Edit tour

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/

Overview

General Information

Sample URL:	https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/
Analysis ID:	1522479
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,17619125482257120158,7670211923122109498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Source: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa

LLM: Score: 7 Reasons: The URL 'security-uk.m.mimecastprotect.com' does not match the legitimate domain 'intersnackgroup.com'., The domain 'mimecastprotect.com' is associated with Mimecast, a known email security service provider, which could be legitimate if used for security purposes., The subdomain 'security-uk.m' and the presence of 'mimecastprotect' suggest it could be a security-related service, but it is not directly associated with Intersnack's primary domain., The use of a third-party domain for email input fields is suspicious unless verified as a legitimate security service. DOM: 2.0.pages.csv

HTTP Parser: Number of links: 0

HTTP Parser: Title: Intersnack TTP Web Portal does not match URL

Source: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa	HTTP Parser: No <meta name="author".. found
Source: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa	HTTP Parser: No <meta name="author".. found

Source: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa	HTTP Parser: No <meta name="copyright".. found
Source: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/ HTTP/1.1Host: url.uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/ofkwqtl0sc-hJgXIcV3JNqlFzxd9F3tXQzsjUBaaGuuR0DiczYofULGqG_gyAP_qo3_YPVWx9TwzyDY2bLK3Rr14XvqFyFnk8OxOctpabXzFkOQMKkwXBEUj1yNCQhTn--0GQyx3oCCaFzXQ-yoIWKLbfCvVKDElG1TUTb7iVEx7tYpLVjrE1pWQfCWzGRBPGQUkgeNAwKL3yUD2Pa4L_PQ5C0572KYALUqNeoZ_pcB1Nb7TR_cwdhhko7G0SC9Z-keyLK_2N8xAmu42Uc1NO3U0qsydNESHIxdNU6y95aRXTOJbfKgVb0pyTY97kwDcXtK9ji5WVLlNMGLBuFJZXN8n7ZOaVya3Oek_cHBv3Klh8xShNmrCZU_6JU9zxkGPh52qZkP5KQeGTqgzdF7zAW542x2uAGfDc05CYS9ktQ28aswxqDLD_NOyO6fNH6WXwoXC5X-dQfVIZXRGUWAZlreueH9MmWNFxhMOW9ZTO71qU-yZXxUfkYnugmp1hHLdGU96pqwhux52mHTzCewvTo0-q6Kvm4Q2iBfNLzuNbAER2d0nX5Bm_4zWOFBTej3Vgi5w8f3fRpW9g7T-A-gLHPtgcI8M9LV9hmTqrBNcJYXPOQsN3_7yOwG4H6SVB49ByXJ5OqNxWPl3YCJl08jxvjmg4KjA-elCmMMoY-4syM8hJmU9r2He1TELqCL3M9yTmRrV7CY9ycaZNsqfhNzqyjg-kNNNgt1NAktUbsWE6Hy-5DCiJOl-l5czU-JEwpa8l6PPx-WtAsr-jvtQkVvc0sEYYm_Nu9i7dAQ3q