Edit tour

Windows Analysis Report
statement.doc

Overview

General Information

Sample name:	statement.doc
Analysis ID:	1588122
MD5:	d749778720d0416ccbe31b6bf3c0ae64
SHA1:	4a6fc41b8c9a3e5d6acbfd52ba6eb22074e83828
SHA256:	db76c48ad49aa17226504d3bd11dab03b75563334dda9820ae6d84808806e58f
Infos:

Detection

KnowBe4

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Yara detected KnowBe4 simulated phishing

AI detected landing page (webpage, office document or email)

Contains an external reference to another file

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

WINWORD.EXE (PID: 8096 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1904,i,3743487018534020436,5630685548294061716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.10, DestinationIsIpv6: false, DestinationPort: 49756, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE, Initiated: true, ProcessId: 8096, Protocol: tcp, SourceIp: 3.231.74.234, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: Office document	Joe Sandbox AI: Page contains button: 'View in Browser' Source: 'Office document'
Source: Office document	Joe Sandbox AI: Office document contains prominent button: 'view in browser'
Source: Screenshot id: 14	Joe Sandbox AI: Page contains button: 'View in Browser' Source: 'Screenshot id: 14'
Source: Screenshot id: 14	Joe Sandbox AI: Screenshot id: 14 contains prominent button: 'view in browser'
Source: Screenshot id: 13	Joe Sandbox AI: Page contains button: 'View in Browser' Source: 'Screenshot id: 13'
Source: Screenshot id: 13	Joe Sandbox AI: Screenshot id: 13 contains prominent button: 'view in browser'
Source: Screenshot id: 12	Joe Sandbox AI: Page contains button: 'View in Browser' Source: 'Screenshot id: 12'
Source: Screenshot id: 12	Joe Sandbox AI: Screenshot id: 12 contains prominent button: 'view in browser'
Source: Screenshot id: 11	Joe Sandbox AI: Page contains button: 'View in Browser' Source: 'Screenshot id: 11'
Source: Screenshot id: 11	Joe Sandbox AI: Screenshot id: 11 contains prominent button: 'view in browser'

Source: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==

HTTP Parser: No favicon

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown

HTTPS traffic detected: 3.231.74.234:443 -> 192.168.2.10:49756 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 18.173.205.50 18.173.205.50
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.17.245.203 104.17.245.203

Source: Joe Sandbox View

JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3

Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267 HTTP/1.1Host: bofa.com-onlinebanking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing_pages/oops/styles.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1 HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XU1JaaXVOa0xXUnNCTDRhTTBhN2NSNzJpb3dKblhLV0NrMnVROUt0RGJSb3NadjJ6eEJSaGQvclFmaW9DRm1XSS9wd0JIQndIKzhxQ05UQzFId2RwVE9LS0NNL3IyZUNaUGtkekR0RkpuTTJsQ0Z4VmpkM0Ztd2Z4c21UNm13PT0tLVB1bFBtLzNuUkdaTE8yYk4tLTdMbllBc2lFeU1zeVlkY243REVyWnc9PQ==?cid=2046788267 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateHost: bofa.com-onlinebanking.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bofa.com-onlinebanking.com
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: helpimg.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com

Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://semver.org/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_133.10.dr, chromecache_128.10.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_130.10.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_136.10.dr	String found in binary or memory: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cF
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_130.10.dr	String found in binary or memory: https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf
Source: chromecache_130.10.dr	String found in binary or memory: https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8
Source: chromecache_130.10.dr	String found in binary or memory: https://training.knowbe4.com/packs/js/vendor-954761ad0dceb106b971.js
Source: chromecache_130.10.dr	String found in binary or memory: https://unpkg.com/petite-vue
Source: chromecache_126.10.dr	String found in binary or memory: https://utopia.fyi/type/calculator?c=320
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_132.10.dr, chromecache_134.10.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 3.231.74.234:443 -> 192.168.2.10:49756 version: TLS 1.2

System Summary

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Source: screenshot	OCR: enable Editing and Content to view this document. CAN'T VIEW THE DOCUMENT? FOLLOW THE STEPS BELOW: O
Source: screenshot	OCR: PROTECTED DOCUMENT This file is protected by Microsoft Office Document Lock. Please enable Editing a
Source: screenshot	OCR: Enable Content" on the yellow bar View in Browser * Browser View is a restricted view of the documen
Source: screenshot	OCR: enable Editing and Content to view this document. CAN'T VIEW THE DOCUMENT? FOLLOW THE STEPS BELOW: O
Source: screenshot	OCR: PROTECTED DOCUMENT This file is protected by Microsoft Office Document Lock. Please enable Editing a
Source: screenshot	OCR: Enable Content" on the yellow bar View in Browser * Browser View is a restricted view of the documen
Source: screenshot	OCR: enable Editing Content to this document. CAN'T VIEW THE DOCUMENT? FOLLO'.V THE STEPS BELOW: t" d.nt
Source: screenshot	OCR: enable Editing Content to this document. CAVT VIEW THE DOCUMENT? FOLLO'.V THE STEPS BELOW: t" d.nt
Source: screenshot	OCR: enable Editing Content to this document. CAVT VIEW THE DOCUMENT? FOLLO'.V THE STEPS BELOW: t" d. n
Source: screenshot	OCR: enable Editing Content to this document. CAVT VIEW THE DOCUMENT? FOLLO'.V THE STEPS BELOW: t" d. n
Source: screenshot	OCR: enable Editing Content to this document. CAN'T VIEW THE DOCUMENT? FOLLO'.V THE STEPS BELOW: t" d. n

Source: classification engine

Classification label: mal64.phis.evad.winDOC@20/32@24/12

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\Desktop\~$atement.doc

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{7C170555-E01B-4A3C-8187-958FE048EB7F} - OProcSessId.dat

Jump to behavior

Source: ~WRD0000.tmp.0.dr

OLE indicator, Word Document stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1904,i,3743487018534020436,5630685548294061716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1904,i,3743487018534020436,5630685548294061716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/media/image3.jpeg
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/_rels/numbering.xml.rels

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: ~WRD0000.tmp.0.dr

Initial sample: OLE indicators vbamacros = False

Persistence and Installation Behavior

Contains an external reference to another file

Source: document.xml.rels

Extracted files from sample: https://bofa.com-onlinebanking.com/xu1jaaxvoa0xxunnctdrhttbhn2nsnzjpb3dkblhlv0nrmnvrout0rgjsb3nadjj6eejsagqvclfmaw9drm1xss9wd0jiqndikzhxq05uqzfid2rwve9ls0nnl3iyzunaugtkekr0rkputtjsq0z4vmpkm0ztd2z4c21unm13pt0tlvb1bfbtlznuukdate8yyk4tltdmbllbc2lfeu1zevlky243revywnc9pq==?cid=2046788267

