 63 74 6c 79 20 69 6e 74 6f 20 74 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 74 68 69 73 2e 63 6f 6e 74 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 3b 0a 09 09 09 09 09 74 68 69 73 2e 73 65 6c Data Ascii: f ( elem.id !== match[ 2 ] ) {return rootjQuery.find( selector );}// Otherwise, we inject the element directly into the jQuery objectthis.length = 1;this[ 0 ] = elem;}this.context = document;this.sel
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 65 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 64 65 74 61 63 68 45 76 65 6e 74 28 20 22 6f 6e 6c 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 09 7d 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 54 68 65 20 72 65 61 64 79 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 61 6e 64 20 73 65 6c 66 20 63 6c 65 61 6e 75 70 20 6d 65 74 68 6f 64 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 6c 65 74 65 64 28 29 20 7b 0a 0a 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 Data Ascii: oad", completed );} else {document.detachEvent( "onreadystatechange", completed );window.detachEvent( "onload", completed );}}/** * The ready event handler and self cleanup method */function completed() {// readyState === "complete" is
2024-12-31 08:00:50 UTC	16384	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 20 22 64 69 76 22 20 29 3b 0a 09 09 63 6f 6e 74 61 69 6e 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 22 64 69 76 22 20 29 3b 0a 09 09 63 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 3d 20 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 22 3b 0a 09 09 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 63 6f 6e 74 61 69 6e 65 72 20 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 64 69 76 20 29 3b 0a 0a 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 36 0a 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 65 6c 65 6d 65 6e 74 73 20 77 Data Ascii: eElement( "div" );container = document.createElement( "div" );container.style.cssText = "position:absolute;border:0;width:0;height:0;top:0;left:-9999px";body.appendChild( container ).appendChild( div );// Support: IE6// Check if elements w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	61748	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:50 UTC	963	OUT	GET /favicon.ico HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:50 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:50 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 19 Dec 2024 18:39:49 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	61749	34.241.139.243	443	5136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 08:00:51 UTC	365	OUT	GET /favicon.ico HTTP/1.1 Host: secure.encryptedconnection.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 08:00:51 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 08:00:51 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 19 Dec 2024 18:39:49 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Target ID:	0
Start time:	02:59:13
Start date:	31/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DIS_37745672.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	02:59:16
Start date:	31/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:59:16
Start date:	31/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2140 --field-trial-handle=1736,i,7585332165472003638,14988995419090937621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	03:00:37
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://https.docusign.click/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM3FVVzNRKzc0eHprUnczVkFiYkx5bVNoSVJzaG9ZRUZ6SGtpZFVDRGRUenRzaHc5dE53PT0tLUhpWE1JcHdLeWpxTFRHZVotLW80S2tVZjFFR1NmT0F0Vm9CWlFwSmc9PQ==?cid=304330850"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	03:00:38
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1972,i,3090987453707917928,8843376742662094765,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Input	Output
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This document is encrypted using Adobe Secure Cloud. Click below to securely view contents.", "prominent_button_name": "Secure Open", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secure.encryptedconnection.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://secure.encryptedconnection.net
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Adobe" ] }
	{ "brands": [ "Adobe" ] }
URL: https://secure.encryptedconnection.net/pages/c3955b1c48a/XU2pSemNWSVQ4NUVHSFcwOHNWR2tqQXIwQlhtZUdYMWM4TG16L0hCcmJ2cnVNZ0VnWHUvVlMyMXF5ZnpWanJIcmpLN05JdTFTMWg3RFJjb0l2QjBsR1pTNEo4TEcyQUVvYVA2L3JLRWY5RElKNXdBTzVHM1BoOGdkYnQ4Q05pdk5rd24xcFpRQ0ZoaitRL2sycXlxM Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DIS_37745672.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8c6bb17b-b32b-4478-92f4-d9645f1fa321.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241231075918Z-164.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Windows Analysis Report
DIS_37745672.pdf