60dtyhPw9AczbFsS8jB4UYomhutaorYznO852TZv3dPoC541Q9NAGJ2yYgw6TFx3gBralwJYd4LLecpoT9NH65HMy668T4XgYBM8Gdq0MZNF_6-K4Oxa8_indipsNjvDC0DTO98oz2ItMTUijeIEeuBm51xbpqgz0dygnnvgzGEh5317QYC3FbTrZCIU7fKwUg0k5gXYXLqN45U3Xn5bnvqjf15i40969SeDhsVE3dUNcHEEkz5IxLJGEpq3K2SQWjwVYvowainhXkJatuFzTcumjVOhmgHaOFQ0Zifi_woCiNyORXpPndXjOWY3POZkeLEVfp7ZCfh_3Dy-AnnI4_X6n3oHJT92FcpancLK5Uo_bU6hj_FwrSwidj65FyITAJ7in0hQi77mR96gKrdwPRUuWfUAY28Zi4OkRxFfbzrpXWDPqo7CzYwr4_nOKr6-a34N51r6GDvRZnVmNA_0KTs9vC_R6BWG9n8A8mlvWck3OZjSbfJEBYlEMY-shvBPc_thvAH457PA6rGdZD_MoFDtdnA0tjV6MCekPsaMfR20Yb1Kb2rRzD-TU1UO1mY0eubHxZatwviJPO0LZFRYk2o36gK1b64IdASxYjJ4CRVm-4-xb7yO_s2_tSO5iAelgNr9N7k_hEOaVHF4pvuU_sHvrYTDawm16BPulHPNim1BErsL3f5SD43A90U9Kx2yYvdE8Bpz-5FSO40XYrFAvFhc9olT7PHwvO6bArftUfz7Zdti603Lulr3Okg7Qcee7kWq_bBPQJpuQyZPZcCOf9P7My-3Ec4ZKMepw-kadvVa7Zjn0IkOgDq8UKA3o8aSwgjdH9lW0v8yBGJ7dXWGDgO0K0mrrXBYdqtDXnmHSSLlYsmbd80-JfzEsPHq9-xwr28iSygyeTsnHUGYfTKoRoD5_Q1SO84GHTC8eHmD6WDmhAlOTYwYpmwIB8eIDBYGm_XGCK3Fe6ji7BwT-sl1QMyqKQ27PGkkjoFcRqFSbFzEkXgeqa2_VSEAUNXHSTIsGWQMXsigmo4d92XsUf6aTx10DVLvl3zo9IDSdZxeIC42XEvdud6CA5V_Gl_Mv1gVzek6Ca0Ga6PE9NcEC6RGszAiJVlDPR_-9OWSADkE816N0QE5nQELw38bKxiCw_QinEo4hBEQasID31zhpLmkHBoYoMSHLRF_hkRFXbFnXjzVkAnEz7d1GTQMjzdxPXHVZQ2UzYUBzsvG5VhFinKsAg6zTar8JOxtPebQYZ264JldYIc7wcMPcsON3MusnrhCWYEt1MPqzyuavoH-yp0z6_1s7xS-ts_DVOMelpllr6SKyIQSWC2tXbny8nFVobd9Tmep37xvWVut6V59LZVuTGLojX9BDU_d1FLvBnMyAC8pHMY-4o4u883hhUWTx1mQMLEV_d3CdH6ZMRQ34ME-dv9lliV2qv48mtjHbwY1wNJyKIttTn9tyDP4c_laBwc3swzJq72d2qRDIoDIyKvpBpJTNtEJ1JooPPHUVlI5HzP2KYyCFZzYOqiuWU6PRJWC5BsF6lqAs1ZurPBRlQUQ58WzNvChE26zGyzw6wHlqmxNvWFyBAryRQ1KMgBRyWe337SJMuJNypjs-Uzcdg9SIgedifzf9c7a4236S9RjTry96Y_P9pxSA7NsLcmJSBgTc9qtla3YUtBDQfGPggYMfncAC2fTDecWZFFkLdkkV7q7flFsS9E4SXvIKu3FB1x7e7Ch7q7t-L_NOFtLYi7AGzUc8jwNuYrdUCxTQDe-eii3PGWvw HTTP/1.1Host: url.uk.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: na
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/style.css?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-uk.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-uk.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: url.uk.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: security-uk.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 06:48:54 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Sep 2024 06:48:54 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"Vary: Accept-Encoding