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	0%	Avira URL Cloud	safe
https://utopia.fyi/type/calculator?c=320	0%	Avira URL Cloud	safe
http://flightschool.acylt.com/devnotes/caret-position-woes/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	52.217.123.201	true	false	high
www.google.com	142.250.186.164	true	false	high
training.knowbe4.com	18.173.205.50	true	false	high
secured-login.net	34.193.6.123	true	false	high
unpkg.com	104.17.245.203	true	false	high
landing.training.knowbe4.com	3.231.74.234	true	false	high
helpimg.s3.amazonaws.com	unknown	unknown	false	high
bofa.com-onlinebanking.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false	high
https://unpkg.com/petite-vue	false	high
https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css	false	high
https://secured-login.net/favicon.ico	false	high
https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267	false	high
https://bofa.com-onlinebanking.com/XU1JaaXVOa0xXUnNCTDRhTTBhN2NSNzJpb3dKblhLV0NrMnVROUt0RGJSb3NadjJ6eEJSaGQvclFmaW9DRm1XSS9wd0JIQndIKzhxQ05UQzFId2RwVE9LS0NNL3IyZUNaUGtkekR0RkpuTTJsQ0Z4VmpkM0Ztd2Z4c21UNm13PT0tLVB1bFBtLzNuUkdaTE8yYk4tLTdMbllBc2lFeU1zeVlkY243REVyWnc9PQ==?cid=2046788267	false	high
https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_132.10.dr, chromecache_134.10.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/slide-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/moment/moment/issues/1423	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/accordion/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://stackoverflow.com/a/32954565/96342	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://stackoverflow.com/a/26707753	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jquery/jquery-color	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/position/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://pdfmake.org	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cF	chromecache_136.10.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_133.10.dr, chromecache_128.10.dr	false		high
http://api.jqueryui.com/button/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://blog.alexmaccaw.com/css-transitions	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://www.datatables.net	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://creativecommons.org/licenses/by/3.0/)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/slider/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://utopia.fyi/type/calculator?c=320	chromecache_126.10.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://stackoverflow.com/q/181348	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_132.10.dr, chromecache_134.10.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/rails/jquery-ujs	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://www.robertpenner.com/easing)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_134.10.dr	false		high
http://jqueryui.com/datepicker/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://datatables.net/license	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/menu/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/checkboxradio/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/controlgroup/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/widget/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/category/effects-core/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jqueryui.com/tooltip/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/selectmenu/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/shake-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://modernizr.com/)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://api.jquery.com/jQuery.ajax/)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_132.10.dr, chromecache_134.10.dr	false		high
http://jsperf.com/thor-indexof-vs-for/5	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/uxsolutions/bootstrap-datepicker)	chromecache_132.10.dr, chromecache_134.10.dr	false		high
https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js	chromecache_132.10.dr, chromecache_134.10.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.231.74.234	landing.training.knowbe4.com	United States	14618	AMAZON-AESUS	false
52.217.123.201	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
18.173.205.50	training.knowbe4.com	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
34.193.6.123	secured-login.net	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.10
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588122
Start date and time:	2025-01-10 21:00:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	statement.doc
Detection:	MAL
Classification:	mal64.phis.evad.winDOC@20/32@24/12
Cookbook Comments:	Found application associated with file extension: .doc Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267 Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, Runtimeuserer.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.76.240, 52.113.194.132, 2.23.242.162, 199.232.214.172, 52.111.236.35, 52.111.236.34, 52.111.236.32, 52.111.236.33, 20.189.173.2, 2.20.245.216, 2.20.245.225, 52.109.32.7, 216.58.212.163, 108.177.15.84, 142.250.186.110, 142.250.181.238, 172.217.18.110, 142.250.186.142, 52.109.28.47, 142.250.185.142, 142.250.185.110, 216.58.212.142, 142.250.184.206, 142.250.186.78, 142.250.181.227, 142.250.185.206, 172.217.16.142, 172.217.18.14, 142.250.186.46, 216.58.212.174, 40.126.31.67, 20.109.210.53, 173.222.162.55
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, templatesmetadata.office.net.edgekey.net, clientservices.googleapis.com, osiprod-ukw-buff-azsc-000.ukwest.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, eur.roaming1.live.com.akadns.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, clients2.google.com, redirector.gvt1.com, login.live.com, e16604.g.akamaiedge.net, update.googleapis.com, officeclient.microsoft.com, templatesmetadata.office.net, prod.fs.microsoft.com.akadns.net, clients1.google.com, www.bing.com, ecs.office.com, self-events-data.trafficmanager.net, ukw-azsc-000.roaming.officeapps.live.com, fs.microsoft.com, accounts.google.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, osiprod-uks-buff-azsc-000.uksouth.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, prod1.natural
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: Office document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "MICROSOFT WORD - PROTECTED DOCUMENT", "prominent_button_name": "View in Browser", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Office document Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "Office 365" ] }
	{ "brands": [ "Microsoft", "Office 365" ] }
URL: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5V Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5V Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://secured-login.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://secured-login.net
URL: Screenshot id: 14 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "CAN'T VIEW THE DOCUMENT? FOLLOW THE STEPS BELOW:", "prominent_button_name": "View in Browser", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 11 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "MICROSOFT WORD - PROTECTED DOCUMENT", "prominent_button_name": "View in Browser", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 12 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "MICROSOFT WORD - PROTECTED DOCUMENT", "prominent_button_name": "View in Browser", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 13 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "CAN'T VIEW THE DOCUMENT? FOLLOW THE STEPS BELOW:", "prominent_button_name": "View in Browser", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: Screenshot id: 14 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Office 365" ] }
	{ "brands": [ "Microsoft Office 365" ] }
URL: Screenshot id: 13 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Office 365" ] }
	{ "brands": [ "Microsoft Office 365" ] }
URL: Screenshot id: 12 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Office 365" ] }
	{ "brands": [ "Microsoft Office 365" ] }
URL: Screenshot id: 11 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Office 365" ] }
	{ "brands": [ "Microsoft Office 365" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
3.231.74.234	ID_Badge_Policy.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse
	https://temp.farenheit.net/XZ1ZEKzFsR0pndUdHTEgydlg4dElJdnYwT0hjRkpzdVVSUm1ub0VGNFQ3Y0ZmKzFxM3I2dUJxaTkwbXEvV1dSWUM0MG5LUitrcGV2THJ0Q2o4cWUvRGxkd1l4MmcySE41YUtFUHo4RzZXM014SWRPampra2ZwMVVWNGhFTGh4WW9NU3BQaCtFRUFTMXdkc2ZiNUdhS284ek8xMTVuaS9UdExEa3lOT2hoa3R4SGg1bFIra241ZE02M1pDRVdDWVN2U3QraDRvZEVVOUMyM1J1Y1pHbGJiZ2Y1b1c4TGIxakFzVWhuc0E9PS0td2twbkU5Q0xKY3VWbzc3Ny0tQW5QTkZPazI2ajU5aTJUSjlRQkZtZz09?cid=2308276481	Get hash	malicious	KnowBe4	Browse
	https://report-scam.malwarebouncer.com/XcUR2TnV2VTlXT0s0Z0NYa01KSGt3dUtWMWNiblBrc29mMlpZUU1WdThBSjdDdTlRQTVDV1ZZd0pDeWRmUU5rQ1QvVDNiSlBNYWd2bTd0eTRkZW5jT0hrYTBKWHFiVUc4TVZBOGpiNkh4VG9OTm9zNTVUWHNmNWVydHpqbzhIc1llSzdzTHZ0dENVNWRLZy9BbCsyVDRMSGRHOThUWnV5QUxPU0RZL1dPalNYTmUzMTVoRzl5bmk1ZVZRPT0tLUdVYnJkMC9GazI3MWlxYmotLUpFOURyOWkzK1l6Vy9BYTVOVDBVNkE9PQ==?cid=2346401253	Get hash	malicious	KnowBe4	Browse
239.255.255.250	https://glfbanks.com/	Get hash	malicious	HTMLPhisher	Browse
	https://patiooutletmaipu.cl/tiendas/head/	Get hash	malicious	LummaC, CAPTCHA Scam ClickFix, LummaC Stealer	Browse
	Bontrageroutdoors_Project_Update_202557516.pdf	Get hash	malicious	Unknown	Browse
	https://probashkontho.com/work/Organization/privacy/index_.html	Get hash	malicious	Unknown	Browse
	invoice_AG60538.pdf	Get hash	malicious	Unknown	Browse
	Message 2.eml	Get hash	malicious	Unknown	Browse
	https://dealercentre-motors.com/Renew?token=rd7KFGQiWHN5fdeW9xVetypjNX+7andTyaRPuAtpwL49FW9spsyAYu6kh0+Wtf9e6cMnzcEQYPWTOlNjS28UUWxZC+qryuqeliCImBydUuanDA6M7TisVBnU1PpRIBmoJhhW+vPQVQlFrAfSGIFu1w==&error=invalid_scope	Get hash	malicious	Phisher	Browse
	Message.eml	Get hash	malicious	Unknown	Browse
	https://news.mortgagesolutionswithsynergy.com/n/?c3Y9bzM2NV8xX29uZSZyYW5kPVlXRnhjSFE9JnVpZD1VU0VSMTkxMjIwMjRVMzcxMjE5Mjc=N0123N	Get hash	malicious	Unknown	Browse
	https://eu2.contabostorage.com/69e36f1a5de941bb877627f90e79fd6d:gip/document.html#phishme@arrowbank.com	Get hash	malicious	HTMLPhisher	Browse
104.17.245.203	https://combatironapparel.com/collections/ranger-panty-shorts	Get hash	malicious	Unknown	Browse
	http://www.hillviewlodge.hotelrent.top	Get hash	malicious	Unknown	Browse
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	http://www.delinian.com	Get hash	malicious	Unknown	Browse
	Yogi Tea Benefits Open Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse
	https://businessnotice.org/dhl/22450156620/tracking?u=84775-c0bf6be57168918ea5fe039631be6c3a772f4fac11292328fca4a210ba0e8890	Get hash	malicious	Unknown	Browse
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
18.173.205.50	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse
	https://temp.farenheit.net/XZ1ZEKzFsR0pndUdHTEgydlg4dElJdnYwT0hjRkpzdVVSUm1ub0VGNFQ3Y0ZmKzFxM3I2dUJxaTkwbXEvV1dSWUM0MG5LUitrcGV2THJ0Q2o4cWUvRGxkd1l4MmcySE41YUtFUHo4RzZXM014SWRPampra2ZwMVVWNGhFTGh4WW9NU3BQaCtFRUFTMXdkc2ZiNUdhS284ek8xMTVuaS9UdExEa3lOT2hoa3R4SGg1bFIra241ZE02M1pDRVdDWVN2U3QraDRvZEVVOUMyM1J1Y1pHbGJiZ2Y1b1c4TGIxakFzVWhuc0E9PS0td2twbkU5Q0xKY3VWbzc3Ny0tQW5QTkZPazI2ajU5aTJUSjlRQkZtZz09?cid=2308276481	Get hash	malicious	KnowBe4	Browse
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse
	https://report-scam.malwarebouncer.com/XcUR2TnV2VTlXT0s0Z0NYa01KSGt3dUtWMWNiblBrc29mMlpZUU1WdThBSjdDdTlRQTVDV1ZZd0pDeWRmUU5rQ1QvVDNiSlBNYWd2bTd0eTRkZW5jT0hrYTBKWHFiVUc4TVZBOGpiNkh4VG9OTm9zNTVUWHNmNWVydHpqbzhIc1llSzdzTHZ0dENVNWRLZy9BbCsyVDRMSGRHOThUWnV5QUxPU0RZL1dPalNYTmUzMTVoRzl5bmk1ZVZRPT0tLUdVYnJkMC9GazI3MWlxYmotLUpFOURyOWkzK1l6Vy9BYTVOVDBVNkE9PQ==?cid=2346401253	Get hash	malicious	KnowBe4	Browse
	PersonnelPolicies.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	https://employeeportal.net-login.com/XWmdEa2M3cG9qbFFscFFDWFJLaHNDY01aQld4d21wWlQzZmF5ZS9hYVNYZEZIaERhTEkzYzBqUG9QQUNndUlsN3RVVkR6Wm8rTHB6aElCK2trYVZUZTJxZ0MzeVNkclN4VXU1bnM2bWxDWC9nUTlPdmRNaEFVTitwZ3FVV2xTTW5PM280cWh5SndCVmszeS9Gc1plZFpySzNOZ2NRNytNNHZ2NE01bm9oaVc1MkxBYlJUdUNDdEh6a2xnPT0tLTZJVU5NYmFlOWd4aFhGKzktLUREbzR5UTlENTl6b05iaXJWSWdnamc9PQ==?cid=2284870608	Get hash	malicious	KnowBe4	Browse
	https://welsfargo.com-onlinebanking.com/Xb1ExYUR6VXl0bGxmVDdXaVpyTzlKZUtudEIxbGsxOGY1VzhSNFZvZVlFTDk5T0c2Q25PS3hwcEYrL1dZdG8vVzZIUS9mVHczWklvQ1R0U1ZXaVN0L2RuN0VIbklqdzFUWVROV3E4ZnVldDhWUmZ3RDRZWmFKY0ZJOUlTWWlqWHVxNDlVTUYxYVFDQ1dBWTd0bzVKbGIrL25HZVVOTHNSMnNBcGJuaVRrZW82VHY3RVlnYThxbUpLN2lBPT0tLTRmTmYwUzZkLzlIS1VWQ2otLVNXQlpnWjRKZDUxaGNXQmpCWksyN3c9PQ==?cid=2251351141	Get hash	malicious	KnowBe4	Browse
	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
unpkg.com	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	104.17.246.203
	http://infarmbureau.com	Get hash	malicious	Unknown	Browse	104.17.249.203
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	104.17.248.203
	https://ccml.io/	Get hash	malicious	Unknown	Browse	104.17.248.203
	https://combatironapparel.com/collections/ranger-panty-shorts	Get hash	malicious	Unknown	Browse	104.17.245.203
	colleague[1].htm	Get hash	malicious	Unknown	Browse	104.17.248.203
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	104.17.247.203
	http://www.hillviewlodge.hotelrent.top	Get hash	malicious	Unknown	Browse	104.17.246.203
	https://temp.farenheit.net/XZ1ZEKzFsR0pndUdHTEgydlg4dElJdnYwT0hjRkpzdVVSUm1ub0VGNFQ3Y0ZmKzFxM3I2dUJxaTkwbXEvV1dSWUM0MG5LUitrcGV2THJ0Q2o4cWUvRGxkd1l4MmcySE41YUtFUHo4RzZXM014SWRPampra2ZwMVVWNGhFTGh4WW9NU3BQaCtFRUFTMXdkc2ZiNUdhS284ek8xMTVuaS9UdExEa3lOT2hoa3R4SGg1bFIra241ZE02M1pDRVdDWVN2U3QraDRvZEVVOUMyM1J1Y1pHbGJiZ2Y1b1c4TGIxakFzVWhuc0E9PS0td2twbkU5Q0xKY3VWbzc3Ny0tQW5QTkZPazI2ajU5aTJUSjlRQkZtZz09?cid=2308276481	Get hash	malicious	KnowBe4	Browse	104.17.248.203
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse	104.17.247.203
secured-login.net	ID_Badge_Policy.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	54.87.176.87
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	3.231.74.234
	PaymentAdvice.html	Get hash	malicious	KnowBe4	Browse	34.195.197.181
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse	34.193.120.146
	https://report-scam.malwarebouncer.com/XcUR2TnV2VTlXT0s0Z0NYa01KSGt3dUtWMWNiblBrc29mMlpZUU1WdThBSjdDdTlRQTVDV1ZZd0pDeWRmUU5rQ1QvVDNiSlBNYWd2bTd0eTRkZW5jT0hrYTBKWHFiVUc4TVZBOGpiNkh4VG9OTm9zNTVUWHNmNWVydHpqbzhIc1llSzdzTHZ0dENVNWRLZy9BbCsyVDRMSGRHOThUWnV5QUxPU0RZL1dPalNYTmUzMTVoRzl5bmk1ZVZRPT0tLUdVYnJkMC9GazI3MWlxYmotLUpFOURyOWkzK1l6Vy9BYTVOVDBVNkE9PQ==?cid=2346401253	Get hash	malicious	KnowBe4	Browse	34.193.6.123
	https://covid19.protected-forms.com/XQTNkY0hwMkttOEdiZmZ0V2RRTHpDdDNqUTROanhES0NBYmdFOG1KTGRSTUtrK3VMMzlEN1JKVVFXNUxaNGJOQmd1YzQ3ajJMeVdZUDU3TytRbGtIaFhWRkxnT0lkeTZhdy9xWEhjeFBoRXRTb2hxdjlVbi9iSk1qZytLQ0JxRjd4UmpOS3VUQ2lpOEZneTRoVmpzY2dyekR1WlhYOWVteVcrUXg0a2Y2aEU2ZEZwMVNId3R0U01RK3N3PT0tLVR0bDl1WEFUelg3K2VzTystLUxaMkFrZnU0UmJXRkR3aE5NRE9BOEE9PQ==?cid=2351432832	Get hash	malicious	KnowBe4	Browse	3.82.68.124
	https://password-changes.phishwall.net/XMzUzaXgwTnBGZU9XbU9kQnFIZk0vQ3hhQlNtUXJwaExCOTNDYnhpMG92ZHRNQjI5SHhmNUlLTC9JcmVVS2sraDgvUVZtd2YwVFROeGxlbDR0UXBkeGJOUkN3UGliUUNGVHZXWVJ2ek5hZ0FNV290djROWFRxN3JNazM1WlhNOUVLdnlqOEVlbXFaaFROMlltRDFFKzhmU3A0eEl4cE1tMFJmazVYOE5hc25oTjNIR0Q1UzJyNW5wTkNBPT0tLUdCVnp5RnltanNuQnVQWkgtLVA0Uy9TcENHeDltOGdwd282cnZiaEE9PQ==?cid=2317630324	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	52.203.6.0
	https://employeeportal.net-login.com/XL0pFWEloTnBYUmM5TnBUSmVpbWxiSUpWb3BBL1lPY1hwYU5uYktNWkd5ME82bWJMcUhoRklFUWJiVmFOUi9uUS81dGZ4dnJZYkltK2NMZG5BV1pmbFhqMXNZcm1QeXBXTXI4R090NHo5NWhuL2l4TXdxNlY4VlZxWHVPNTdnc1M3aU4xWjhFTmJiTEJWVUYydWVqZjNPbnFkM3M5T0FNQ2lRL3EySjhvdVVDNzZ2UHJQb0xQdlhZbTZRPT0tLTJaT0Z2TlJ3S0NMTTZjc2ktLTZGNUIwRnVkbFRTTHR2dUFITkcxVFE9PQ==?cid=2341891188	Get hash	malicious	KnowBe4	Browse	3.88.121.169
	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	54.209.230.227
s3-w.us-east-1.amazonaws.com	ID_Badge_Policy.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	3.5.12.180
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	3.5.11.17
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	52.217.197.209
	PaymentAdvice.html	Get hash	malicious	KnowBe4	Browse	54.231.227.161
	https://combatironapparel.com/collections/ranger-panty-shorts	Get hash	malicious	Unknown	Browse	52.216.200.219
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	52.217.129.57
	http://plnbl.io/review/VdCYQSoKp54z	Get hash	malicious	HTMLPhisher	Browse	52.217.170.145
	https://hallmark.greetingsweb.com/2865d1125997389a?l=22	Get hash	malicious	Unknown	Browse	3.5.25.233
	https://temp.farenheit.net/XZ1ZEKzFsR0pndUdHTEgydlg4dElJdnYwT0hjRkpzdVVSUm1ub0VGNFQ3Y0ZmKzFxM3I2dUJxaTkwbXEvV1dSWUM0MG5LUitrcGV2THJ0Q2o4cWUvRGxkd1l4MmcySE41YUtFUHo4RzZXM014SWRPampra2ZwMVVWNGhFTGh4WW9NU3BQaCtFRUFTMXdkc2ZiNUdhS284ek8xMTVuaS9UdExEa3lOT2hoa3R4SGg1bFIra241ZE02M1pDRVdDWVN2U3QraDRvZEVVOUMyM1J1Y1pHbGJiZ2Y1b1c4TGIxakFzVWhuc0E9PS0td2twbkU5Q0xKY3VWbzc3Ny0tQW5QTkZPazI2ajU5aTJUSjlRQkZtZz09?cid=2308276481	Get hash	malicious	KnowBe4	Browse	3.5.27.246
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse	3.5.25.32
training.knowbe4.com	ID_Badge_Policy.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	3.231.74.234
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	3.231.74.234
	PaymentAdvice.html	Get hash	malicious	KnowBe4	Browse	3.213.222.32
	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	18.173.205.50
	https://bofa.com-onlinebanking.com/XUjhZMU0zUjZ5aGd6UDcrVXphQlM3REhqSnRiYmJRdDFWRFQvTXlWOEI4SVFWU1lnMmdOV3J2dzcrYlBXU2FRMzNGenI3ZlZ3Z296ZUJrN3lDMEZoTFFDTUg4NUcvRmcwZmVEQnk1bUo1UHRTczJhb2FrZitRWXpWUHZTd2F6VzlKdmhsNU51TU1DR3F3SFY5OWk0OEpxaWtndjZDcDVoVkdJTGlLenlTTjdyOHpTUDRia3pYeHRXWW4zSTRrdFZsMVlUWXNrY0RhbzZsR0wrTXpoVmt	Get hash	malicious	Unknown	Browse	3.220.156.219
	https://temp.farenheit.net/XZ1ZEKzFsR0pndUdHTEgydlg4dElJdnYwT0hjRkpzdVVSUm1ub0VGNFQ3Y0ZmKzFxM3I2dUJxaTkwbXEvV1dSWUM0MG5LUitrcGV2THJ0Q2o4cWUvRGxkd1l4MmcySE41YUtFUHo4RzZXM014SWRPampra2ZwMVVWNGhFTGh4WW9NU3BQaCtFRUFTMXdkc2ZiNUdhS284ek8xMTVuaS9UdExEa3lOT2hoa3R4SGg1bFIra241ZE02M1pDRVdDWVN2U3QraDRvZEVVOUMyM1J1Y1pHbGJiZ2Y1b1c4TGIxakFzVWhuc0E9PS0td2twbkU5Q0xKY3VWbzc3Ny0tQW5QTkZPazI2ajU5aTJUSjlRQkZtZz09?cid=2308276481	Get hash	malicious	KnowBe4	Browse	3.231.74.234
	https://gmail.net-login.com/XcXRYNDdyQ3ZtSld4UE4wVUJrekFCdThLQ2ZDbXJubWlkcy85YXZZRFpSOGRHZ0lqc1lEVlJhUFJ4T1JpVkZYRHlPM2luOWZsUlg0akRFL0JzN3BQNEMzS2I3QUtSaG9zWXhKL1R0cG5TcEV6YUpSMkZRT1BkNGd1eVg1eHFjTW5CbVFQV0l5RXdmVG9qV2tod3dRS0ZpbkcvY3EwZk91cnM4R003RE1ESDZkNUoxOTZyTTZQcEExKy0tVmRVQklXeHltU1Jqc0VOaS0tMDhlR1IwQTdzanVybEhTdHNlbmhsZz09?cid=2354608568	Get hash	malicious	KnowBe4	Browse	18.239.36.65
	https://report-scam.malwarebouncer.com/XcUR2TnV2VTlXT0s0Z0NYa01KSGt3dUtWMWNiblBrc29mMlpZUU1WdThBSjdDdTlRQTVDV1ZZd0pDeWRmUU5rQ1QvVDNiSlBNYWd2bTd0eTRkZW5jT0hrYTBKWHFiVUc4TVZBOGpiNkh4VG9OTm9zNTVUWHNmNWVydHpqbzhIc1llSzdzTHZ0dENVNWRLZy9BbCsyVDRMSGRHOThUWnV5QUxPU0RZL1dPalNYTmUzMTVoRzl5bmk1ZVZRPT0tLUdVYnJkMC9GazI3MWlxYmotLUpFOURyOWkzK1l6Vy9BYTVOVDBVNkE9PQ==?cid=2346401253	Get hash	malicious	KnowBe4	Browse	3.231.74.234
	https://covid19.protected-forms.com/XQTNkY0hwMkttOEdiZmZ0V2RRTHpDdDNqUTROanhES0NBYmdFOG1KTGRSTUtrK3VMMzlEN1JKVVFXNUxaNGJOQmd1YzQ3ajJMeVdZUDU3TytRbGtIaFhWRkxnT0lkeTZhdy9xWEhjeFBoRXRTb2hxdjlVbi9iSk1qZytLQ0JxRjd4UmpOS3VUQ2lpOEZneTRoVmpzY2dyekR1WlhYOWVteVcrUXg0a2Y2aEU2ZEZwMVNId3R0U01RK3N3PT0tLVR0bDl1WEFUelg3K2VzTystLUxaMkFrZnU0UmJXRkR3aE5NRE9BOEE9PQ==?cid=2351432832	Get hash	malicious	KnowBe4	Browse	3.82.68.124
	https://password-changes.phishwall.net/XMzUzaXgwTnBGZU9XbU9kQnFIZk0vQ3hhQlNtUXJwaExCOTNDYnhpMG92ZHRNQjI5SHhmNUlLTC9JcmVVS2sraDgvUVZtd2YwVFROeGxlbDR0UXBkeGJOUkN3UGliUUNGVHZXWVJ2ek5hZ0FNV290djROWFRxN3JNazM1WlhNOUVLdnlqOEVlbXFaaFROMlltRDFFKzhmU3A0eEl4cE1tMFJmazVYOE5hc25oTjNIR0Q1UzJyNW5wTkNBPT0tLUdCVnp5RnltanNuQnVQWkgtLVA0Uy9TcENHeDltOGdwd282cnZiaEE9PQ==?cid=2317630324	Get hash	malicious	HTMLPhisher, KnowBe4	Browse	3.88.121.169

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	Bontrageroutdoors_Project_Update_202557516.pdf	Get hash	malicious	Unknown	Browse	3.219.243.226
	invoice_AG60538.pdf	Get hash	malicious	Unknown	Browse	52.22.41.97
	Message 2.eml	Get hash	malicious	Unknown	Browse	52.6.155.20
	frosty.sh4.elf	Get hash	malicious	Mirai	Browse	34.202.220.162
	https://eu2.contabostorage.com/69e36f1a5de941bb877627f90e79fd6d:gip/document.html#phishme@arrowbank.com	Get hash	malicious	HTMLPhisher	Browse	3.217.91.211
	https://eu2.contabostorage.com/69e36f1a5de941bb877627f90e79fd6d:gip/document.html#phishme@arrowbank.com	Get hash	malicious	HTMLPhisher	Browse	3.217.91.211
	https://www.mentimeter.com/app/presentation/alp52o7zih4ubnvbqe9pvb585a1z3bd7/edit?source=share-modal	Get hash	malicious	Unknown	Browse	44.197.221.236
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	54.144.36.173
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	52.71.28.102
	https://www.shinsengumiusa.com/mrloskie	Get hash	malicious	Unknown	Browse	3.233.158.25
AMAZON-02US	9MZZG92yMO.exe	Get hash	malicious	FormBook	Browse	76.223.67.189
	aBEh0fsi2c.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	EIvidclKOb.exe	Get hash	malicious	FormBook	Browse	13.228.81.39
	invoice_AG60538.pdf	Get hash	malicious	Unknown	Browse	143.204.205.214
	bkTW1FbgHN.exe	Get hash	malicious	FormBook	Browse	18.139.62.226
	OVZizpEU7Q.exe	Get hash	malicious	FormBook	Browse	54.244.188.177
	QmBbqpEHu0.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	frosty.arm.elf	Get hash	malicious	Mirai	Browse	18.140.171.98
	frosty.spc.elf	Get hash	malicious	Mirai	Browse	54.189.236.62
	Message.eml	Get hash	malicious	Unknown	Browse	34.249.87.52
MIT-GATEWAYSUS	frosty.arm.elf	Get hash	malicious	Mirai	Browse	18.171.165.4
	frosty.spc.elf	Get hash	malicious	Mirai	Browse	19.170.187.80
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	18.172.103.221
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	18.173.205.78
	http://infarmbureau.com	Get hash	malicious	Unknown	Browse	18.172.112.115
	Setup.exe	Get hash	malicious	Unknown	Browse	18.173.205.91
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.66.147.32
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	18.66.102.48
	sora.arm.elf	Get hash	malicious	Mirai	Browse	18.160.223.67
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	18.173.205.50

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
6271f898ce5be7dd52b0fc260d0662b3	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	3.231.74.234
	CY SEC AUDIT PLAN 2025.docx.doc	Get hash	malicious	Unknown	Browse	3.231.74.234
	Nuevo-orden.xla.xlsx	Get hash	malicious	Unknown	Browse	3.231.74.234
	Nuevo-orden.xla.xlsx	Get hash	malicious	Unknown	Browse	3.231.74.234
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	3.231.74.234
	PO#3311-20250108003.xls	Get hash	malicious	Unknown	Browse	3.231.74.234
	PO#3311-20250108003.xls	Get hash	malicious	Unknown	Browse	3.231.74.234
	http://www.cipassoitalia.it/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.231.74.234
	ipmsg5.6.18_installer.exe	Get hash	malicious	Unknown	Browse	3.231.74.234
	https://online-ops.mypasschange.com/landingPage/2/fbb0559ebe1911efb53c0242ac190102	Get hash	malicious	Unknown	Browse	3.231.74.234