Source: chromecache_71.2.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_71.2.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@16/34@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,17619125482257120158,7670211923122109498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,17619125482257120158,7670211923122109498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.mimecast.com/	0%	Virustotal		Browse
https://community.mimecast.com/docs/DOC-241	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
url.uk.m.mimecastprotect.com	195.130.217.187	true	false	unknown
security-uk.m.mimecastprotect.com	91.220.42.88	true	true	unknown
www.google.com	142.250.184.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js	false	unknown
https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/	false	unknown
https://security-uk.m.mimecastprotect.com/branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/style.css?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa	true	unknown
https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecastlogo@2x.png	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_71.2.dr	false	0%, Virustotal, Browse	unknown
https://community.mimecast.com/docs/DOC-241	chromecache_71.2.dr	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.220.42.89	unknown	United Kingdom	42427	MIMECAST-UKGB	false
91.220.42.88	security-uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	true
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
195.130.217.187	url.uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522479
Start date and time:	2024-09-30 08:47:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/34@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 216.58.206.46, 66.102.1.84, 34.104.35.123, 142.250.186.74, 142.250.185.234, 142.250.74.202, 142.250.185.106, 142.250.186.42, 142.250.185.74, 172.217.16.138, 142.250.185.170, 142.250.185.202, 172.217.18.10, 142.250.184.234, 142.250.185.138, 172.217.16.202, 142.250.186.106, 216.58.206.74, 142.250.186.138, 20.114.59.183, 199.232.214.172, 192.229.221.95, 40.69.42.241, 20.3.187.198, 142.250.186.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSO Model: jbxai	{ "brand":["Intersnack"], "contains_trigger_text":true, "trigger_text":"Get Authentication Code", "prominent_button_name":"Get Authentication Code", "text_input_field_labels":["Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://security-uk.m.mimecastprotect.com/ttpwp/?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSO Model: jbxai	{ "phishing_score":7, "brands":"Intersnack", "legit_domain":"intersnackgroup.com", "classification":"known", "reasons":["The URL 'security-uk.m.mimecastprotect.com' does not match the legitimate domain 'intersnackgroup.com'.", "The domain 'mimecastprotect.com' is associated with Mimecast, a known email security service provider, which could be legitimate if used for security purposes.", "The subdomain 'security-uk.m' and the presence of 'mimecastprotect' suggest it could be a security-related service, but it is not directly associated with Intersnack's primary domain.", "The use of a third-party domain for email input fields is suspicious unless verified as a legitimate security service."], "brand_matches":[false], "url_match":false, "brand_input":"Intersnack", "input_fields":"Email"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:	3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	7.9930739048349935
Encrypted:	true
SSDEEP:	768:NzA1kfxARdebgMmiX+c2BERO9/ufrv7KkffWz6tw2O7i:NzA1k5aebgMmYWH9mfpfSmPOe
MD5:	E5231978386520AFD0019A8F5D007882
SHA1:	5E06725A18323ED9372E3E488D4F6DF1A56B3091
SHA-256:	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
SHA-512:	D5EEE91E55BFE7FB220705545D6E767C1A969F4E313F1991C220F4EAA05A7ABC83EE9E6B804D1DF90C1779591F587E1FD58230E120CDA529F8C98BC337E4D3D3
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
Preview:	wOF2............../..............................T.V..N...x..S..~..6.$..x. ..2..U.C..T'.a..!...{.1...l.$......\|...(.U...=A.1...PkY..N....t.+P`..Kp.:n......p......~.......-....`;D.vu.p.N.t......]u....m....Hln..a.x..N.gl...'[`..V..L{.....f.9.l..sw7....M.....B..n.M.6.....z..(...)..}>...... .A.KG}.Q...Z.....G.w\K........a..,.F...3....Z.i)-..<l.eEu.eY.e6..66].VY.5.n.....\_..W....J.ARC.{....u...r.H-...x.A-j.z........?...0..K..EU...v...YC..y.?J.{.._..L60.R..%...X...j..B]E..U.w.?.....J....dD..9.'.r....o.....X.l.^@>...wj?w.7S<G3ch..%..2Hr....&.....K..Q..l;.......f..O2$..}H K......s...~.m..t\|..+.........'..,S...H{@.X.S.E....p.g..\|.{E....Vi7...u.:K...r.3s~.....d..........(tC.......D....f....higI..9.q...Y.....J.F.....X...2c./......dM.K........1....&.. L.A,I....gL....2.i.Rd.8.h.0w....=.@.b.Q..@AP.}K?.$.....k..."...D..5....#...3r.eY@(p.........&....\...@..q..1......F k<....=....9G.f*..........y..N..[..._5.....U.@..\|}..u.k2..7...).#y.................d..B