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Reputation:	high, very likely benign file
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 19:01:54 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9799883480955556
Encrypted:	false
SSDEEP:	48:8KfybdxTosDH/idAKZdA1uehwiZUklqehmy+3:8K8Mxhy
MD5:	95D5245C073A718E4B393F12A1A30937
SHA1:	F61B046135C917CDEB29324D9CCB9DECE91239A8
SHA-256:	8379D07F0071996CC6AA56687925F2ADCE12C0CC12AD63D948A8291264D30615
SHA-512:	BE02C7BF6A4FAAA1F111E219EF937E17E5477190E482E49C13F273D8CC01F2D362C578D8D1F8B15E25ADC169B1BED8CFC67F05176993E230A1AB3EA6AC303985
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N.A..c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ<.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 19:01:54 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996357751366669
Encrypted:	false
SSDEEP:	48:8X9fybdxTosDH/idAKZdA1Heh/iZUkAQkqehRy+2:8t8MX9QQy
MD5:	74A892F363D07D36BA7EDB30C2891CDD
SHA1:	3569D2C57AEB3126FCC7D552555AF41CA0F83566
SHA-256:	B0C01B4BB4CB29A87E1F1829FBC09EC8FFEE315ABEF60AF8B650924AA16A2323
SHA-512:	2D67A258B5432CCE5B9E2E73725435BDB34A6467DA4C4705289E88FBABFDA17C0DEE143F91609D8BFE150979C05DAC53988FF18C757AB7C29CAD5A32F36B8FCE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ<.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006133763482693
Encrypted:	false
SSDEEP:	48:8FfybdxTobH/idAKZdA149eh7sFiZUkmgqeh7sTy+BX:8F8Msnty
MD5:	1A6CD9A045DBCF88D611BFE1ABC0F572
SHA1:	9893B25EFBD9BD1BE83DB4A36F57ACFD44865E00
SHA-256:	0F6DA6FD7F1D497863FBF65B8283A654493D42D2C37DAA40F1B6810F5397F7D7
SHA-512:	5D62EA3CBA8EDE3A52718B24D9B56986384854431649BEDD4CE71833F8236FE0D577C5DBD0C1BC56479BBD9044FC61BFD077DAB641A79AE1126FC89E89C1488F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 19:01:54 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9960075110633992
Encrypted:	false
SSDEEP:	48:8ffybdxTosDH/idAKZdA14ehDiZUkwqeh1y+R:8f8Mkby
MD5:	07767BAB03F533EED616AC0ACF9CC000
SHA1:	2C9CD4A6A29EA73B27714F684B594406BF913A2D
SHA-256:	0753FDDFD138B36B38DEF7D8E7823A5E9CE8059BE47F7DD88B32924CA067B937
SHA-512:	0F8067051ED3C3498857CC1FAFF38F15A760A58A766A7D0022933F5BC309921CEB291AF37A650D854F2FF3F00848C8A6C44FA42ECF797F47E64219B2EE7E1C22
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\|.&..c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ<.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 19:01:54 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9827437539040114
Encrypted:	false
SSDEEP:	48:8jgfybdxTosDH/idAKZdA1mehBiZUk1W1qeh/y+C:8jg8MU9fy
MD5:	7FBFCB67102305FFB6A9D198D732585E
SHA1:	207F50EA0D44C8D4182E6C98B1996B7AB72CA009
SHA-256:	0E39C2C1686CA3F565302B61643908A3016A705FEABDB2FCD4F6B85A23A76ADD
SHA-512:	439B4A6A5B6B8666DFE12EA32179B349208CCB8CB8278566B3CC850AE460F630281D269947B74BBA8AE3B553EC58D7E8BA1ACF5930514814884276C0181CE3A6
Malicious:	false
Preview:	L..................F.@.. ...$+.,....O.9..c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ<.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 19:01:54 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996595372993125
Encrypted:	false
SSDEEP:	48:8lfybdxTosDH/idAKZdA1duT1ehOuTbbiZUk5OjqehOuTbty+yT+:8l8MrTyTbxWOvTbty7T
MD5:	DD9A69FC9A5866AC4378CE26BCAB2537
SHA1:	CBA846E16C22B97885619D80981DE42416AFA1CF
SHA-256:	C840A63BA4CAA81294D6890B56F5E0A34FB527BC66C43BECAF5F75186F7B3DFA
SHA-512:	24415FED350824C9F589AF6D89D78AD80A824BD66ADEA0375EA319C166DEA10DC7638DDB89F31C4D4D7AD30DDD3CCF25DB3F1C76D174718F0C311C54719CDE1C
Malicious:	false
Preview:	L..................F.@.. ...$+.,.........c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IZ).....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ:.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VZ:.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VZ:............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ<.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zlMi.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\statement.doc (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	235836
Entropy (8bit):	7.788669163708761
Encrypted:	false
SSDEEP:	6144:5VB2JNFGG0WcSmE9SkbUV53V8wlKEq+uaqG/o:zB2pG/LSSkgplUGw
MD5:	0703CA5801FADEDCF1E8A7C6D435B32F
SHA1:	8B0C1B573D7EE7BDF364FC82145B325C482E82B4
SHA-256:	ECA7723BDC4273E6AE3AFD126125CA2CE51B44FFE21600B7B3259A561A0963FB
SHA-512:	D787C38598C5AA344FE713DD9C0AE5EBDED51863DCB3B9A84D0D24F3D9B633859B33C93BD83D558674088AF15CF68D0BFAE51ECAF9BAC35E56F21D534895C296
Malicious:	false
Preview:	PK..........!.m.....C.......[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................O..0....."_...CU.....].T.q&...3...8@T! h.DJf.{?[.d2.8[<CB.\|-..H..uh._....G.U.H.7...........\|...V{..(.I.z.Na."x..!9E...2*.W-A~...H.<......N.C.......<EX...1g..l...IM..G...5Z...o...=U...W&.'n8..+...._...4P<.D?.....R#.....e......8.S..ja......4.F...Yi..C...W..mNh[..'.M..$2.......[@.tsz..)h@d;g..z..ik..`.;..D,x.... ..,~..... -....~{..z..xH..y...l.Ergw.y.W,.0....W.>..o^....@s"[v...?.......PK..........!........

C:\Users\user\Desktop\~$atement.doc

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.892134786258078
Encrypted:	false
SSDEEP:	3:xdll9Zijdb3WNxWtJCFTE+B4A2uwh/t4RameM:nllejd7zGo+BWph/t48A
MD5:	58377CB45E91B83E53DF3B0EABECCB81
SHA1:	7919EF3ED113A73962B0B25FB83AB30F4BBC8BBE
SHA-256:	73F57934D45DCEA21CC0D35A6855456825240EBB66C4A9FBFD893392BE41F192
SHA-512:	095F5AE036F9FAF7A2B04995987FF58C3208C9F37C92981072580C276A8D9269C9F2E055C89799B9277A5C3C052E1AD61EE9ECF448C72ABDDE62FCBE65731E5E
Malicious:	false
Preview:	.user...................................................b.r.o.k....K'.4G..[.0.s....dM4.R.U<.a.lc...`.....XL..R..W.]].S.e#B....e.c......7o...%O.}.;j......N..=.i

C:\Users\user\Desktop\~WRD0000.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	235836
Entropy (8bit):	7.788669163708761
Encrypted:	false
SSDEEP:	6144:5VB2JNFGG0WcSmE9SkbUV53V8wlKEq+uaqG/o:zB2pG/LSSkgplUGw
MD5:	0703CA5801FADEDCF1E8A7C6D435B32F
SHA1:	8B0C1B573D7EE7BDF364FC82145B325C482E82B4
SHA-256:	ECA7723BDC4273E6AE3AFD126125CA2CE51B44FFE21600B7B3259A561A0963FB
SHA-512:	D787C38598C5AA344FE713DD9C0AE5EBDED51863DCB3B9A84D0D24F3D9B633859B33C93BD83D558674088AF15CF68D0BFAE51ECAF9BAC35E56F21D534895C296
Malicious:	false
Preview:	PK..........!.m.....C.......[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................O..0....."_...CU.....].T.q&...3...8@T! h.DJf.{?[.d2.8[<CB.\|-..H..uh._....G.U.H.7...........\|...V{..(.I.z.Na."x..!9E...2*.W-A~...H.<......N.C.......<EX...1g..l...IM..G...5Z...o...=U...W&.'n8..+...._...4P<.D?.....R#.....e......8.S..ja......4.F...Yi..C...W..mNh[..'.M..$2.......[@.tsz..)h@d;g..z..ik..`.;..D,x.... ..,~..... -....~{..z..xH..y...l.Ergw.y.W,.0....W.>..o^....@s"[v...?.......PK..........!........

C:\Users\user\Desktop\~WRD0000.tmp:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
URL:	https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5649
Entropy (8bit):	5.250605215538956
Encrypted:	false
SSDEEP:	96:KGJW/OplIczjJxwvcS2dOCERJ7EnXKEh9sk4QfkOtjt:T1Ickv9RJ7SKesk4Qfk+
MD5:	B13B4F098D80AC49DCC6BED4E459D560
SHA1:	81FFB3DD594A82F9453D1C45DA812DFC008CAA65
SHA-256:	5FC2013E8D4F5A97667A0A5BFEF9A2E148363D89A46BE49F14CB2C60B1461CA9
SHA-512:	4FEAEA5336B3E1B7B1D26C5D576C655208955D4C7657B967D11A9D58A3086EB0D087DE53606E0AC4E0F3AEFD9993E616BD7B9B343AE23DEB20477BD7EFD75ECC
Malicious:	false
URL:	https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Preview:	:root {..--clr-neutral-100: #ffffff;..--clr-neutral-200: #f5f5f5;..--clr-neutral-300: #d5d5d5;..--clr-neutral-400: #ababab;..--clr-neutral-500: #707070;..--clr-neutral-600: #2c2c2c;.../* Padding /..--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);..--padding-sm: clamp(1rem, 3%, 1.5rem);..--padding-md: clamp(1.5rem, 6%, 3rem);..--padding-lg: clamp(3rem, 12%, 6rem);.../ Margin /..--block-flow-xs: min(1rem, 2vh);..--block-flow-sm: min(2rem, 4vh);..--block-flow-md: min(4rem, 8vh);..--block-flow-lg: min(8rem, 16vh);.../ Font Sizes /.../ @link https://utopia.fyi/type/calculator?c=320,18,1.2,1240,20,1.25,5,2,&s=0.75\|0.5\|0.25,1.5\|2\|3\|4\|6,s-l&g=s,l,xl,12 /.../ Step -1: 15px . 12.003px /..--step--1: clamp(0.7502rem, 1.0027rem + -0.3258vi, 0.9375rem);../ Step 0: 18px . 16px /..--step-0: clamp(1rem, 1.1685rem + -0.2174vi, 1.125rem);../ Step 1: 21.6px . 21.328px /..--step-1: clamp(1.333rem, 1.3559rem + -0.0296vi, 1.35rem);../ Step 2: 25.92px . 28.4302px */..--step-2: clamp(1.62rem,

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
URL:	https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	dropped
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (382)
Category:	downloaded
Size (bytes):	75074
Entropy (8bit):	6.138406589178574
Encrypted:	false
SSDEEP:	1536:crpvhGe1FSmB10lpn/n3Bzx0rEO3pQpE03ejrfodzWUc:mxhGe1FSmB10lpn/nRzx0AO3pQHejrfZ
MD5:	D8798AAE777F6C93C53155F081A8C8EA
SHA1:	81B8A61366B8F08C3D3A8A2E1CFE499CEC5521B8
SHA-256:	69FEB31D20F8340079383EB02BD89606E55D53476E2C1A9D70646E3A19FE4A25
SHA-512:	495DAB5208A42596D39852997A20433395648AE68D384EE13AB648D5EBF8C936B2E903F19CA8918E6E70D8DEEF1D036AC6962EA5C58B696A5D7F07146E274239
Malicious:	false
URL:	https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />.. </head>. .......<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">... Stylesheet for default styles -->...<link rel="stylesheet" href="https://helpimg

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	1762
Entropy (8bit):	4.940825606556403
Encrypted:	false
SSDEEP:	48:0EY3OZgl2mrk+zWrDNl613A3h7tgDFiC7WA8u:zY3OZglVavT61wR7WFiC7su
MD5:	92C82096F24E4111FFA65B244092E44B
SHA1:	776C1F08C3A2EE76C4BBC2E60674CF29D7FA0E2A
SHA-256:	63B73619B9A6F217C4CAA7B51FDFBEE99C0F9B4AB0749EFD8B5D38FB583F7CC6
SHA-512:	A7B635FB5DEFCE886D4F3EC11BAF47C501A81B29E295097B49E5C197BA24E465ACB7CBB5FFB690476B8ED6A736FF3BBD282D27255037AC21C5F28E0F3BEF13F6
Malicious:	false
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.css" rel="stylesheet"/><link href="/ui/fonts/notosans.css" rel="stylesheet"/><title>KnowBe4</title><style media="screen">.loader {. margin: 40vh auto;. display: block;. position: relative;. width: 64px;. height: 64px;. }.. .loader div {. box-sizing: border-box;. display: block;. position: absolute;. width: 51px;. height: 51px;. margin: 3px;. border: 3px solid #bdbdbf;. border-radius: 50%;. animation: loader 1.2s cubic-bezier(0.5, 0, 0.5, 1) infinite;. border-color: #bdbdbf transparent transparent;. }.. .loader div:nth-child(1) {. animation-delay: -0.45s;. }.. .loader div:nth-child(2) {. ani

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
URL:	https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
URL:	https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (407)
Category:	downloaded
Size (bytes):	461
Entropy (8bit):	5.8048885152341265
Encrypted:	false
SSDEEP:	12:3R+xn2IBsy0IRMiUPovnDhPXONiQmmw38JY44AEdeIQL:3EoywiUPovDhPeNi9mw38JY4NEkj
MD5:	530983523256627F742A85859142F70D
SHA1:	9E30E3C08E1EF053949F36EE99B1673B655585F9
SHA-256:	F7F2E4E9D00B69650824E4CB575AE3A652133E17487EF760940C5AAE8F3D99C0
SHA-512:	4B1BEDF3E8C3F5FE4513A56783B30148FB462E2245F70720F628CC3733288379E56CE9C3A4895D524469C8753971FC8B20D3382B368D011AFD5BA9AE6F4D5FF8
Malicious:	false
URL:	https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Static File Info

General

File type:	Microsoft OOXML
Entropy (8bit):	7.996877672634087
TrID:	Word Microsoft Office Open XML Format document with Macro (52004/1) 37.96% Word Microsoft Office Open XML Format document (49504/1) 36.13% Word Microsoft Office Open XML Format document (27504/1) 20.07% ZIP compressed archive (8000/1) 5.84%
File name:	statement.doc
File size:	198'999 bytes
MD5:	d749778720d0416ccbe31b6bf3c0ae64
SHA1:	4a6fc41b8c9a3e5d6acbfd52ba6eb22074e83828
SHA256:	db76c48ad49aa17226504d3bd11dab03b75563334dda9820ae6d84808806e58f
SHA512:	80fc935a69b0c247244dadfa0e64ab99bc3c0f58cfb4ff68e6cce5b605812c4552974db36dd6e4b2bcf9fae64268096a3e9e7f6cc4454a23c9a1b9aab54ce4e2
SSDEEP:	6144:qmnIrHmHozJky3eEGVdajJ66tAhUJOO3Nvs:5O4ykyuEGfMuhU7Zs
TLSH:	721423A8EDC10565CAAAC034183E01A9E89D3F4BE57A74293931B244F5B13F4AED7CD7
File Content Preview:	PK........I..X~.._............[Content_Types].xml..Oo.@...H\|.k...)..P..h9B%..u..'[..v&i......U...^,.3...............kqY-D.^...M-..?..D..\|.l.P....Z.}.\."`.j......R...SX...+]HN.....J.T......R.O.......5tjg..y..C..xQ\|...U-T..hE\.{.V...uFC.o.m.w.I......G4.r..p

File Icon


Icon Hash:	35e1cc889a8a8599

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 21:01:12.644927979 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 21:01:13.988524914 CET	49671	443	192.168.2.10	204.79.197.203
Jan 10, 2025 21:01:22.254082918 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 21:01:57.949964046 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:57.950014114 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:57.950078964 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:57.950416088 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:57.950431108 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.659969091 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.660871983 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:58.660887957 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.661983013 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.662060976 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:58.663959026 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:58.664031029 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.705904961 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:58.705914021 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:01:58.745668888 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:01:58.994784117 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.994821072 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:58.995080948 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.995800972 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.995834112 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:58.995924950 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.996368885 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.996376038 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:58.996608973 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:58.996642113 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.661796093 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.682754040 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.708781004 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.732620955 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.753361940 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.753382921 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.753395081 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.753412962 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.754658937 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.754678011 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.754713058 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.754810095 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.757169008 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.757263899 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.762624979 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.762732983 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.763842106 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.763854027 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.806634903 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.806654930 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:01:59.806720018 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:01:59.848155022 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:00.947700024 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:00.947798014 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:00.948103905 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:00.967080116 CET	49735	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:00.967102051 CET	443	49735	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:01.003926992 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.003953934 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.004261017 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.004300117 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.004309893 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.004534006 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.004548073 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.004604101 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.004822016 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.004839897 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.654484987 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.655334949 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.655352116 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.656420946 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.656482935 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.657443047 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.657514095 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.657618046 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.657630920 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.664910078 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.665139914 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.665153027 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.666177988 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.666228056 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.666517019 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.666567087 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.705101967 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.720433950 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:01.720446110 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:01.771934986 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.801769018 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801789045 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801800013 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801841974 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801901102 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.801908970 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801933050 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.801953077 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.801975012 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.858089924 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.858890057 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.858941078 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.859015942 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.859294891 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.859302044 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.876977921 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877022982 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.877125025 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877202988 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877233028 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.877289057 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877410889 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877418995 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.877501965 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877660036 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.877671957 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.880548000 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.880558014 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.880778074 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:03.880798101 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:03.882114887 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.882141113 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.882188082 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.882196903 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.882255077 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.882277966 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.883964062 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.883982897 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.884080887 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.884088993 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.884316921 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.885544062 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:03.885555983 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:03.885791063 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:03.885987043 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:03.885994911 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:03.899323940 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969198942 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969235897 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969285965 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.969317913 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969332933 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.969379902 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.969450951 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969484091 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969510078 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.969516039 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969538927 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:03.969595909 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.969595909 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.970185041 CET	49737	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:03.970200062 CET	443	49737	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.015413046 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.015446901 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.015536070 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.015547991 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.015588045 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.015666962 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.018220901 CET	49736	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.018234015 CET	443	49736	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.458120108 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.464109898 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.464144945 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.465603113 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.465681076 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.467185974 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.467269897 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.467415094 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.467434883 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.519798994 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.526417017 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.526987076 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.527002096 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.527390957 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.527745962 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.527806997 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.528214931 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.571321964 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.588610888 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.588711023 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.588721991 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.588757038 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.588785887 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.588802099 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.588808060 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.588849068 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.622586012 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.623384953 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.626363039 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.630460978 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.630474091 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.630798101 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.630817890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.631208897 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.631218910 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.632066011 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.632127047 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.632318974 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.632371902 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.632661104 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.632719994 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.639878988 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.640064001 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.643209934 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.643302917 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.646563053 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.646589994 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.646604061 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.646661997 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.646680117 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.646704912 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.646725893 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.692466974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.692466974 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.692481041 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.692496061 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.711340904 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.711518049 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.713274956 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.713989019 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.714379072 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.714400053 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.716738939 CET	49743	443	192.168.2.10	52.217.123.201
Jan 10, 2025 21:02:04.716768980 CET	443	49743	52.217.123.201	192.168.2.10
Jan 10, 2025 21:02:04.729542971 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.729582071 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.729619026 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.729641914 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.729677916 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.729698896 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.731492043 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.731513023 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.731591940 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.731604099 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.732376099 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.754714966 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:04.755326033 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.755347967 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:04.816996098 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.817019939 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.817137957 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.817168951 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.818135977 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.818156004 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.818197012 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.818207026 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.818223000 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.818254948 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.819935083 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.819958925 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.820043087 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.820055962 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.820430994 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.824304104 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.824322939 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.824405909 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.824424028 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.828392029 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.905972004 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.905996084 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.906069994 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.906095982 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.906281948 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.906487942 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.906502962 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.906781912 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.906788111 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.906836987 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.907423019 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.907439947 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.907499075 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.907505035 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.907910109 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.908333063 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.908349037 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.908376932 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.908382893 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.908428907 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.909282923 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.909296989 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.909347057 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.909353018 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.909400940 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.910196066 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.910211086 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.910243988 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.910248995 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.910284996 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.911050081 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.911063910 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.911143064 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.911149979 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.911185980 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.913353920 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.913369894 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.913454056 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.913461924 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.913717985 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.919755936 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.994800091 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.994818926 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.994877100 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.994893074 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.994934082 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.995193958 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995209932 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995301962 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.995320082 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995381117 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995402098 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995441914 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.995448112 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.995515108 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.996089935 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.996109009 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.996195078 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.996206045 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.996215105 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.996226072 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.996244907 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.996277094 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.997061968 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.997103930 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:04.997277021 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:04.997284889 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.002177000 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.002197027 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.002293110 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.002307892 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.044528008 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.046813965 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.046885014 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.047022104 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.047034025 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.047077894 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.083611012 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.083693027 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.083708048 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.083725929 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.083786964 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.083786964 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.100718975 CET	49739	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:05.100754023 CET	443	49739	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:05.167264938 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:05.167303085 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:05.167373896 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:05.167649984 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:05.167660952 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:05.356560946 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356589079 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356626034 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356628895 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.356656075 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356673956 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.356702089 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.356703043 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356726885 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.356780052 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.385654926 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385672092 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385716915 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.385746002 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385806084 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385837078 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.385837078 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.385852098 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385864019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.385874987 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.385902882 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.439956903 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.440025091 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.440052032 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.440063000 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.440097094 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.444173098 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.444245100 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.444252968 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.444350958 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.444355965 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.444411993 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.450726986 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.451067924 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.451080084 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.470118999 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.470177889 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.470189095 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.470220089 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.470242977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.475768089 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.475784063 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.475820065 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.475828886 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.476047993 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.506278038 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.521735907 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.528572083 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.528583050 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.528666019 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.528680086 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.528738976 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.529217958 CET	49741	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.529237032 CET	443	49741	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.552114010 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.552181005 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.552364111 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.552747011 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.552758932 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.559709072 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.559777021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.559811115 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.559844017 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.559864998 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.559911966 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.559911966 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.561003923 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.561019897 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.561194897 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.561208010 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.561302900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.571863890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.571882010 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.572010994 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.572038889 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.572098017 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.584542036 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.584558964 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.584583998 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.584666967 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.584666967 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.584680080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.584796906 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.596862078 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.596873999 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.596932888 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.596936941 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.596992016 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.597027063 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.597033978 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.597045898 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.597045898 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.597059965 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.597119093 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.597119093 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.599159956 CET	49740	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.599173069 CET	443	49740	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.603691101 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.603729963 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.603810072 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.604075909 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.604094982 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.610120058 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:05.610152006 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:05.610214949 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:05.610399008 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:05.610409021 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:05.839354038 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839384079 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839437962 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839445114 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839476109 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839518070 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839538097 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839581013 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839581013 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839586020 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839611053 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839626074 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.839677095 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839677095 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.839692116 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845082045 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845115900 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845139027 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.845149994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845191002 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.845854998 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845879078 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.845920086 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.845927000 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.846045017 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.846787930 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.846807957 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.846853018 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.846859932 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.847100973 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.848468065 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.848488092 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.848530054 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.848539114 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.848989010 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.849251986 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.849278927 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.849329948 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.849338055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.849780083 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.850964069 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.850986958 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.851068974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.851068974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.851077080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.852298975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.852325916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.852370977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.852380037 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.852422953 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.853450060 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.853471994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.853559971 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.853568077 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.854893923 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.854921103 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.854990959 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.855017900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.855017900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.855036020 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.855063915 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.855077982 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.855102062 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.855294943 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.856756926 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.856777906 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.856915951 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.856926918 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.857172966 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.857641935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.857665062 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.857748032 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.857748032 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.857754946 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.857927084 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.858725071 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.858752966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.858817101 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.858824015 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.858854055 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859008074 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859016895 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859023094 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859040022 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859081984 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859179974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859184027 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859421968 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859493971 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859514952 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859585047 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859585047 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859591961 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859750032 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859837055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859862089 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859899998 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859905958 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.859952927 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.859952927 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860413074 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860431910 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860486031 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860491991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860522032 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860567093 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860567093 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860574007 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860698938 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860721111 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.860786915 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860786915 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.860795021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.862886906 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.862904072 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.862936020 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.862943888 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.863059998 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.872343063 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.872364998 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.872412920 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.872421026 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.872466087 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.883035898 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.883065939 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.883192062 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.883192062 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.883200884 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.922833920 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.922852993 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923109055 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.923130035 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923310041 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923338890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923388958 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.923397064 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923434019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.923455000 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.923521042 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.923527002 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.924855947 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.924870014 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.924921036 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.924928904 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.925000906 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.935447931 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.935477972 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.935600996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.935600996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.935614109 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.947870970 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.947895050 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.947948933 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.947958946 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.947993040 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.959609985 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.959630966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.959681988 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.959692955 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.959806919 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.967952013 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.967999935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.968029022 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:05.968038082 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:05.968147993 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.012984037 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013004065 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013107061 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.013132095 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013150930 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013186932 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013212919 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.013221025 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013325930 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.013823986 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013842106 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.013909101 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.013916969 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.014009953 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.014260054 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.014272928 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.014328957 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.014336109 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.014348984 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.020028114 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.020042896 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.020195961 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.020205975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.032366991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.032382011 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.032480955 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.032489061 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.034373045 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.034804106 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.034816027 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.035873890 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.035931110 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.036237001 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.036303043 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.036380053 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.036386967 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.044234991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.044251919 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.044318914 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.044332027 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.053778887 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.053796053 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.053874016 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.053884983 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.066929102 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.066962004 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.067008018 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.067034960 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.067097902 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.076200962 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.076415062 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.076426029 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.076765060 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.077430010 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.077567101 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.078758955 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.078810930 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.078922033 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.103981972 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104002953 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104048967 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104063034 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.104074955 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104315996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.104461908 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104477882 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104542971 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.104551077 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104846954 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104861021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.104924917 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.104933977 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.112235069 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.112252951 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.112309933 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.112318993 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.112330914 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.122502089 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.122513056 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.123218060 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.123239040 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.123297930 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.123337030 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.123337030 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.123353958 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.139947891 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.139971018 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.140017986 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.140028000 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.140074015 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.144568920 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.144583941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.144659996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.144669056 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.165954113 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.165971041 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.166093111 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.166102886 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.167427063 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167511940 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167534113 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167567015 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.167577028 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167607069 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167614937 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.167623997 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.167634964 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.167654037 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.167675018 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.168368101 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.195049047 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.195065975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.195158958 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.195158958 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.195168972 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.195574045 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.195590019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.195718050 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.195728064 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.196139097 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.196155071 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.196259022 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.196266890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.201278925 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.201292992 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.201381922 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.201391935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.207145929 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.207257986 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.207326889 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.207627058 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.207639933 CET	443	49747	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.207653046 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.207681894 CET	49747	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.209193945 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.209254026 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.209364891 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.209592104 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.209618092 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.213917971 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.213933945 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.214015961 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.214015961 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.214025021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.231074095 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.231090069 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.231148005 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.231158972 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.235141039 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.235156059 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.235215902 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.235240936 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.248168945 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.248188019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.248349905 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.248368979 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.256779909 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.256829023 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.256853104 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.256870985 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.256923914 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.256931067 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.258565903 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.258616924 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.258630037 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.258645058 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.258677006 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.285578966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.285599947 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.285775900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.285805941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286163092 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286178112 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286237955 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.286248922 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286288977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.286776066 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286788940 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.286879063 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.286890984 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.292028904 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.292043924 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.292098045 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.292114019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.292529106 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.292726040 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.292738914 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.293761015 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.293821096 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.294085026 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.294145107 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.294207096 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.299844027 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.304554939 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.304572105 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.304622889 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.304642916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.304666996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.320537090 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.320744991 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.320777893 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.321775913 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.321794987 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.321834087 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.321897030 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.321898937 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.321911097 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.322164059 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.322230101 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.322355986 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.322366953 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.325884104 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.325905085 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.325964928 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.325974941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.338850021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.338872910 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.338936090 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.338948965 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.339091063 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.339329958 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.345603943 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.345674992 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.345688105 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.345716000 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.345746994 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.345767021 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.346426010 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.346452951 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.346903086 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.346959114 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.346980095 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.346999884 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.347022057 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.347043037 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.348381996 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.348431110 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.348479986 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.348494053 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.348517895 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.348539114 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.349349976 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.349400043 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.349427938 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.349442005 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.349466085 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.349483013 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.362175941 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.376426935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.376447916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.376482010 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.376512051 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.376543999 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.376571894 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.377074957 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.377090931 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.377192974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.377202034 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.377509117 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.377523899 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.377604008 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.377604008 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.377614021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.382631063 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.382646084 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.382704973 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.382714033 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.393408060 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.395184994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.395205975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.395330906 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.395330906 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.395351887 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.412353039 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.412369967 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.412410975 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.412425995 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.412444115 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.416449070 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.416465044 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.416534901 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.416552067 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.429471970 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.429497004 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.429563046 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.429594994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.429610014 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.435065985 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.435098886 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.435159922 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.435178041 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.435215950 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.435929060 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.435945034 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.435990095 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.435997963 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.436026096 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.436041117 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.436613083 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.436630011 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.436664104 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.436671972 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.436733007 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.437410116 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.437428951 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.437468052 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.437474966 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.437505960 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.437529087 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.438282013 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.438314915 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.438347101 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.438354015 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.438388109 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.438421011 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.439222097 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.439238071 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.439268112 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.439275980 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.439308882 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.440265894 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.440289021 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.440340042 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.440349102 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.440370083 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.440398932 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.466784000 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.466803074 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.466850996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.466865063 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467345953 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467365980 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467394114 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.467403889 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467428923 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.467613935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467674971 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.467684031 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.467726946 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.469141006 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.469161987 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.469275951 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.469285011 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.469321966 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.479742050 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.479763985 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.479827881 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.479835987 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.479877949 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.495601892 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.495623112 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.495671034 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.495696068 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.495712042 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.495778084 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.504827023 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.504856110 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.504918098 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.504929066 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.505023956 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.511940956 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.511962891 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.512001038 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.512010098 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.512056112 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.512466908 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.512491941 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.512525082 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.512537956 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.512593031 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.512593031 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525039911 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525062084 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525105953 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525116920 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525131941 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525238037 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525504112 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525520086 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525544882 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525552988 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.525568962 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.525583029 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.526046991 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526062965 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526092052 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.526098967 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526123047 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.526139021 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.526611090 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526626110 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526681900 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.526690006 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.526725054 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530057907 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530076027 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530119896 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530132055 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530158043 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530184031 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530514002 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530534029 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530564070 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530570984 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530592918 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530610085 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530824900 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530842066 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530869007 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530877113 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.530911922 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.530930042 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.557710886 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.557739019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.557786942 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.557807922 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.557832003 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.557852983 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.558146000 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558162928 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558222055 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.558228970 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558269978 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.558620930 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558639050 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558684111 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.558691978 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.558716059 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.558732986 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.559803963 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.559828997 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.559875011 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.559883118 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.559910059 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.559926987 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.570538044 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.570557117 