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
Preview:	Not Found

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	5895
Entropy (8bit):	5.843030408505498
Encrypted:	false
SSDEEP:	96:jgoLat+nvllYCK3t+nvllYCKCCsgzIhcmktTCtUlQ:jglEoxEocCsgzHmktTCt4Q
MD5:	97D5326A53600EC3ABD66D54F66D65E9
SHA1:	52A8A5E57AEDB9BC85F0C374C8D5ECE9E90309CB
SHA-256:	BD78F75BBDB56CF7B37CD4F12756C334EA72F51E50DDAF32737A6B26295E7C75
SHA-512:	E0BD9E59B9E6DA7016418D63BCF42765BA1D1B07274801658D4C4BA816071182F003491B34519033F22F4663418D51517051F40C68D3C5F4FD7AEB901E3BD1AB
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <link rel="stylesheet" href="/branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/style.css?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQ

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.5086949695628418
Encrypted:	false
SSDEEP:	3:8/9VhV/Cm:8/9/Vam
MD5:	4ED71EED77D1C12FE35CBE4D591F22F5
SHA1:	60AC07F101FC34AEB416E9C89BA1D5C9F42ED33B
SHA-256:	6CB2B24E7310C9007261AC7DE5BB5BCE1DC1AFD914250345DF157CDC064DFE38
SHA-512:	26F465D41262932F8B0A8B3F73E00F01D8B398A10679C651486635BE941E0FFCB263CD75ED7FC5386DBB6B75D826E647A14E60B18D17FA3A91BFD723781ED756
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmrGuhKdMwsAhIFDVn5lfQ=?alt=proto
Preview:	Cg0KCw1Z+ZX0GgQIZBgC

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11793
Entropy (8bit):	7.963816342738001
Encrypted:	false
SSDEEP:	192:zy50dlx1kHHxgdFRWXxejeh2jW9w8WEMGwZ+ciKtxLuHUcX902KIbCAsA9uHh4lf:zyMknxyFYeah2CG8Wr+ciqol023bCAsm
MD5:	B175C3E9446F8A4CCCA4670C5D09E03E
SHA1:	3B73FA0F0FE88BFF6C03E4E0F41A0ADA69899B46
SHA-256:	AD97CDF184121B39E2B0E690A9955B668FDA68D3FF6004E220EDB374FDA7EF44
SHA-512:	DC6C5E4E35AD092C5EAF228B2C985D51BEFAC199DF4924BEE808D3A2F14A799191034B793900AE6B7BB94D6BB7809C6E29418956341F8E43740A598BF0F44973
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...x.....H.. ....gAMA.......... cHRM..................R....]..6....B.oJ... iCCPPhotoshop ICC profile..H...P......}.........H@d...E.}S..H"D..!$X.."...@... ..(.R\|.....g.....U.U...bi(.}o.t.;..{.{.9..{....a_..3...`.t....?........$A.......hQ...C...t..M..s....(.#.....@&Wh.....E......g..2...Y.Lyl4.....vO.8.O,.\|\SO.b\|...]..%n[d.({1..Ke;..T.j.C.y<74y..J.r4F.R......O"A...2.hQ.H.....P.@..)B."E.X....2.d..U..!D...h.B!..rU..H v..S...2.E.aGY.bC.j..HK.....]!....1......@...w..o........%.\|...,`.....! .l..@.r.>....4.......I........!...r...Ph-...AJ(..*.Z..j..C.. 4.=.f..0...F.5...@8.N.E......j..>..._.}.0<.......B......A..!"G>AJ..H#.\G. ..k...c.0<./&...#..a.c.s.+..1S..X......`#..l...{.{....}...i.,q.0\.N.+.....p.qsx.....o......W....d.....KH'..j.......GD...8..XH<A.&....$.).$&..H].q./d}..9.. .$..o._Rh..%."..R.)..Y-...Z.Z.Z...i=..T+j.UB-..QG..hf. Z.MM.j.....J....3t...]H/.....x..#...q.qW....I...3.$2]..f...s..f....:......[...R.L/Zo.^....>{.;......_

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11793
Entropy (8bit):	7.963816342738001
Encrypted:	false
SSDEEP:	192:zy50dlx1kHHxgdFRWXxejeh2jW9w8WEMGwZ+ciKtxLuHUcX902KIbCAsA9uHh4lf:zyMknxyFYeah2CG8Wr+ciqol023bCAsm
MD5:	B175C3E9446F8A4CCCA4670C5D09E03E
SHA1:	3B73FA0F0FE88BFF6C03E4E0F41A0ADA69899B46
SHA-256:	AD97CDF184121B39E2B0E690A9955B668FDA68D3FF6004E220EDB374FDA7EF44
SHA-512:	DC6C5E4E35AD092C5EAF228B2C985D51BEFAC199DF4924BEE808D3A2F14A799191034B793900AE6B7BB94D6BB7809C6E29418956341F8E43740A598BF0F44973
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp
Preview:	.PNG........IHDR...,...x.....H.. ....gAMA.......... cHRM..................R....]..6....B.oJ... iCCPPhotoshop ICC profile..H...P......}.........H@d...E.}S..H"D..!$X.."...@... ..(.R\|.....g.....U.U...bi(.}o.t.;..{.{.9..{....a_..3...`.t....?........$A.......hQ...C...t..M..s....(.#.....@&Wh.....E......g..2...Y.Lyl4.....vO.8.O,.\|\SO.b\|...]..%n[d.({1..Ke;..T.j.C.y<74y..J.r4F.R......O"A...2.hQ.H.....P.@..)B."E.X....2.d..U..!D...h.B!..rU..H v..S...2.E.aGY.bC.j..HK.....]!....1......@...w..o........%.\|...,`.....! .l..@.r.>....4.......I........!...r...Ph-...AJ(..*.Z..j..C.. 4.=.f..0...F.5...@8.N.E......j..>..._.}.0<.......B......A..!"G>AJ..H#.\G. ..k...c.0<./&...#..a.c.s.+..1S..X......`#..l...{.{....}...i.,q.0\.N.+.....p.qsx.....o......W....d.....KH'..j.......GD...8..XH<A.&....$.).$&..H].q./d}..9.. .$..o._Rh..%."..R.)..Y-...Z.Z.Z...i=..T+j.UB-..QG..hf. Z.MM.j.....J....3t...]H/.....x..#...q.qW....I...3.$2]..f...s..f....:......[...R.L/Zo.^....>{.;......_