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.570605040 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.570612907 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.570673943 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.579467058 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579485893 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579502106 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579511881 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579519987 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579541922 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.579576015 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.579593897 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.579627991 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.586369038 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.586393118 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.586429119 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.586437941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.586462021 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.586483955 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.595652103 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.595678091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.595716953 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.595726967 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.595771074 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.602519989 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.602545977 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.602596045 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.602596998 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.602631092 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.602652073 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.602652073 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.602684021 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.602726936 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.602919102 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.602940083 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.602973938 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.603003025 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.603018999 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.603153944 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.603710890 CET	49744	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:06.603725910 CET	443	49744	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:06.648323059 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648355007 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648422956 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.648442030 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648478031 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.648694038 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648711920 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648747921 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.648755074 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.648780107 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.648797035 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.649182081 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.649202108 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.649250031 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.649255991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.649291039 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.650670052 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.650705099 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.650733948 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.650739908 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.650768995 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.661999941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.662024021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.662070036 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.662076950 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.662108898 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.662633896 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.662733078 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.665328026 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.665349007 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.665390015 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.665419102 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.665437937 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.672326088 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.672352076 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.672377110 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.672394991 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.672416925 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.677043915 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.677062035 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.677093983 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.677099943 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.677145004 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.677145004 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.685085058 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.685137033 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.685153961 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.685158968 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.685214996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.688787937 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.688807964 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.688865900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.688873053 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.688905001 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.690727949 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.696919918 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.696954012 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.697307110 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.697649956 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.697707891 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.697784901 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.725286961 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.740362883 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.740397930 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.875197887 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.875226021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.875322104 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.875350952 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.875469923 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.876034021 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876050949 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876106977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.876113892 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876173973 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.876585960 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876604080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876668930 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.876677036 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.876733065 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.877051115 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877068043 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877154112 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.877161980 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877209902 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.877573013 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877587080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877645969 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.877654076 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.877708912 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.878154993 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878170967 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878194094 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878240108 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.878262997 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878279924 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878308058 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.878340006 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.878350973 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878367901 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878412008 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.878417969 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.878467083 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.879380941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879400969 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879465103 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.879472017 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879518986 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.879594088 CET	49745	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.879610062 CET	443	49745	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879856110 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879870892 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879931927 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.879937887 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.879976988 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.880033016 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.880096912 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.880747080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.880762100 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.880812883 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.880820036 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.880866051 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.881278038 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881297112 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881361008 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.881366968 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881412029 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.881660938 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881678104 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881757021 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.881766081 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.881798029 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882142067 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882157087 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882215977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882222891 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882261038 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882545948 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882561922 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882610083 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882620096 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882659912 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882930994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882946968 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.882988930 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.882997036 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883037090 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.883477926 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883492947 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883544922 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.883558035 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883577108 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.883685112 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.883896112 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883912086 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883948088 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.883959055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.883990049 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.884011030 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.884684086 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.903189898 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.903203964 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.903230906 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.903253078 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.903290987 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.903290987 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.903307915 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.903363943 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.918431044 CET	49746	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.918452024 CET	443	49746	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920567989 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920593023 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920641899 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.920645952 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920670033 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920692921 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.920700073 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.920738935 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.920743942 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.921026945 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.921360016 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.921379089 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.921416998 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.921422958 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.921453953 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.921477079 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.922708035 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.922725916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.922786951 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.922801971 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.922840118 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.934566975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.934591055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.934705019 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.934721947 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.934763908 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.949431896 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.949456930 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.949491978 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.949512959 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.949531078 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.949551105 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.958884001 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.958910942 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.958995104 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.959017038 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.959055901 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.966212034 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.966274977 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.966332912 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.966350079 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:06.966383934 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.966399908 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:06.991441011 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.991539955 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.991590977 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.992938042 CET	49748	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.992969990 CET	443	49748	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.994766951 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.994817972 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:06.994925022 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.995188951 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:06.995209932 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.011295080 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011379004 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011393070 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.011416912 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011455059 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.011476040 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.011538982 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011585951 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011600018 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.011616945 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.011707067 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.012077093 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.012118101 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.012151003 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.012156010 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.012182951 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.012202024 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.013438940 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.013482094 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.013536930 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.013541937 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.013575077 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.013595104 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.025336027 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.025362015 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.025408030 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.025439978 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.025463104 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.025482893 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.040287018 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.040354967 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.040395975 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.040422916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.040440083 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.040469885 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.049771070 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.049822092 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.049881935 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.049887896 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.049932003 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.049938917 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.057840109 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.057869911 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.057977915 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.057984114 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.058037043 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.101942062 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.101975918 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102020979 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102025986 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102049112 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102080107 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102088928 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102107048 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102118015 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102138042 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102158070 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102704048 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102722883 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102776051 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.102781057 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.102814913 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.104059935 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.104078054 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.104113102 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.104120016 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.104146004 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.104162931 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.116128922 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.116161108 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.116195917 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.116209030 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.116240978 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.116264105 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.131781101 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.131841898 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.131858110 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.131879091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.131944895 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.131946087 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.140386105 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.140408993 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.140450001 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.140475988 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.140501022 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.140520096 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.166883945 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.166950941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.166980982 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.167017937 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.167042017 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.167052984 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.192825079 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.192873001 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.192903996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.192915916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.192935944 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.192960978 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.193092108 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193135023 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193165064 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.193170071 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193211079 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.193640947 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193687916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193706036 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.193717957 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.193739891 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.193758011 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.194926977 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.194976091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.195014000 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.195019007 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.195050001 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.195058107 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.206804991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.206850052 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.206891060 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.206921101 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.206937075 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.207524061 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.221632957 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.221678019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.221709967 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.221716881 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.221731901 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.221756935 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.231098890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.231142044 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.231180906 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.231190920 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.231221914 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.231232882 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.257354975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.257411957 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.257468939 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.257494926 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.257524014 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.257543087 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.283421040 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283453941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283519983 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.283548117 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283564091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283585072 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283612967 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.283617973 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.283644915 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.283670902 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.284204006 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.284219980 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.284260035 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.284264088 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.284291983 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.284311056 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.285383940 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.285403013 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.285469055 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.285480976 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.285515070 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.297352076 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.297375917 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.297429085 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.297445059 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.297467947 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.297491074 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.312146902 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.312172890 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.312247992 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.312274933 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.312315941 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.321722031 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.321744919 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.321784019 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.321810961 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.321824074 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.321844101 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.348090887 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.348119974 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.348200083 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.348229885 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.348275900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374342918 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374376059 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374414921 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374445915 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374463081 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374483109 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374708891 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374725103 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374762058 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374768019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.374804974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.374814034 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.375237942 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.375278950 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.375320911 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.375327110 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.375355959 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.375371933 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.376234055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.376277924 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.376307011 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.376315117 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.376338959 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.376360893 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.388139009 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.388225079 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.388358116 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.388358116 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.388387918 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.402987003 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.403021097 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.403058052 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.403069019 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.403105021 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.412488937 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.412533998 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.412578106 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.412585974 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.412627935 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.438786983 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.438865900 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.438873053 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.438904047 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.438934088 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.465039015 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465121031 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465132952 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.465163946 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465183973 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.465297937 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465341091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465354919 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.465375900 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465406895 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.465946913 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.465970993 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.466012955 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.466017962 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.466042995 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.466249943 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.466272116 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.466309071 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.466315031 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.466347933 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.466352940 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.469472885 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.469706059 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.469733953 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.470860958 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.471112013 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.471142054 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.471175909 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.471180916 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.471215010 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.471231937 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.471281052 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.471489906 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.471525908 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.484638929 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.484663963 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.484700918 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.484708071 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.484738111 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.484765053 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.501732111 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.501799107 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.501807928 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.501830101 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.501857042 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.501873970 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.505686045 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.505731106 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.505791903 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.505799055 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.505851030 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.519335985 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.521112919 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.529684067 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.529711008 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.529774904 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.529783964 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.529829025 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.555840969 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.555862904 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.555923939 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.555931091 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.555988073 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556154966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556174994 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556210995 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556216002 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556246996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556528091 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556591988 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556611061 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556653976 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556658983 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.556691885 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.556701899 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.557579041 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.557650089 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.569731951 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.569802046 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.569850922 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.569876909 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.569911957 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.569927931 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.584425926 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.584479094 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.584522009 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.584531069 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.584568977 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.584588051 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.593693972 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.593713045 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.593765974 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.593775988 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.593827963 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.609400988 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609451056 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609483004 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609492064 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.609520912 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609554052 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609575987 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.609582901 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.609620094 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.609817982 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.610337973 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.610402107 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.610414982 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.614298105 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.614326954 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.614356041 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.614412069 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.614428043 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.614461899 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.620132923 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.620182991 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.620259047 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.620271921 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.620310068 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.620337963 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646346092 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646395922 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646450996 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646477938 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646636963 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646753073 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646836042 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646877050 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646912098 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646919966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.646946907 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.646970987 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.647193909 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647234917 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647253990 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.647258997 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647285938 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.647304058 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.647638083 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647695065 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647722960 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.647727966 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.647757053 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.652560949 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.652605057 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.652631998 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.652637959 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.652683020 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.662116051 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.666256905 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.666346073 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.666344881 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.666398048 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.666434050 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.683166981 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.683219910 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.683270931 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.683279037 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.683330059 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.684396982 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.684463978 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.698930979 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.699040890 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.699126959 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.699615002 CET	49749	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.699661016 CET	443	49749	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.710961103 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.710994959 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.711054087 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.711069107 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.711103916 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.711926937 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.711973906 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.712038040 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.712264061 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:07.712276936 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:07.737131119 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737163067 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737207890 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.737232924 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737257957 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.737715960 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737734079 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737802029 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.737812042 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.737828016 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.738147974 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.738168955 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.738213062 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.738219976 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.738245010 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.739121914 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.739140034 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.739185095 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.739192963 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.739219904 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.753572941 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.753604889 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.753670931 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.753695011 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.753729105 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.765970945 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.766020060 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.766052008 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.766062975 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.766119003 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.766139030 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.766168118 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.766191006 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.766366959 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.767024994 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.767034054 CET	443	49742	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.767065048 CET	49742	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.774831057 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.774866104 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:07.775141001 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.775373936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:07.775388956 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.192574978 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.192888021 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.192915916 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.193928003 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.194006920 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.194602966 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.194663048 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.194921017 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.194930077 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.226074934 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.226131916 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.226191044 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.226701975 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.226715088 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.237921953 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.344281912 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344332933 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344362020 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344397068 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344408035 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.344420910 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344434977 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.344454050 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.344470978 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.344887972 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.345145941 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.345186949 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.345201015 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.348988056 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.349018097 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.349069118 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.349081039 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.352400064 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.436628103 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.436769962 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.436830997 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.437294006 CET	49750	443	192.168.2.10	104.17.245.203
Jan 10, 2025 21:02:08.437311888 CET	443	49750	104.17.245.203	192.168.2.10
Jan 10, 2025 21:02:08.499298096 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.499584913 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.499610901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.499944925 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.500250101 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.500308990 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.500385046 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.529073954 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:08.529149055 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:08.529257059 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:08.547318935 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.550313950 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.783777952 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783793926 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783814907 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783822060 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783829927 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.783833027 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783845901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.783868074 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.783894062 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.785195112 CET	49733	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:08.785223961 CET	443	49733	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:08.864783049 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.864866018 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.867268085 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.867285967 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.867338896 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.867347956 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.901256084 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.901278973 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.901329994 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.901338100 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.901375055 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.908513069 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.908787012 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.908802032 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.909135103 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.909477949 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.909529924 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.909611940 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:08.951334953 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:08.953792095 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.953813076 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.953871965 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.953886986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.954788923 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.954809904 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.954871893 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.954881907 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.954893112 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.957351923 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.957365036 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.957515001 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.957524061 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.990087986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.990118980 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.990155935 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:08.990165949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:08.990210056 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.023883104 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:09.023947954 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:09.023997068 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:09.025121927 CET	49753	443	192.168.2.10	34.193.6.123
Jan 10, 2025 21:02:09.025139093 CET	443	49753	34.193.6.123	192.168.2.10
Jan 10, 2025 21:02:09.031023026 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.031065941 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.031135082 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.031385899 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.031398058 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.042267084 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042319059 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042341948 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.042368889 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042385101 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.042572021 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042625904 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042640924 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.042659998 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.042686939 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.042710066 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.043045044 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.043087006 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.043122053 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.043135881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.043162107 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.043176889 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.044301987 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.044344902 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.044373989 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.044380903 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.044408083 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.044425011 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.046991110 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047053099 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047070026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.047082901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047111034 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.047622919 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047663927 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047676086 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.047689915 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.047725916 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.049536943 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.049576044 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.049616098 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.049626112 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.049637079 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.078553915 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.078578949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.078623056 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.078663111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.078679085 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.127708912 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.130861044 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.130881071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.130901098 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.130928040 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.130948067 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.130964041 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.130969048 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.130990028 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.130995035 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131036043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131067991 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131087065 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131122112 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131129026 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131155014 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131169081 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131438971 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131459951 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131489992 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131495953 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.131527901 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.131541014 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.132919073 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.132945061 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.132976055 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.132982016 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.132998943 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.133017063 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.133023024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.133030891 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.133040905 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.133060932 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.134543896 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.134572983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.134604931 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.134612083 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.134633064 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.137841940 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.137870073 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.137897968 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.137904882 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.137929916 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.168498039 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.168524981 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.168566942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.168603897 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.168618917 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219513893 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219546080 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219582081 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219603062 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219634056 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219656944 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219685078 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219748020 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219763994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219795942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219803095 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.219830990 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.219837904 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.220112085 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.220129013 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.220186949 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.220196009 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.220232010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.221402884 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221417904 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221497059 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.221503973 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221539021 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.221704006 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221725941 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221759081 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.221765995 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.221788883 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.221806049 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.223892927 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.223908901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.223961115 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.223968983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.224018097 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.226433039 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.226449013 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.226557016 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.226589918 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.226696968 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308383942 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308409929 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308446884 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308460951 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308490038 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308522940 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308541059 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308543921 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308543921 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308569908 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308577061 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308587074 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308612108 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308916092 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308938026 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308964014 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.308970928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.308995008 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.310050964 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310065031 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310132980 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.310141087 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310276031 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310288906 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310323954 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310333014 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.310340881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.310363054 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.312412024 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.312426090 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.312478065 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.312486887 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.315727949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.315747976 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.315788984 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.315798044 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.315813065 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.322184086 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.396626949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396653891 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396785021 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.396826029 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396857977 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396878004 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396905899 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.396914959 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.396936893 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.396960020 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397119999 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397135973 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397160053 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397166967 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397183895 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397202969 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397368908 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397383928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397413015 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397419930 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.397443056 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.397459984 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398646116 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398667097 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398694992 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398706913 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398726940 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398742914 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398876905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398930073 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398929119 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398955107 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.398983002 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.398997068 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.401015043 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.401035070 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.401072979 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.401087046 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.401099920 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.403420925 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.403579950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.403601885 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.403633118 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.403640985 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.403662920 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.403680086 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.485255003 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485282898 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485353947 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485397100 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485404968 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.485433102 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485466003 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.485495090 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.485635996 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485656023 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485706091 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.485722065 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.485739946 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.486107111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.486126900 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.486150026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.486160994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.486185074 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.487087011 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487102032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487138987 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.487157106 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487607956 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487627029 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487658024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.487668991 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.487689972 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.489707947 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.489722013 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.489763975 