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4401)
Category:	downloaded
Size (bytes):	4402
Entropy (8bit):	4.76381238856682
Encrypted:	false
SSDEEP:	48:rjexuVkgjLI+8zely17oNFThPH6ZeFThlL1YscM1H+7yFWTFTPUOqFdGfz1:bvI+TNrzL1YjMd+7f5P/7
MD5:	2EABC791596E21EA39C4B702898FB50A
SHA1:	2D02BA0852B7153C6F5FB7CB6F5F773B900564F5
SHA-256:	6F62AF42034A066CAE2FC7D8A084163CC2F658A2C54D873ACF227A4E71DCA735
SHA-512:	61103C1DFFFB4B8454B2797073DCDF6E250FFACA13A8B90333E4475271D13602037374DEFA63734C31D230C68909C38CFA7E14870681251F0370295D77C7555B
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/style.css?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp
Preview:	.btn-primary{background-color:#da291c;border-color:#da291c}.btn-primary:focus,.btn-primary.focus{background-color:#ad2116;border-color:#69140d}.btn-primary:hover{background-color:#ad2116;border-color:#a41f15}.btn-primary:active,.btn-primary.active,.open>.btn-primary.dropdown-toggle{background-color:#ad2116;border-color:#a41f15}.btn-primary:active:hover,.btn-primary:active:focus,.btn-primary:active.focus,.btn-primary.active:hover,.btn-primary.active:focus,.btn-primary.active.focus,.open>.btn-primary.dropdown-toggle:hover,.open>.btn-primary.dropdown-toggle:focus,.open>.btn-primary.dropdown-toggle.focus{background-color:#8d1b12;border-color:#69140d}.btn-primary.disabled:hover,.btn-primary.disabled:focus,.btn-primary.disabled.focus,.btn-primary[disabled]:hover,.btn-primary[disabled]:focus,.btn-primary[disabled].focus,fieldset[disabled] .btn-primary:hover,fieldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary.focus{background-color:#da291c;border-color:#da291c}.btn-primary .b