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.489792109 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.489811897 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.492285967 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.492305040 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.492331028 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.492371082 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.492387056 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.533971071 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.538117886 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574085951 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574110985 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574156046 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574158907 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574193001 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574193954 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574215889 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574239969 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574315071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574363947 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574414968 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574429989 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574476004 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574501991 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574557066 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574577093 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574852943 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574868917 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574897051 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574906111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.574929953 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.574949026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.575774908 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.575789928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.575820923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.575829029 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.575850964 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.575865984 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.576226950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.576240063 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.576272011 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.576281071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.576304913 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.576319933 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.578207016 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.578223944 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.578267097 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.578275919 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.578305960 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.578324080 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.580754995 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.580769062 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.580828905 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.580837011 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.581526995 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.662683010 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662708998 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662755966 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662789106 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.662801027 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662826061 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662838936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.662861109 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.662861109 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.662900925 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.662905931 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663090944 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663110018 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663116932 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663129091 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663137913 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663234949 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663240910 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663273096 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663393974 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663414001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663451910 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663458109 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.663480043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.663497925 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.664350986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664374113 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664406061 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.664411068 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664448023 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.664817095 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664839983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664870024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.664875031 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.664915085 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.664937973 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.666871071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.666893005 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.666959047 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.666959047 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.666966915 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.667011976 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.669523001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.669563055 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.669598103 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.669604063 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.669627905 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.669645071 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.707302094 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.707591057 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.707608938 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.707978964 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.708287001 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.708344936 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.708440065 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.751225948 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751260042 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751302958 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751329899 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.751331091 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751354933 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751379967 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751413107 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751434088 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751471043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751477957 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751508951 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751523018 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751749992 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751770020 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751805067 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751811028 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.751841068 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.751858950 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.752257109 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.752278090 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.752334118 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.752340078 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.752424955 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.752979994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.752999067 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.753046989 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.753052950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.753082991 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.753093004 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.753701925 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.753725052 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.753763914 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.753770113 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.753797054 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.753813982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.755377054 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.755397081 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.755433083 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.755439997 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.755481958 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.755495071 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.758131981 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.758161068 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.758193016 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.758199930 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.758245945 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.821053982 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.821122885 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.821259975 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.821643114 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.821671009 CET	443	49754	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:09.821747065 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.822110891 CET	49754	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:09.839809895 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.839837074 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840004921 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840042114 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840042114 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840064049 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840075970 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840115070 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840317011 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840332985 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840387106 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840394020 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840468884 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840794086 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840809107 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840862036 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.840868950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.840929985 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.841483116 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.841499090 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.841561079 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.841569901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.841653109 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.842099905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.842114925 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.842179060 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.842185974 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.842255116 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.843954086 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.843971968 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.844038963 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.844044924 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.844086885 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.846688032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.846705914 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.846786022 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.846792936 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.846843958 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.928560019 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.928589106 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.928646088 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.928661108 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.928687096 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.928714991 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.928734064 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.928783894 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.929008961 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929030895 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929090023 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.929100037 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929378986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929405928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929446936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.929455996 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.929507971 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.930252075 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.930275917 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.930311918 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.930322886 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.930360079 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.930910110 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.930943966 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.930984974 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.930994034 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.931039095 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.932564020 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.932585001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.932626963 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.932641983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.932697058 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.935369968 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.935386896 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.935446978 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:09.935483932 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:09.987127066 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017112017 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017139912 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017198086 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017230988 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017347097 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017368078 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017405033 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017412901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017436028 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017452002 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017602921 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017618895 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017663002 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.017668962 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.017786026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018038988 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018054962 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018096924 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018105030 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018136024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018434048 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018714905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018738031 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018786907 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018794060 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.018815041 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.018831968 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.019412994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.019429922 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.019479036 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.019489050 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.019514084 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.019532919 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.021189928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.021208048 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.021275043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.021296024 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.021338940 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.025232077 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.025269032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.025312901 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.025340080 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.025360107 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.025379896 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.105756998 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.105782032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.105855942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.105860949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.105885029 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.105907917 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.105916023 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.105950117 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.105956078 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106057882 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.106273890 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106288910 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106352091 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.106359959 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106431961 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.106571913 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106601000 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106635094 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.106641054 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.106662035 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.106684923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.107389927 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.107408047 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.107506990 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.107513905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.107659101 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.107950926 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.107968092 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.108011961 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.108017921 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.108046055 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.108063936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.109755993 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.109772921 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.109803915 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.109808922 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.109849930 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.113670111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.113698959 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.113732100 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.113746881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.113769054 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.113801003 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195451975 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195480108 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195524931 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195552111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195565939 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195588112 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195595026 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195616007 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195628881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195643902 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195647955 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195656061 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195688009 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195693016 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195703030 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195733070 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195746899 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195751905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195784092 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195806026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.195858002 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.195873022 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.196021080 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.196026087 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.196057081 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.196540117 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.196566105 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.196618080 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.196630955 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.196683884 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.198256016 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.198281050 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.198323965 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.198338032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.198518038 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.202316999 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.202334881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.202387094 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.202399969 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.202435970 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.282972097 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.282994032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283044100 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283071041 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283107042 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283118963 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283206940 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283225060 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283252954 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283258915 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283286095 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283303976 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283607960 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283627033 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283654928 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283660889 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283685923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283701897 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283876896 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283894062 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.283947945 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.283956051 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.284265041 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.284621000 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.284636974 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.284677982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.284687042 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.284708023 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.284723043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.285223961 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.285243034 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.285274982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.285284042 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.285306931 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.285332918 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.286865950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.286911964 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.286936045 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.286947966 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.286967993 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.290908098 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.290925980 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.290976048 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.290992975 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.291021109 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.346482992 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.371783018 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.371803999 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.371870995 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.371901035 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372004032 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372024059 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372082949 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372082949 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372090101 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372109890 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372124910 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372132063 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372137070 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372164965 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372191906 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372267008 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372313976 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372648954 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372664928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372692108 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372695923 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.372718096 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.372737885 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.373337984 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.373353958 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.373420000 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.373424053 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.373541117 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.373965979 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.373980999 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.374011993 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.374016047 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.374037981 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.374053001 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.375720978 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.375741005 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.375775099 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.375783920 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.375808001 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.375824928 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.379532099 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.379549026 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.379591942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.379605055 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.379622936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.379642010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460591078 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.460618019 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.460663080 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460681915 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.460722923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460722923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460850000 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.460866928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.460927010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460927010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.460933924 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461128950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461149931 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461205006 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.461205006 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.461211920 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461509943 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461529016 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461597919 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.461597919 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.461605072 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.461985111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462007046 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462065935 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.462065935 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.462073088 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462579966 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462594032 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.462594986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462605953 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.462671995 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.462671995 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.464337111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.464356899 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.464415073 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.464415073 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.464426994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.468344927 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.468676090 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.468694925 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.468745947 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.468753099 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.471205950 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549253941 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549288034 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549343109 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549365997 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549411058 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549411058 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549536943 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549556017 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549616098 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549616098 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549622059 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549838066 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549860001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.549916983 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549916983 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.549925089 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550193071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550206900 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550268888 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.550268888 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.550277948 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550649881 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550676107 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.550725937 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.550725937 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.550734997 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.551320076 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.552062988 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.552088022 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.552166939 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.552166939 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.552179098 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.556358099 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.557143927 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.557168007 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.557213068 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.557224989 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.557266951 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.557266951 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.585923910 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.585949898 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.586021900 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.586044073 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.586078882 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.586750031 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.637952089 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.637991905 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638093948 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638093948 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638120890 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638155937 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638211012 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638214111 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638214111 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638225079 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638325930 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638468981 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638494015 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638561010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638561010 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638570070 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638840914 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638855934 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638859987 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638873100 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638900995 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638906002 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.638938904 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.638938904 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.639266968 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.639287949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.639349937 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.639353037 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.639386892 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.639386892 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.641225100 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.641249895 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.641328096 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.641333103 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.641514063 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.645787001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.645818949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.645859003 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.645869970 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.645915985 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.645915985 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.674544096 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.674571991 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.674705982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.674732924 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.674959898 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727003098 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727067947 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727103949 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727129936 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727185965 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727185965 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727242947 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727297068 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727330923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727349997 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727392912 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727426052 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727483034 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727530956 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727591991 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727591991 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727601051 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727669954 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727721930 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.727781057 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727781057 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.727788925 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.728168964 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.728312969 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.728355885 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.728398085 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.728404999 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.728574038 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.728650093 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.729962111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.730021000 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.730103970 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.730103970 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.730113983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.730233908 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.734669924 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.734694004 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.734771013 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.734791040 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.735047102 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.763164997 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.763195038 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.763261080 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.763277054 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.763290882 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.763416052 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815423012 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815454006 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815570116 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815570116 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815597057 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815639019 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815673113 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815695047 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815762043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815762043 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.815767050 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815970898 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.815993071 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816061020 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816061020 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816066027 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816272974 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816287994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816299915 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816304922 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816340923 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816380024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816734076 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816751003 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.816926956 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.816935062 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.817136049 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.818377972 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.818402052 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.818449974 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.818454981 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.818500042 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.818500042 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.823204994 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.823234081 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.823327065 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.823327065 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.823333979 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.823374987 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.851804972 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.851833105 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.851905107 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.851922989 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.851962090 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904061079 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904093027 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904128075 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904145956 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904191971 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904311895 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904315948 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904819965 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904844046 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.904907942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904907942 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.904913902 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905143976 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905160904 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905222893 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905222893 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905229092 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905266047 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905287027 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905354977 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905354977 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905359983 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905627966 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905647039 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905673981 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905678988 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.905730963 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.905730963 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.907129049 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.907154083 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.907294989 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.907300949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.907650948 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.911715984 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.911744118 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.912187099 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.912193060 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.912241936 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.940510035 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.940536976 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.940711021 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.940727949 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.940782070 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.992922068 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.993019104 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.993088961 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.993089914 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.993107080 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994033098 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994055986 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994117022 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994123936 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994165897 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994184017 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994189024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994261026 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994266987 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994290113 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994304895 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994349957 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994354963 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994394064 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994429111 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994446039 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994488001 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994508982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994508982 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.994523048 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.994606972 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.995346069 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.995363951 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.995410919 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.995415926 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.995450974 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.996242046 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.996259928 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:10.996328115 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.996328115 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:10.996332884 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.000597954 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.000623941 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.000662088 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.000668049 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.000725985 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.081608057 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.081644058 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.081691980 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.081712008 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.081722975 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.081753016 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.082628965 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.082683086 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.082741976 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.082741976 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.082748890 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.082834005 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083297968 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083367109 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083367109 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083398104 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083447933 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083447933 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083565950 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083619118 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083637953 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083642960 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083693981 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083750963 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083800077 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083847046 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083847046 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.083853006 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.083955050 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.084266901 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.084315062 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.084356070 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.084361076 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.084393024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.084393024 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.084496975 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.084882975 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.085227013 CET	49751	443	192.168.2.10	18.173.205.50
Jan 10, 2025 21:02:11.085242033 CET	443	49751	18.173.205.50	192.168.2.10
Jan 10, 2025 21:02:11.666085005 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:11.666129112 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:11.666186094 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:11.666944027 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:11.666956902 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.369733095 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.370053053 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.375077963 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.375082970 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.375402927 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.375612020 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.376782894 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.423322916 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.540791988 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.540863991 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.540874958 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.540894032 CET	443	49756	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:12.540916920 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.540997982 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.540998936 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:12.541079998 CET	49756	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:41.687841892 CET	443	49704	13.107.246.45	192.168.2.10
Jan 10, 2025 21:02:41.687925100 CET	443	49704	13.107.246.45	192.168.2.10
Jan 10, 2025 21:02:41.688040972 CET	49704	443	192.168.2.10	13.107.246.45
Jan 10, 2025 21:02:41.688782930 CET	49704	443	192.168.2.10	13.107.246.45
Jan 10, 2025 21:02:41.688992023 CET	443	49704	13.107.246.45	192.168.2.10
Jan 10, 2025 21:02:41.689057112 CET	49704	443	192.168.2.10	13.107.246.45
Jan 10, 2025 21:02:41.694892883 CET	443	49704	13.107.246.45	192.168.2.10
Jan 10, 2025 21:02:44.817563057 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:44.817596912 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:54.378467083 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:54.378654003 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:54.378834963 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:55.788099051 CET	49734	443	192.168.2.10	3.231.74.234
Jan 10, 2025 21:02:55.788160086 CET	443	49734	3.231.74.234	192.168.2.10
Jan 10, 2025 21:02:58.006535053 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:58.006594896 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.006686926 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:58.007096052 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:58.007111073 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.656835079 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.657407045 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:58.657452106 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.657892942 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.658236027 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:02:58.658308983 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:02:58.708065033 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:08.559334993 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:08.559468031 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:08.559528112 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:09.788258076 CET	49758	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:09.788290024 CET	443	49758	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.073797941 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:58.073849916 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.073908091 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:58.074460983 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:58.074490070 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.719563007 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.719923973 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:58.719959021 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.721069098 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.721435070 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:03:58.721630096 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:03:58.768938065 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:04:08.619285107 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:04:08.619389057 CET	443	49760	142.250.186.164	192.168.2.10
Jan 10, 2025 21:04:08.619617939 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:04:09.786753893 CET	49760	443	192.168.2.10	142.250.186.164
Jan 10, 2025 21:04:09.786781073 CET	443	49760	142.250.186.164	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 21:01:53.622387886 CET	53	56102	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:53.644484997 CET	53	53642	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:54.669315100 CET	53	60441	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:57.941800117 CET	53809	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:01:57.941968918 CET	52348	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:01:57.948371887 CET	53	53809	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:57.948997021 CET	53	52348	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:58.767920017 CET	53268	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:01:58.768068075 CET	57773	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:01:58.820067883 CET	53	57773	1.1.1.1	192.168.2.10
Jan 10, 2025 21:01:58.993536949 CET	53	53268	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:00.991971970 CET	61077	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:00.992409945 CET	60648	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:01.002815008 CET	53	61077	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:01.003112078 CET	53	60648	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:02.399750948 CET	138	138	192.168.2.10	192.168.2.255
Jan 10, 2025 21:02:03.860769987 CET	54718	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:03.860949993 CET	65299	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:03.861463070 CET	60624	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:03.861907959 CET	59592	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:03.868757010 CET	53	60624	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:03.879914999 CET	53	59592	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:03.880697012 CET	53	54718	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:03.885054111 CET	53	65299	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.150749922 CET	50913	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.151199102 CET	51312	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.162786961 CET	53	50913	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.164171934 CET	53	51312	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.532596111 CET	53609	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.532764912 CET	56954	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.550023079 CET	53	56954	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.551150084 CET	53	53609	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.601888895 CET	50195	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.602387905 CET	60169	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:05.608838081 CET	53	50195	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:05.609687090 CET	53	60169	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:07.703749895 CET	50477	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:07.703995943 CET	61068	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:07.710520983 CET	53	50477	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:07.711252928 CET	53	61068	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:11.476803064 CET	60292	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:11.663985968 CET	53	60292	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:11.717441082 CET	53	60731	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:26.816078901 CET	56743	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:26.887352943 CET	53	56743	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:30.808897018 CET	53	61980	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:45.881016970 CET	59979	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:02:45.924209118 CET	53	59979	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:53.177820921 CET	53	65177	1.1.1.1	192.168.2.10
Jan 10, 2025 21:02:53.717591047 CET	53	62739	1.1.1.1	192.168.2.10
Jan 10, 2025 21:03:06.177963018 CET	56715	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:03:06.377729893 CET	53	56715	1.1.1.1	192.168.2.10
Jan 10, 2025 21:03:23.483064890 CET	53	63406	1.1.1.1	192.168.2.10
Jan 10, 2025 21:03:38.568305016 CET	51998	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:03:38.614669085 CET	53	51998	1.1.1.1	192.168.2.10
Jan 10, 2025 21:04:08.513082981 CET	53	59706	1.1.1.1	192.168.2.10
Jan 10, 2025 21:04:18.223335981 CET	57448	53	192.168.2.10	1.1.1.1
Jan 10, 2025 21:04:18.249280930 CET	53	57448	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 21:02:03.880026102 CET	192.168.2.10	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 21:01:57.941800117 CET	192.168.2.10	1.1.1.1	0x960d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:57.941968918 CET	192.168.2.10	1.1.1.1	0x40cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 21:01:58.767920017 CET	192.168.2.10	1.1.1.1	0x1684	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.768068075 CET	192.168.2.10	1.1.1.1	0xb8d6	Standard query (0)	bofa.com-onlinebanking.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:00.991971970 CET	192.168.2.10	1.1.1.1	0xacec	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:00.992409945 CET	192.168.2.10	1.1.1.1	0x4d9c	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Jan 10, 2025 21:02:03.860769987 CET	192.168.2.10	1.1.1.1	0x1a3a	Standard query (0)	helpimg.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.860949993 CET	192.168.2.10	1.1.1.1	0x1272	Standard query (0)	helpimg.s3.amazonaws.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:03.861463070 CET	192.168.2.10	1.1.1.1	0x2869	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.861907959 CET	192.168.2.10	1.1.1.1	0x4e41	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:05.150749922 CET	192.168.2.10	1.1.1.1	0xd2f1	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.151199102 CET	192.168.2.10	1.1.1.1	0xd5bc	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Jan 10, 2025 21:02:05.532596111 CET	192.168.2.10	1.1.1.1	0x69e4	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.532764912 CET	192.168.2.10	1.1.1.1	0xaffd	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:05.601888895 CET	192.168.2.10	1.1.1.1	0xe3c1	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.602387905 CET	192.168.2.10	1.1.1.1	0x8dc2	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:07.703749895 CET	192.168.2.10	1.1.1.1	0x16ce	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.703995943 CET	192.168.2.10	1.1.1.1	0x6aa	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jan 10, 2025 21:02:11.476803064 CET	192.168.2.10	1.1.1.1	0x7386	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.816078901 CET	192.168.2.10	1.1.1.1	0xee31	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.881016970 CET	192.168.2.10	1.1.1.1	0xb00b	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.177963018 CET	192.168.2.10	1.1.1.1	0x9c46	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.568305016 CET	192.168.2.10	1.1.1.1	0x9deb	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.223335981 CET	192.168.2.10	1.1.1.1	0x876f	Standard query (0)	bofa.com-onlinebanking.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 21:01:57.948371887 CET	1.1.1.1	192.168.2.10	0x960d	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:57.948997021 CET	1.1.1.1	192.168.2.10	0x40cd	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 21:01:58.820067883 CET	1.1.1.1	192.168.2.10	0xb8d6	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:01:58.993536949 CET	1.1.1.1	192.168.2.10	0x1684	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:01.002815008 CET	1.1.1.1	192.168.2.10	0xacec	No error (0)	secured-login.net		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.868757010 CET	1.1.1.1	192.168.2.10	0x2869	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.868757010 CET	1.1.1.1	192.168.2.10	0x2869	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.868757010 CET	1.1.1.1	192.168.2.10	0x2869	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.868757010 CET	1.1.1.1	192.168.2.10	0x2869	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.123.201	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.221.185	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.205	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.106	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.225.225	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.41.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.160.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.880697012 CET	1.1.1.1	192.168.2.10	0x1a3a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:03.885054111 CET	1.1.1.1	192.168.2.10	0x1272	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:03.885054111 CET	1.1.1.1	192.168.2.10	0x1272	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.162786961 CET	1.1.1.1	192.168.2.10	0xd2f1	No error (0)	secured-login.net		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.551150084 CET	1.1.1.1	192.168.2.10	0x69e4	No error (0)	training.knowbe4.com		18.173.205.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.551150084 CET	1.1.1.1	192.168.2.10	0x69e4	No error (0)	training.knowbe4.com		18.173.205.70	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.551150084 CET	1.1.1.1	192.168.2.10	0x69e4	No error (0)	training.knowbe4.com		18.173.205.111	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.551150084 CET	1.1.1.1	192.168.2.10	0x69e4	No error (0)	training.knowbe4.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.608838081 CET	1.1.1.1	192.168.2.10	0xe3c1	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.608838081 CET	1.1.1.1	192.168.2.10	0xe3c1	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.608838081 CET	1.1.1.1	192.168.2.10	0xe3c1	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.608838081 CET	1.1.1.1	192.168.2.10	0xe3c1	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.608838081 CET	1.1.1.1	192.168.2.10	0xe3c1	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:05.609687090 CET	1.1.1.1	192.168.2.10	0x8dc2	No error (0)	unpkg.com			65	IN (0x0001)	false
Jan 10, 2025 21:02:07.710520983 CET	1.1.1.1	192.168.2.10	0x16ce	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.710520983 CET	1.1.1.1	192.168.2.10	0x16ce	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.710520983 CET	1.1.1.1	192.168.2.10	0x16ce	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.710520983 CET	1.1.1.1	192.168.2.10	0x16ce	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.710520983 CET	1.1.1.1	192.168.2.10	0x16ce	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:07.711252928 CET	1.1.1.1	192.168.2.10	0x6aa	No error (0)	unpkg.com			65	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:11.663985968 CET	1.1.1.1	192.168.2.10	0x7386	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:26.887352943 CET	1.1.1.1	192.168.2.10	0xee31	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:02:45.924209118 CET	1.1.1.1	192.168.2.10	0xb00b	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:06.377729893 CET	1.1.1.1	192.168.2.10	0x9c46	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:03:38.614669085 CET	1.1.1.1	192.168.2.10	0x9deb	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	bofa.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		3.231.74.234	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		34.193.6.123	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		34.195.197.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		35.169.9.104	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		54.87.176.87	A (IP address)	IN (0x0001)	false
Jan 10, 2025 21:04:18.249280930 CET	1.1.1.1	192.168.2.10	0x876f	No error (0)	landing.training.knowbe4.com		54.161.180.244	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

bofa.com-onlinebanking.com

https:

secured-login.net

helpimg.s3.amazonaws.com

training.knowbe4.com

unpkg.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49735	3.231.74.234	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:01:59 UTC	997	OUT	GET /XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267 HTTP/1.1 Host: bofa.com-onlinebanking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:00 UTC	574	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 461 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"f7f2e4e9d00b69650824e4cb575ae3a6" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: c62efa4e-8561-4426-ae21-5d46c208b595 X-Runtime: 0.361124 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-01-10 20:02:00 UTC	461	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 35 38 30 30 64 36 61 32 39 30 63 61 2f 58 4d 44 4a 73 63 47 34 7a 59 30 31 79 53 58 56 70 4e 58 46 77 54 58 56 6a 64 7a 4a 77 4f 46 6c 54 62 6d 35 4a 4d 56 6c 78 61 6d 59 72 59 54 64 68 56 47 5a 34 63 46 6c 70 4d 47 4e 50 55 30 74 35 64 55 31 61 53 6b 46 68 5a 33 70 76 56 46 59 30 61 6a 46 4e 64 45 56 68 53 30 64 76 62 44 5a 6d 56 30 35 59 64 56 64 5a 55 45 74 45 5a 32 46 45 65 6b 52 6f 56 46 64 4f 63 6b 49 32 53 46 6c 43 61 33 5a 31 55 30 46 4c 61 46 51 30 65 46 68 52 51 33 5a 46 5a 32 52 4b 56 79 39 Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49737	34.193.6.123	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:01 UTC	1352	OUT	GET /pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:03 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 75074 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"69feb31d20f8340079383eb02bd89606" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: e4168114-eae7-4f0e-ab22-78fc0b023f80 X-Runtime: 2.025134 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-01-10 20:02:03 UTC	15551	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2025-01-10 20:02:03 UTC	16384	IN	Data Raw: 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 68 65 5f 69 6c 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 48 65 62 72 65 77 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d7 a2 d7 91 d7 a8 d7 99 d7 aa 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 61 72 5f 6d 6f 64 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 41 72 61 62 69 63 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 74 72 75 65 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 7b 0a 09 Data Ascii: },{id: 'he_il',name_english: 'Hebrew',name_localized: '',rtl: true,},{id: 'ar_mod',name_english: 'Arabic',name_localized: '',rtl: true,},{
2025-01-10 20:02:03 UTC	56	IN	Data Raw: 65 33 3a 0a 09 09 09 09 09 09 09 27 56 c3 a9 72 69 66 69 65 7a 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 Data Ascii: e3:'Vrifiez les courriels suspects auprs de
2025-01-10 20:02:03 UTC	16384	IN	Data Raw: 6c 65 75 72 20 65 78 70 c3 a9 64 69 74 65 75 72 20 c3 a0 20 6c e2 80 99 61 69 64 65 20 64 e2 80 99 75 6e 20 61 75 74 72 65 20 6d 6f 79 65 6e 20 64 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 27 2c 0a 09 09 09 09 09 09 72 65 70 6f 72 74 3a 0a 09 09 09 09 09 09 09 27 53 6f 75 76 65 6e 65 7a 2d 76 6f 75 73 20 3a 20 53 69 67 6e 61 6c 65 7a 20 74 6f 75 6a 6f 75 72 73 20 6c 65 73 20 63 6f 75 72 72 69 65 6c 73 20 73 75 73 70 65 63 74 73 20 61 75 70 72 c3 a8 73 20 64 65 20 76 6f 74 72 65 20 73 75 70 65 72 76 69 73 65 75 72 20 6f 75 20 64 65 20 76 6f 74 72 65 20 c3 a9 71 75 69 70 65 20 64 65 73 20 54 49 2e 20 4c 65 73 20 63 72 69 6d 69 6e 65 6c 73 20 64 65 20 6c e2 80 99 49 6e 74 65 72 6e 65 74 20 74 65 6e 74 65 72 6f 6e 74 20 64 65 20 76 6f 75 73 20 65 73 63 Data Ascii: leur expditeur laide dun autre moyen de communication.',report:'Souvenez-vous : Signalez toujours les courriels suspects auprs de votre superviseur ou de votre quipe des TI. Les criminels de lInternet tenteront de vous esc
2025-01-10 20:02:03 UTC	16384	IN	Data Raw: 65 72 61 74 20 6e c3 a4 74 66 69 73 6b 65 74 65 73 74 21 27 2c 0a 09 09 09 09 09 09 72 65 6d 65 6d 62 65 72 3a 0a 09 09 09 09 09 09 09 27 4b 6f 6d 20 69 68 c3 a5 67 20 64 65 73 73 61 20 74 72 65 20 72 65 67 6c 65 72 20 66 c3 b6 72 20 61 74 74 20 6e 61 76 69 67 65 72 61 20 73 c3 a4 6b 65 72 74 20 70 c3 a5 20 6e c3 a4 74 65 74 3a 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 31 3a 20 27 53 74 61 6e 6e 61 20 75 70 70 2c 20 74 69 74 74 61 20 6f 63 68 20 74 c3 a4 6e 6b 20 65 66 74 65 72 20 69 6e 6e 61 6e 20 64 75 20 6b 6c 69 63 6b 61 72 21 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 32 3a 0a 09 09 09 09 09 09 09 27 54 69 74 74 61 20 65 66 74 65 72 20 76 61 72 6e 69 6e 67 73 73 69 67 6e 61 6c 65 72 20 73 6f 6d 20 69 6e 64 69 6b 65 72 61 72 20 61 74 74 20 65 6e 20 6e c3 a4 Data Ascii: erat ntfisketest!',remember:'Kom ihg dessa tre regler fr att navigera skert p ntet:',rule1: 'Stanna upp, titta och tnk efter innan du klickar!',rule2:'Titta efter varningssignaler som indikerar att en n
2025-01-10 20:02:03 UTC	10315	IN	Data Raw: b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 b8 b3 e0 b8 a5 e0 b8 ad e0 b8 87 21 27 2c 0a 09 09 09 09 09 09 6c 61 6e 67 75 61 67 65 3a 20 27 e0 b9 80 e0 b8 a5 e0 b8 b7 e0 b8 ad e0 b8 81 e0 b8 a0 e0 b8 b2 e0 b8 a9 e0 b8 b2 e0 b8 88 e0 b8 b2 e0 b8 81 e0 b9 80 e0 b8 a1 e0 b8 99 e0 b8 b9 e0 b8 94 e0 b8 a3 e0 b9 87 e0 b8 ad e0 b8 9b e0 b8 94 e0 b8 b2 e0 b8 a7 e0 b8 99 e0 b9 8c 27 2c 0a 09 09 09 09 09 09 6f 6f 70 73 3a 20 27 e0 b8 82 e0 b8 ad e0 b8 ad e0 b8 a0 e0 b8 b1 e0 b8 a2 21 27 2c 0a 09 09 09 09 09 09 63 6c 69 63 6b 65 64 3a 20 27 e0 b8 84 e0 b8 b8 e0 b8 93 e0 b8 84 e0 b8 a5 e0 b8 b4 e0 b8 81 e0 b8 9a e0 b8 97 e0 b8 97 e0 b8 94 e0 b8 aa e0 b8 ad e0 b8 9a e0 b8 9f e0 b8 b4 e0 b8 8a e0 b8 8a e0 b8 b4 e0 b9 88 e0 b8 87 e0 b8 88 e0 Data Ascii: !',language: '',oops: '!',clicked: '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49736	34.193.6.123	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:03 UTC	958	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:04 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:03 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Fri, 10 Jan 2025 15:34:48 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-01-10 20:02:04 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49743	52.217.123.201	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:04 UTC	900	OUT	GET /landing_pages/oops/styles.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:04 UTC	502	IN	HTTP/1.1 200 OK x-amz-id-2: 5pEC+bETqHrzxrcRX/e3zd2LVmKiSlytR79qMdD1aWb3KZJeiDVnplprerZqOEZ0A/zTFKNH9Pg= x-amz-request-id: J95BT0QA9DVR564T Date: Fri, 10 Jan 2025 20:02:05 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 05 Dec 2024 22:09:56 GMT ETag: "b13b4f098d80ac49dcc6bed4e459d560" x-amz-server-side-encryption: AES256 x-amz-version-id: euN8e1egT0HP5Qpqr.UG1XrfZxMZiG5f Accept-Ranges: bytes Content-Type: text/css Content-Length: 5649 Server: AmazonS3 Connection: close
2025-01-10 20:02:04 UTC	5649	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 66 66 66 66 66 66 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 32 30 30 3a 20 23 66 35 66 35 66 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 33 30 30 3a 20 23 64 35 64 35 64 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 34 30 30 3a 20 23 61 62 61 62 61 62 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 3a 20 23 37 30 37 30 37 30 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 36 30 30 3a 20 23 32 63 32 63 32 63 3b 0a 0a 09 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 73 Data Ascii: :root {--clr-neutral-100: #ffffff;--clr-neutral-200: #f5f5f5;--clr-neutral-300: #d5d5d5;--clr-neutral-400: #ababab;--clr-neutral-500: #707070;--clr-neutral-600: #2c2c2c;/* Padding */--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);--padding-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49739	34.193.6.123	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:04 UTC	937	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:04 UTC	279	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:04 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Fri, 10 Jan 2025 15:34:48 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-01-10 20:02:04 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2025-01-10 20:02:04 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2025-01-10 20:02:04 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49742	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:04 UTC	939	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:05 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Date: Fri, 10 Jan 2025 20:02:06 GMT Last-Modified: Thu, 23 May 2024 17:09:54 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8c1c3a8ed856f5c19ce3b4158bff94a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: IIoT8G5a5npQTz0reWjFN0SnZCYAWEFWVA3vkRoNDynGbq1yOiaEEw==
2025-01-10 20:02:05 UTC	1796	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2025-01-10 20:02:05 UTC	7153	IN	Data Raw: 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 77 65 20 Data Ascii: / The jQuery object is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make sure we
2025-01-10 20:02:05 UTC	7971	IN	Data Raw: 6f 66 74 20 66 6f 72 67 6f 74 20 74 6f 20 68 75 6d 70 20 74 68 65 69 72 20 76 65 6e 64 6f 72 20 70 72 65 66 69 78 20 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d Data Ascii: oft forgot to hump their vendor prefix (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() =
2025-01-10 20:02:05 UTC	16384	IN	Data Raw: 74 65 73 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 3f 29 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 5c 5c 5d 22 2c 20 22 67 22 20 29 2c 0a 0a 09 72 70 73 65 75 64 6f 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 70 73 65 75 64 6f 73 20 29 2c 0a 09 72 69 64 65 6e 74 69 66 69 65 72 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 5e 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 24 22 20 29 2c 0a 0a 09 6d 61 74 63 68 45 78 70 72 20 3d 20 7b 0a 09 09 22 49 44 22 3a 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 5e 23 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 22 20 29 2c 0a 09 09 22 43 4c 41 53 53 22 3a 20 6e 65 77 20 52 65 67 45 Data Ascii: tes = new RegExp( "=" + whitespace + "([^\\]'\"]?)" + whitespace + "*\\]", "g" ),rpseudo = new RegExp( pseudos ),ridentifier = new RegExp( "^" + identifier + "$" ),matchExpr = {"ID": new RegExp( "^#(" + identifier + ")" ),"CLASS": new RegE
2025-01-10 20:02:05 UTC	15990	IN	Data Raw: 73 68 6f 75 6c 64 20 72 65 74 75 72 6e 20 73 65 6c 65 63 74 65 64 20 6f 70 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 73 0a 09 09 09 2f 2f 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 32 30 31 31 2f 52 45 43 2d 63 73 73 33 2d 73 65 6c 65 63 74 6f 72 73 2d 32 30 31 31 30 39 32 39 2f 23 63 68 65 63 6b 65 64 0a 09 09 09 2f 2f 20 49 45 38 20 74 68 72 6f 77 73 20 65 72 72 6f 72 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 65 65 20 6c 61 74 65 72 20 74 65 73 74 73 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 3b 0a 09 09 09 7d 0a Data Ascii: should return selected option elements// http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked// IE8 throws error here and will not see later testsif ( !div.querySelectorAll(":checked").length ) {rbuggyQSA.push(":checked");}
2025-01-10 20:02:05 UTC	2442	IN	Data Raw: 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 74 65 72 43 61 63 68 65 20 3d 20 6e 6f 64 65 5b 20 65 78 70 61 6e 64 6f 20 5d 20 7c 7c 20 28 6e 6f 64 65 5b 20 65 78 70 61 6e 64 6f 20 5d 20 3d 20 7b 7d 29 3b 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 20 3c 39 20 6f 6e 6c 79 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 44 65 66 65 6e 64 20 61 67 61 69 6e 73 74 20 63 6c 6f 6e 65 64 20 61 74 74 72 6f 70 65 72 74 69 65 73 20 28 6a 51 75 Data Ascii: ++diff ) {// Cache the index of each encountered elementif ( useCache ) {outerCache = node[ expando ] \|\| (node[ expando ] = {});// Support: IE <9 only// Defend against cloned attroperties (jQu
2025-01-10 20:02:05 UTC	16384	IN	Data Raw: 09 09 09 69 66 20 28 20 28 65 6c 65 6d 20 3d 20 75 6e 6d 61 74 63 68 65 64 5b 69 5d 29 20 29 20 7b 0a 09 09 09 09 09 09 09 73 65 65 64 5b 69 5d 20 3d 20 21 28 6d 61 74 63 68 65 73 5b 69 5d 20 3d 20 65 6c 65 6d 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 29 20 3a 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 09 09 69 6e 70 75 74 5b 30 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 6d 61 74 63 68 65 72 28 20 69 6e 70 75 74 2c 20 6e 75 6c 6c 2c 20 78 6d 6c 2c 20 72 65 73 75 6c 74 73 20 29 3b 0a 09 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 6b 65 65 70 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 28 69 73 73 75 65 20 23 32 39 39 29 0a 09 09 09 09 09 69 6e 70 75 74 5b 30 Data Ascii: if ( (elem = unmatched[i]) ) {seed[i] = !(matches[i] = elem);}}}) :function( elem, context, xml ) {input[0] = elem;matcher( input, null, xml, results );// Don't keep the element (issue #299)input[0
2025-01-10 20:02:05 UTC	16384	IN	Data Raw: 77 20 74 68 65 20 63 6f 75 6e 74 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 76 69 73 69 74 65 64 20 61 62 6f 76 65 2c 20 61 6e 64 20 61 64 64 69 6e 67 20 69 74 20 74 6f 20 60 6d 61 74 63 68 65 64 43 6f 75 6e 74 60 0a 09 09 09 2f 2f 20 6d 61 6b 65 73 20 74 68 65 20 6c 61 74 74 65 72 20 6e 6f 6e 6e 65 67 61 74 69 76 65 2e 0a 09 09 09 6d 61 74 63 68 65 64 43 6f 75 6e 74 20 2b 3d 20 69 3b 0a 0a 09 09 09 2f 2f 20 41 70 70 6c 79 20 73 65 74 20 66 69 6c 74 65 72 73 20 74 6f 20 75 6e 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 73 0a 09 09 09 2f 2f 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 61 6e 20 62 65 20 73 6b 69 70 70 65 64 20 69 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 75 6e 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 73 20 28 69 2e 65 2e 2c 20 60 6d 61 74 63 Data Ascii: w the count of elements visited above, and adding it to `matchedCount`// makes the latter nonnegative.matchedCount += i;// Apply set filters to unmatched elements// NOTE: This can be skipped if there are no unmatched elements (i.e., `matc
2025-01-10 20:02:05 UTC	16384	IN	Data Raw: 29 3b 0a 09 7d 2c 0a 09 6e 65 78 74 41 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 64 69 72 28 20 65 6c 65 6d 2c 20 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 20 29 3b 0a 09 7d 2c 0a 09 70 72 65 76 41 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 64 69 72 28 20 65 6c 65 6d 2c 20 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 20 29 3b 0a 09 7d 2c 0a 09 6e 65 78 74 55 6e 74 69 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 69 2c 20 75 6e 74 69 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 64 69 72 28 20 65 6c 65 6d 2c 20 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 20 75 6e 74 69 6c 20 29 3b 0a 09 7d 2c 0a 09 70 72 65 76 55 6e 74 69 6c 3a 20 66 75 6e Data Ascii: );},nextAll: function( elem ) {return dir( elem, "nextSibling" );},prevAll: function( elem ) {return dir( elem, "previousSibling" );},nextUntil: function( elem, i, until ) {return dir( elem, "nextSibling", until );},prevUntil: fun
2025-01-10 20:02:05 UTC	2048	IN	Data Raw: 74 65 45 78 70 61 6e 64 6f 20 3d 20 66 61 6c 73 65 3b 0a 09 7d 0a 0a 09 2f 2f 20 4e 75 6c 6c 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 64 20 6c 65 61 6b 73 20 69 6e 20 49 45 2e 0a 09 64 69 76 20 3d 20 6e 75 6c 6c 3b 0a 7d 20 29 28 29 3b 0a 76 61 72 20 61 63 63 65 70 74 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 20 29 20 7b 0a 09 76 61 72 20 6e 6f 44 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 6e 6f 44 61 74 61 5b 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 2b 20 22 20 22 20 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 5d 2c 0a 09 09 6e 6f 64 65 54 79 70 65 20 3d 20 2b 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 31 3b 0a 0a 09 2f 2f 20 44 6f 20 6e 6f 74 20 73 65 74 20 64 61 74 61 20 6f 6e 20 6e 6f 6e 2d 65 6c 65 6d Data Ascii: teExpando = false;}// Null elements to avoid leaks in IE.div = null;} )();var acceptData = function( elem ) {var noData = jQuery.noData[ ( elem.nodeName + " " ).toLowerCase() ],nodeType = +elem.nodeType \|\| 1;// Do not set data on non-elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49740	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:04 UTC	892	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:05 UTC	14580	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 09 Jan 2025 20:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .tRiab7yzF8w_r.Ri7ZNHJv6Cogkdszz Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Fri, 10 Jan 2025 20:02:06 GMT ETag: "92c82096f24e4111ffa65b244092e44b" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 65c5d5104f267ee43cce97d81871c884.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: G5ZiXMdNWNSTyZCrWupQRxmWg3K8klBBd8XepqkQynLplGEUp7jlSQ==
2025-01-10 20:02:05 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49741	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:04 UTC	937	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:05 UTC	14586	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Date: Fri, 10 Jan 2025 20:02:06 GMT Last-Modified: Thu, 23 May 2024 17:10:02 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: C8YlnxDB4NxfxMBDr7c8i_Ru_I_E_1UjPaFswoKLD8OjV1ZzSU-MVg==
2025-01-10 20:02:05 UTC	1798	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2025-01-10 20:02:05 UTC	14192	IN	Data Raw: 6c 69 74 28 27 20 27 29 2c 0a 20 20 20 20 2f 2a 3e 3e 70 72 65 66 69 78 65 73 2a 2f 0a 0a 20 20 20 20 2f 2a 3e 3e 64 6f 6d 70 72 65 66 69 78 65 73 2a 2f 0a 20 20 20 20 2f 2f 20 46 6f 6c 6c 6f 77 69 6e 67 20 73 70 65 63 20 69 73 20 74 6f 20 65 78 70 6f 73 65 20 76 65 6e 64 6f 72 2d 73 70 65 63 69 66 69 63 20 73 74 79 6c 65 20 70 72 6f 70 65 72 74 69 65 73 20 61 73 3a 0a 20 20 20 20 2f 2f 20 20 20 65 6c 65 6d 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 42 6f 72 64 65 72 52 61 64 69 75 73 0a 20 20 20 20 2f 2f 20 61 6e 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 77 6f 75 6c 64 20 62 65 20 69 6e 63 6f 72 72 65 63 74 3a 0a 20 20 20 20 2f 2f 20 20 20 65 6c 65 6d 2e 73 74 79 6c 65 2e 77 65 62 6b 69 74 42 6f 72 64 65 72 52 61 64 69 75 73 0a 0a 20 20 20 20 2f 2f 20 Data Ascii: lit(' '), />>prefixes/ />>domprefixes/ // Following spec is to expose vendor-specific style properties as: // elem.style.WebkitBorderRadius // and the following would be incorrect: // elem.style.webkitBorderRadius //
2025-01-10 20:02:05 UTC	964	IN	Data Raw: 64 20 74 6f 20 74 68 72 6f 77 20 61 6e 20 65 78 63 65 70 74 69 6f 6e 20 77 68 65 6e 20 75 73 69 6e 67 20 6f 70 65 6e 44 61 74 61 62 61 73 65 0a 20 20 20 20 2f 2f 20 49 74 20 64 6f 65 73 6e 27 74 20 61 6e 79 6d 6f 72 65 2e 0a 20 20 20 20 74 65 73 74 73 5b 27 77 65 62 73 71 6c 64 61 74 61 62 61 73 65 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2f 20 56 65 6e 64 6f 72 73 20 68 61 64 20 69 6e 63 6f 6e 73 69 73 74 65 6e 74 20 70 72 65 66 69 78 69 6e 67 20 77 69 74 68 20 74 68 65 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 49 6e 64 65 78 65 64 20 44 42 3a 0a 20 20 20 20 2f 2f 20 2d 20 57 65 62 6b 69 74 27 73 Data Ascii: d to throw an exception when using openDatabase // It doesn't anymore. tests['websqldatabase'] = function() { return !!window.openDatabase; }; // Vendors had inconsistent prefixing with the experimental Indexed DB: // - Webkit's
2025-01-10 20:02:05 UTC	16384	IN	Data Raw: 65 72 20 61 6e 64 20 70 72 6f 70 65 72 74 79 2d 6d 61 74 63 68 69 6e 67 20 6f 6e 65 2e 0a 20 20 20 20 2f 2f 20 54 68 65 20 6f 6c 64 20 41 50 49 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 31 2e 36 2c 20 62 75 74 20 61 73 20 6f 66 20 32 2e 30 20 77 69 6c 6c 20 74 68 72 6f 77 20 61 20 77 61 72 6e 69 6e 67 2c 0a 20 20 20 20 2f 2f 20 61 6e 64 20 69 6e 20 74 68 65 20 66 69 72 73 74 20 72 65 6c 65 61 73 65 20 74 68 65 72 65 61 66 74 65 72 20 64 69 73 61 70 70 65 61 72 20 65 6e 74 69 72 65 6c 79 2e 0a 20 20 20 20 74 65 73 74 73 5b 27 68 69 73 74 6f 72 79 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 68 69 73 74 6f 72 79 2e 70 75 Data Ascii: er and property-matching one. // The old API is still available in 1.6, but as of 2.0 will throw a warning, // and in the first release thereafter disappear entirely. tests['history'] = function() { return !!(window.history && history.pu
2025-01-10 20:02:05 UTC	1024	IN	Data Raw: 6f 6f 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 70 75 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 27 73 65 61 72 63 68 20 74 65 6c 20 75 72 6c 20 65 6d 61 69 6c 20 64 61 74 65 74 69 6d 65 20 64 61 74 65 20 6d 6f 6e 74 68 20 77 65 65 6b 20 74 69 6d 65 20 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 63 6f 6c 6f 72 27 2e 73 70 6c 69 74 28 27 20 27 29 29 3b 0a 20 20 20 20 20 20 20 20 2f 2a 3e 3e 69 6e 70 75 74 74 79 70 65 73 2a 2f 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2f 20 45 6e 64 20 6f 66 20 74 65 73 74 20 64 65 66 69 6e 69 74 69 6f 6e 73 0a 20 20 20 20 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ool; } return inputs; })('search tel url email datetime date month week time datetime-local number range color'.split(' ')); />>inputtypes/ } />>webforms/ // End of test definitions // --------
2025-01-10 20:02:05 UTC	8949	IN	Data Raw: 3b 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 61 64 64 54 65 73 74 20 61 6c 6c 6f 77 73 20 74 68 65 20 75 73 65 72 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 69 72 20 6f 77 6e 20 66 65 61 74 75 72 65 20 74 65 73 74 73 0a 20 20 20 20 20 2a 20 74 68 65 20 72 65 73 75 6c 74 20 77 69 6c 6c 20 62 65 20 61 64 64 65 64 20 6f 6e 74 6f 20 74 68 65 20 4d 6f 64 65 72 6e 69 7a 72 20 6f 62 6a 65 63 74 2c 0a 20 20 20 20 20 2a 20 61 73 20 77 65 6c 6c 20 61 73 20 61 6e 20 61 70 70 72 6f 70 72 69 61 74 65 20 63 6c 61 73 73 4e 61 6d 65 20 73 65 74 20 6f 6e 20 74 68 65 20 68 74 6d 6c 20 65 6c 65 6d 65 6e 74 0a 20 20 20 20 20 2a 0a 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 66 65 61 74 75 72 65 20 2d 20 53 74 Data Ascii: ; />>webforms/ /** * addTest allows the user to define their own feature tests * the result will be added onto the Modernizr object, * as well as an appropriate className set on the html element * * @param feature - St
2025-01-10 20:02:05 UTC	8053	IN	Data Raw: 61 2e 66 72 61 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 6f 64 65 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 63 28 22 27 20 2b 20 6e 6f 64 65 4e 61 6d 65 20 2b 20 27 22 29 27 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 20 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 29 3b 72 65 74 75 72 6e 20 6e 7d 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 28 68 74 6d 6c 35 2c 20 64 61 74 61 2e 66 72 61 67 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: a.frag.createElement(nodeName); return 'c("' + nodeName + '")'; }) + ');return n}' )(html5, data.frag); } /*---------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49744	3.231.74.234	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:06 UTC	427	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:06 UTC	279	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:06 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Fri, 10 Jan 2025 15:34:48 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-01-10 20:02:06 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2025-01-10 20:02:06 UTC	56	IN	Data Raw: 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 Data Ascii: (e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").a
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 65 3f 63 65 2e 71 75 65 75 65 28 74 68 69 73 5b 30 5d 2c 74 29 3a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 Data Ascii: dd(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?ce.queue(this[0],t):void 0===n?this:this.each(function(){var e=ce.queue(this,t,n);ce._queueHooks(this,t)
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){ce.fn[e]=function(e){for(var t
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 62 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 77 74 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 Data Ascii: (r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?parseInt(t,10):bt.test(e.nodeName)\|\|wt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 5a 74 2e 74 65 73 74 28 65 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 61 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c Data Ascii: efilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Zt.test(e.data)&&"data");if(a\|\|"jsonp"===e.dataTypes[0])return r=e.jsonpCal
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 74 65 72 22 2c 69 5b 31 5d 3d 6c 2e 74 65 73 74 28 69 5b 31 5d 29 3f 69 5b 31 5d 3a 22 63 65 6e 74 65 72 22 2c 74 3d 68 2e 65 78 65 63 28 69 5b 30 5d 29 2c 65 3d 68 2e 65 78 65 63 28 69 5b 31 5d 29 2c 77 5b 74 68 69 73 5d 3d 5b 74 3f 74 5b 30 5d 3a 30 2c 65 3f 65 5b 30 5d 3a 30 5d 2c 75 5b 74 68 69 73 5d 3d 5b 63 2e 65 78 65 63 28 69 5b 30 5d 29 5b 30 5d 2c 63 2e 65 78 65 63 28 69 5b 31 5d 29 5b 30 5d 5d 7d 29 2c 31 3d 3d 3d 79 2e 6c 65 6e 67 74 68 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a Data Ascii: ter",i[1]=l.test(i[1])?i[1]:"center",t=h.exec(i[0]),e=h.exec(i[1]),w[this]=[t?t[0]:0,e?e[0]:0],u[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===y.length&&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2c 65 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 21 3d 3d 65 26 26 56 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 26 26 28 74 2e 6c 65 66 74 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 74 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 Data Ascii: ffset:function(){var t=this.offsetParent.offset(),e=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==e&&V.contains(this.scrollParent[0],this.offsetParent[0])&&(t.left+=this.scrollParent.scrollLeft(),t.top+=this.scrollParent.scr
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 74 2e 6f 66 66 73 65 74 28 29 2c 6e 5b 69 5d 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 7b 77 69 64 74 68 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 5b 69 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 29 29 7d 7d 2c 64 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 21 31 3b 72 65 74 75 72 6e 20 56 2e 65 61 63 68 28 28 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 64 72 6f 70 70 61 62 6c 65 73 5b 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 5d 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 Data Ascii: t.offset(),n[i].proportions({width:n[i].element[0].offsetWidth,height:n[i].element[0].offsetHeight}))}},drop:function(t,e){var i=!1;return V.each((V.ui.ddmanager.droppables[t.options.scope]\|\|[]).slice(),function(){this.options&&(!this.options.disabled&&th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49747	104.17.245.203	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:06 UTC	852	OUT	GET /petite-vue HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:06 UTC	524	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 20:02:06 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /petite-vue@0.4.1 vary: Accept via: 1.1 fly.io fly-request-id: 01JH8WNNYHSXX24F9GZCYBFBDQ-lga CF-Cache-Status: HIT Age: 291 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fff43446daec463-EWR
2025-01-10 20:02:06 UTC	45	IN	Data Raw: 32 37 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 0d 0a Data Ascii: 27Found. Redirecting to /petite-vue@0.4.1
2025-01-10 20:02:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49745	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:06 UTC	428	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:06 UTC	14593	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Date: Fri, 10 Jan 2025 20:02:06 GMT Last-Modified: Thu, 23 May 2024 17:10:02 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58afb490a7c8c45de5813dbf9e713c0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: YqPZ2ro2wTF_iUF2uGcU9pVdfOZYLBbU3Oaj6cxRBkQxEd8FKpkD-A== Age: 1
2025-01-10 20:02:06 UTC	1791	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2025-01-10 20:02:06 UTC	7158	IN	Data Raw: 73 2d 20 27 2e 73 70 6c 69 74 28 27 20 27 29 2c 0a 20 20 20 20 2f 2a 3e 3e 70 72 65 66 69 78 65 73 2a 2f 0a 0a 20 20 20 20 2f 2a 3e 3e 64 6f 6d 70 72 65 66 69 78 65 73 2a 2f 0a 20 20 20 20 2f 2f 20 46 6f 6c 6c 6f 77 69 6e 67 20 73 70 65 63 20 69 73 20 74 6f 20 65 78 70 6f 73 65 20 76 65 6e 64 6f 72 2d 73 70 65 63 69 66 69 63 20 73 74 79 6c 65 20 70 72 6f 70 65 72 74 69 65 73 20 61 73 3a 0a 20 20 20 20 2f 2f 20 20 20 65 6c 65 6d 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 42 6f 72 64 65 72 52 61 64 69 75 73 0a 20 20 20 20 2f 2f 20 61 6e 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 77 6f 75 6c 64 20 62 65 20 69 6e 63 6f 72 72 65 63 74 3a 0a 20 20 20 20 2f 2f 20 20 20 65 6c 65 6d 2e 73 74 79 6c 65 2e 77 65 62 6b 69 74 42 6f 72 64 65 72 52 61 64 69 75 73 0a 0a Data Ascii: s- '.split(' '), />>prefixes/ />>domprefixes/ // Following spec is to expose vendor-specific style properties as: // elem.style.WebkitBorderRadius // and the following would be incorrect: // elem.style.webkitBorderRadius
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 46 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 74 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 6e 65 77 20 46 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 20 3d 20 74 61 72 67 65 74 2e 61 70 70 6c 79 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 73 2e 63 6f 6e 63 61 74 28 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 28 72 65 73 75 6c 74 29 20 3d 3d 3d 20 72 65 73 Data Ascii: F.prototype = target.prototype; var self = new F(); var result = target.apply( self, args.concat(slice.call(arguments)) ); if (Object(result) === res
2025-01-10 20:02:06 UTC	16384	IN	Data Raw: 61 63 65 28 2f 5e 6e 6f 24 2f 2c 27 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 6f 6c 2e 77 65 62 6d 20 3d 20 65 6c 65 6d 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 76 69 64 65 6f 2f 77 65 62 6d 3b 20 63 6f 64 65 63 73 3d 22 76 70 38 2c 20 76 6f 72 62 69 73 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 27 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 20 7d 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 6f 6f 6c 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 65 73 74 73 5b 27 61 75 64 69 6f 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 Data Ascii: ace(/^no$/,''); bool.webm = elem.canPlayType('video/webm; codecs="vp8, vorbis"').replace(/^no$/,''); } } catch(e) { } return bool; }; tests['audio'] = function() { var elem = document.createE
2025-01-10 20:02:06 UTC	9647	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 64 61 74 61 2e 66 72 61 67 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 73 20 3d 20 67 65 74 45 6c 65 6d 65 6e 74 73 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 20 3d 20 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 28 3b 69 3c 6c 3b 69 2b 2b 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6c 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 Data Ascii: ); var clone = data.frag.cloneNode(), i = 0, elems = getElements(), l = elems.length; for(;i<l;i++){ clone.createElement(elems[i]); } return clone; } /**

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49746	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:06 UTC	383	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:06 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Thu, 09 Jan 2025 20:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .tRiab7yzF8w_r.Ri7ZNHJv6Cogkdszz Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Fri, 10 Jan 2025 20:02:06 GMT ETag: "92c82096f24e4111ffa65b244092e44b" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e23d0cd26e88be416569e15d7299b25c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: FUsQu4UHbEsiGEaVitMT1YgOrVFDGEdG0t8CqH1WF9EOrhdlguSX_A== Age: 1
2025-01-10 20:02:06 UTC	1762	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 75 69 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2e 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="/ui/favicon.ico"/><link href="/ui/fonts/opensans.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49748	104.17.245.203	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:06 UTC	858	OUT	GET /petite-vue@0.4.1 HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:06 UTC	544	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 20:02:06 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 location: /petite-vue@0.4.1/dist/petite-vue.iife.js vary: Accept via: 1.1 fly.io fly-request-id: 01JBPBV1J08R1Z3M7YCBKXECQG-lga CF-Cache-Status: HIT Age: 5990630 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fff43494c7b4291-EWR
2025-01-10 20:02:06 UTC	69	IN	Data Raw: 33 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 2f 64 69 73 74 2f 70 65 74 69 74 65 2d 76 75 65 2e 69 69 66 65 2e 6a 73 0d 0a Data Ascii: 3fFound. Redirecting to /petite-vue@0.4.1/dist/petite-vue.iife.js
2025-01-10 20:02:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49749	104.17.245.203	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:07 UTC	882	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:07 UTC	576	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 1526442 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fff434d1b05c35d-EWR
2025-01-10 20:02:07 UTC	793	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 69 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 Data Ascii: ime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retu
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 6c 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b Data Ascii: ludes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 5a 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c Data Ascii: Z(e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 2c 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 Data Ascii: ,r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 2c 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 Data Ascii: ,n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");e
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 6b 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d Data Ascii: ke.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextm
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 65 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e Data Ascii: e.type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{con
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 28 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 Data Ascii: ([\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].t
2025-01-10 20:02:07 UTC	1369	IN	Data Raw: 5d 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 Data Ascii: ]!==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49750	104.17.245.203	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:08 UTC	373	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:08 UTC	576	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Tue, 18 Jan 2022 14:35:47 GMT etag: W/"4205-zDsr+dL8xxjIax7SrH2c1boS70M" via: 1.1 fly.io fly-request-id: 01JFVD7904HPBJG02NK5PQ7919-lga CF-Cache-Status: HIT Age: 1526443 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8fff4351bab2c327-EWR
2025-01-10 20:02:08 UTC	793	IN	Data Raw: 34 32 30 35 0d 0a 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e Data Ascii: 4205var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 69 6d 65 28 29 3b 69 66 28 6e 3d 61 28 65 29 2c 73 3d 61 28 74 29 2c 6e 7c 7c 73 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 Data Ascii: ime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)retu
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 6c 75 64 65 73 28 74 68 69 73 29 29 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 70 75 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b Data Ascii: ludes(this))try{return T.push(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 5a 28 65 2c 74 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 61 28 65 29 3f 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c Data Ascii: Z(e,t){for(const n of a(e)?e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 2c 72 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 6c 65 28 72 29 26 26 28 6f 3f 28 28 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 Data Ascii: ,r);return t===le(r)&&(o?((e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 2c 6e 28 28 28 29 3d 3e 7b 6c 65 74 20 6e 3d 74 28 29 3b 69 66 28 73 29 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 Data Ascii: ,n((()=>{let n=t();if(s)(null==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");e
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 6b 65 2e 73 6f 6d 65 28 28 6e 3d 3e 65 5b 60 24 7b 6e 7d 4b 65 79 60 5d 26 26 21 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d Data Ascii: ke.some((n=>e[`${n}Key`]&&!t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextm
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 65 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 61 6c 29 20 3d 3e 20 7b 20 24 7b 74 7d 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e Data Ascii: e.type,l=n(`(val) => { ${t} = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{con
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 28 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 Data Ascii: ([\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].t
2025-01-10 20:02:08 UTC	1369	IN	Data Raw: 5d 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 Data Ascii: ]!==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49751	18.173.205.50	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:08 UTC	430	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:08 UTC	14595	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Date: Fri, 10 Jan 2025 20:02:06 GMT Last-Modified: Thu, 23 May 2024 17:09:54 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a7cd2920ac4cbceb2a8f9a130562a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yfATr-RLArr1CX2F_OYiZmKlKE58xLrJ4dm2VbZY3XvpRF6wXUUt6Q== Age: 3
2025-01-10 20:02:08 UTC	1789	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2025-01-10 20:02:08 UTC	7160	IN	Data Raw: 20 7b 0a 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 Data Ascii: {// The jQuery object is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make s
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 6f 66 74 20 66 6f 72 67 6f 74 20 74 6f 20 68 75 6d 70 20 74 68 65 69 72 20 76 65 6e 64 6f 72 20 70 72 65 66 69 78 20 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d Data Ascii: oft forgot to hump their vendor prefix (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() =
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 6e 20 64 69 66 66 3b 0a 09 7d 0a 0a 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 62 20 66 6f 6c 6c 6f 77 73 20 61 0a 09 69 66 20 28 20 63 75 72 20 29 20 7b 0a 09 09 77 68 69 6c 65 20 28 20 28 63 75 72 20 3d 20 63 75 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 20 29 20 7b 0a 09 09 09 69 66 20 28 20 63 75 72 20 3d 3d 3d 20 62 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 2d 31 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 61 20 3f 20 31 20 3a 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 74 75 72 6e 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 75 73 65 20 69 6e 20 70 73 65 75 64 6f 73 20 66 6f 72 20 69 6e 70 75 74 20 74 79 70 65 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 74 79 70 65 0a 20 2a 2f 0a 66 75 6e 63 74 Data Ascii: n diff;}// Check if b follows aif ( cur ) {while ( (cur = cur.nextSibling) ) {if ( cur === b ) {return -1;}}}return a ? 1 : -1;}/** * Returns a function to use in pseudos for input types * @param {String} type */funct
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 73 20 28 6a 51 75 65 72 79 20 23 31 31 31 35 33 29 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 2f 2f 20 54 72 61 76 65 72 73 65 20 69 74 73 20 63 68 69 6c 64 72 65 6e 0a 09 09 09 66 6f 72 20 28 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 66 69 72 73 74 43 68 69 6c 64 3b 20 65 6c 65 6d 3b 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 6e 65 78 74 53 69 62 6c 69 6e 67 20 29 20 7b 0a 09 09 09 09 72 65 74 20 2b 3d 20 67 65 74 54 65 78 74 28 20 65 6c 65 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6e 6f 64 65 54 Data Ascii: s (jQuery #11153)if ( typeof elem.textContent === "string" ) {return elem.textContent;} else {// Traverse its childrenfor ( elem = elem.firstChild; elem; elem = elem.nextSibling ) {ret += getText( elem );}}} else if ( nodeT
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 29 3b 0a 09 09 09 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 0a 09 09 09 09 76 61 6c 75 65 3a 20 6d 61 74 63 68 65 64 2c 0a 09 09 09 09 2f 2f 20 43 61 73 74 20 64 65 73 63 65 6e 64 61 6e 74 20 63 6f 6d 62 69 6e 61 74 6f 72 73 20 74 6f 20 73 70 61 63 65 0a 09 09 09 09 74 79 70 65 3a 20 6d 61 74 63 68 5b 30 5d 2e 72 65 70 6c 61 63 65 28 20 72 74 72 69 6d 2c 20 22 20 22 20 29 0a 09 09 09 7d 29 3b 0a 09 09 09 73 6f 46 61 72 20 3d 20 73 6f 46 61 72 2e 73 6c 69 63 65 28 20 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 46 69 6c 74 65 72 73 0a 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 45 78 70 72 2e 66 69 6c 74 65 72 20 29 20 7b 0a 09 09 09 69 66 20 28 20 28 6d 61 74 63 68 20 3d 20 6d 61 74 63 68 45 78 70 72 5b 20 74 79 70 Data Ascii: );tokens.push({value: matched,// Cast descendant combinators to spacetype: match[0].replace( rtrim, " " )});soFar = soFar.slice( matched.length );}// Filtersfor ( type in Expr.filter ) {if ( (match = matchExpr[ typ
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 69 73 58 4d 4c 20 29 20 7b 0a 09 09 69 66 20 28 20 21 69 73 58 4d 4c 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 22 69 6e 70 75 74 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 7d 0a 0a 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 0a 2f 2f 20 55 73 65 20 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 20 74 6f 20 66 65 74 63 68 20 62 6f 6f 6c 65 61 6e 73 20 77 68 65 6e 20 67 65 74 41 74 74 72 69 62 75 74 65 20 6c 69 65 73 0a 69 66 20 28 20 21 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 64 69 76 20 29 20 7b 0a 09 72 65 74 75 72 6e 20 64 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 Data Ascii: isXML ) {if ( !isXML && elem.nodeName.toLowerCase() === "input" ) {return elem.defaultValue;}});}// Support: IE<9// Use getAttributeNode to fetch booleans when getAttribute liesif ( !assert(function( div ) {return div.getAttribute("disa
2025-01-10 20:02:08 UTC	16384	IN	Data Raw: 0a 09 09 09 2f 2f 20 43 61 6c 6c 20 61 6c 6c 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 73 20 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 61 72 67 75 6d 65 6e 74 73 0a 09 09 09 66 69 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 73 65 6c 66 2e 66 69 72 65 57 69 74 68 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 2f 2f 20 54 6f 20 6b 6e 6f 77 20 69 66 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 73 20 68 61 76 65 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 63 61 6c 6c 65 64 20 61 74 20 6c 65 61 73 74 20 6f 6e 63 65 0a 09 09 09 66 69 72 65 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 21 21 66 69 72 65 64 3b 0a 09 09 09 Data Ascii: // Call all the callbacks with the given argumentsfire: function() {self.fireWith( this, arguments );return this;},// To know if the callbacks have already been called at least oncefired: function() {return !!fired;
2025-01-10 20:02:09 UTC	16384	IN	Data Raw: 20 61 20 77 69 6e 64 6f 77 20 70 65 72 20 69 73 57 69 6e 64 6f 77 20 28 23 31 30 30 38 30 29 0a 09 2f 2a 20 6a 73 68 69 6e 74 20 65 71 65 71 65 71 3a 20 66 61 6c 73 65 20 2a 2f 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 73 75 70 70 6f 72 74 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 20 7c 7c 20 63 61 63 68 65 20 21 3d 20 63 61 63 68 65 2e 77 69 6e 64 6f 77 20 29 20 7b 0a 09 09 2f 2a 20 6a 73 68 69 6e 74 20 65 71 65 71 65 71 3a 20 74 72 75 65 20 2a 2f 0a 09 09 64 65 6c 65 74 65 20 63 61 63 68 65 5b 20 69 64 20 5d 3b 0a 0a 09 2f 2f 20 57 68 65 6e 20 61 6c 6c 20 65 6c 73 65 20 66 61 69 6c 73 2c 20 75 6e 64 65 66 69 6e 65 64 0a 09 7d 20 65 6c 73 65 20 7b 0a 09 09 63 61 63 68 65 5b 20 69 64 20 5d 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 09 7d 0a 7d 0a 0a 6a 51 Data Ascii: a window per isWindow (#10080)/* jshint eqeqeq: false /} else if ( support.deleteExpando \|\| cache != cache.window ) {/ jshint eqeqeq: true */delete cache[ id ];// When all else fails, undefined} else {cache[ id ] = undefined;}}jQ
2025-01-10 20:02:09 UTC	16384	IN	Data Raw: 70 5b 20 30 20 5d 3b 0a 09 09 09 09 77 68 69 6c 65 20 28 20 6a 2d 2d 20 29 20 7b 0a 09 09 09 09 09 74 6d 70 20 3d 20 74 6d 70 2e 6c 61 73 74 43 68 69 6c 64 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2f 20 4d 61 6e 75 61 6c 6c 79 20 61 64 64 20 6c 65 61 64 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 20 72 65 6d 6f 76 65 64 20 62 79 20 49 45 0a 09 09 09 09 69 66 20 28 20 21 73 75 70 70 6f 72 74 2e 6c 65 61 64 69 6e 67 57 68 69 74 65 73 70 61 63 65 20 26 26 20 72 6c 65 61 64 69 6e 67 57 68 69 74 65 73 70 61 63 65 2e 74 65 73 74 28 20 65 6c 65 6d 20 29 20 29 20 7b 0a 09 09 09 09 09 6e 6f 64 65 73 2e 70 75 73 68 28 20 63 6f 6e 74 65 78 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 20 72 6c 65 61 64 69 6e 67 57 68 69 74 65 73 70 61 63 65 2e 65 78 65 63 28 20 Data Ascii: p[ 0 ];while ( j-- ) {tmp = tmp.lastChild;}// Manually add leading whitespace removed by IEif ( !support.leadingWhitespace && rleadingWhitespace.test( elem ) ) {nodes.push( context.createTextNode( rleadingWhitespace.exec(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49753	34.193.6.123	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:08 UTC	922	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/5800d6a290ca/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:09 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:08 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Fri, 10 Jan 2025 15:35:38 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49754	3.231.74.234	443	4004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:09 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 20:02:09 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:09 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Fri, 10 Jan 2025 15:35:38 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49756	3.231.74.234	443	8096	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Timestamp	Bytes transferred	Direction	Data
2025-01-10 20:02:12 UTC	431	OUT	GET /XU1JaaXVOa0xXUnNCTDRhTTBhN2NSNzJpb3dKblhLV0NrMnVROUt0RGJSb3NadjJ6eEJSaGQvclFmaW9DRm1XSS9wd0JIQndIKzhxQ05UQzFId2RwVE9LS0NNL3IyZUNaUGtkekR0RkpuTTJsQ0Z4VmpkM0Ztd2Z4c21UNm13PT0tLVB1bFBtLzNuUkdaTE8yYk4tLTdMbllBc2lFeU1zeVlkY243REVyWnc9PQ==?cid=2046788267 HTTP/1.1 Accept: / User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16) Accept-Encoding: gzip, deflate Host: bofa.com-onlinebanking.com Connection: Keep-Alive
2025-01-10 20:02:12 UTC	486	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 20:02:12 GMT Content-Type: text/html Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 88cf8a0d-99b6-4891-a4ff-560fae6c2e9a X-Runtime: 0.049455 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Target ID:	0
Start time:	15:01:15
Start date:	10/01/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
Imagebase:	0x810000
File size:	1'620'872 bytes
MD5 hash:	1A0C2C2E7D9C4BC18E91604E9B0C7678
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	15:01:50
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	15:01:51
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1904,i,3743487018534020436,5630685548294061716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	15:01:57
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bofa.com-onlinebanking.com/XMDJscG4zY01ySXVpNXFwTXVjdzJwOFlTbm5JMVlxamYrYTdhVGZ4cFlpMGNPU0t5dU1aSkFhZ3pvVFY0ajFNdEVhS0dvbDZmV05YdVdZUEtEZ2FEekRoVFdOckI2SFlCa3Z1U0FLaFQ0eFhRQ3ZFZ2RKVy96RzNGRmthd2hLUWVNSHB5VXRZNkhyKzBITnl0UTFiVjBhUjhTamZ5VTB3SDJXMTdCdGphdXROeEk4SXo1T1pwN3VQSEl3PT0tLUQ1dk5Mb0dIRGlmUUU0c0ctLXdHK1NLTDUxRGRnYjVGa0I3LyswV3c9PQ==?cid=2046788267"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report statement.doc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\mso366C.tmp

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\statement.doc (copy)

C:\Users\user\Desktop\~$atement.doc

C:\Users\user\Desktop\~WRD0000.tmp

C:\Users\user\Desktop\~WRD0000.tmp:Zone.Identifier

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Windows Analysis Report
statement.doc