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
Preview:	Not Found

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecastlogo@2x.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 08:48:36.646900892 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 30, 2024 08:48:46.256266117 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 30, 2024 08:48:48.230421066 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.230505943 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.230590105 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.230938911 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.230983019 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.231048107 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.231318951 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.231352091 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.231626034 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.231645107 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.933026075 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.933325052 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.933350086 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.935007095 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.935101032 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.936392069 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.936436892 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.936482906 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.936712027 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.936758995 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.936820030 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.936829090 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.937755108 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.937835932 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.938756943 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.938832998 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:48.993992090 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:48.994020939 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.039402962 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.039441109 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.284481049 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.284672976 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.284682035 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.284732103 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.286897898 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.286916971 CEST	443	49736	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.286926985 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.286973953 CEST	49736	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.288233042 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.288289070 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.486031055 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.486102104 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.486274958 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.488204956 CEST	49735	443	192.168.2.4	195.130.217.187
Sep 30, 2024 08:48:49.488257885 CEST	443	49735	195.130.217.187	192.168.2.4
Sep 30, 2024 08:48:49.522352934 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:49.522413969 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:49.522484064 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:49.522732973 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:49.522751093 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.373050928 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.423629999 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.590403080 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.590435982 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.591538906 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.591599941 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.598201990 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.598278999 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.598925114 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.598932981 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.646943092 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.820943117 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.820971966 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.820980072 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.821027040 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.821046114 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.821058035 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.821105003 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.944251060 CEST	49739	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.944279909 CEST	443	49739	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.947788954 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.947845936 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.947912931 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.948999882 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.949014902 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.950527906 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.950556993 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:50.950762033 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.951229095 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:50.951240063 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.049978018 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.050000906 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.050065041 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.050503016 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.050517082 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.455765009 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:51.455790997 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:51.455884933 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:51.457742929 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:51.457752943 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:51.681946039 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.682754993 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.682787895 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.683639050 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.683722973 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.687522888 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.687582970 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.732429981 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.732440948 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:48:51.775898933 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:48:51.801907063 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.802665949 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.802676916 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.803037882 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.803881884 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.803944111 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.806776047 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.827193975 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.828208923 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.828218937 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.829368114 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.837512016 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.837711096 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.837795973 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:51.851403952 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.879436970 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:51.884222984 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.008311987 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.008362055 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.008420944 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.008430958 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.008498907 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.008558035 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.026774883 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.026797056 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.026848078 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.026861906 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.026910067 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.057514906 CEST	49741	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.057531118 CEST	443	49741	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.087095976 CEST	49740	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.087125063 CEST	443	49740	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.097353935 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.097454071 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.107724905 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.107769966 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.107988119 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.121481895 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.121520042 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.135092020 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.135114908 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.135190010 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.152410984 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.152436018 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.164181948 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.164196014 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.165117979 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.202716112 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.202815056 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.202892065 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.208427906 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.244013071 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.244069099 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.329399109 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.375390053 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.380381107 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:52.380435944 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:52.380501986 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:52.382715940 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:52.382733107 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:52.513633013 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.513813019 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.513902903 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.514122963 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.514122963 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:52.514136076 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.514143944 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:52.963871002 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.995899916 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:52.995925903 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:52.996328115 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.007030010 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.007102966 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.007364988 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.013645887 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.013679028 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.013803005 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.014417887 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.014432907 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.017149925 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.018910885 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.018945932 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.020207882 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.020787954 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.020971060 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.020972013 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.047427893 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.063436031 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.091597080 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.091840982 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.091882944 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.092797995 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.092861891 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.093178988 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.093244076 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.093502998 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.093519926 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.113668919 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.113734961 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.144865036 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.240739107 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.240962029 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.240974903 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.244569063 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.244632006 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.244889021 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.244913101 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.244920969 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.244939089 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.244975090 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.244975090 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.245008945 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.245027065 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.245074987 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.245106936 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.245106936 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.245122910 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.245222092 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.245280981 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.260106087 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260159969 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260181904 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260226965 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260251045 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.260251045 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.260253906 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260274887 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260284901 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.260304928 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.260310888 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.260324001 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.260354996 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.261564016 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.261571884 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.261624098 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.261626959 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.261656046 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.261681080 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.261703014 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.261749983 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.277971983 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.278019905 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.278033018 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.278053045 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.278083086 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.278120041 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.331984043 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332003117 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332072020 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332099915 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332148075 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332170963 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332218885 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332238913 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332257032 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332281113 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332314014 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332314014 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332315922 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332336903 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332375050 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332377911 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.332400084 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.332431078 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348149061 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348179102 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348191977 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348196983 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348232031 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348248959 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348280907 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348294973 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348328114 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348329067 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348356009 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348834038 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348886967 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348921061 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348942041 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.348970890 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.348990917 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.350408077 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.350424051 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.350480080 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.350495100 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.350553989 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.351582050 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.351618052 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.351650000 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.351655960 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.351680994 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.352588892 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.352588892 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.364778996 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.364820004 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.364855051 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.364870071 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.364896059 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.365061998 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.366463900 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.366506100 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.366544962 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.366556883 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.366585016 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.366601944 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.368366957 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.368407011 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.368441105 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.368453026 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.368483067 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.368500948 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.378777027 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.378798008 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.414712906 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.414783955 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.414794922 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.414854050 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.414928913 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.415333033 CEST	49748	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.415345907 CEST	443	49748	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.417808056 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.417880058 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.417889118 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.417916059 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.417943001 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.417962074 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.434617996 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.434678078 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.434691906 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.434711933 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.434736967 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.434758902 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.435467005 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.435513973 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.435539961 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.435555935 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.435580969 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.435597897 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.436064959 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.436108112 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.436139107 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.436168909 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.436203003 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.436218977 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.438615084 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.438661098 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.438692093 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.438704014 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.438728094 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.438745975 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.452496052 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.452538967 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.452573061 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.452589035 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.452620983 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.452636003 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.453509092 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.453547955 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.453577995 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.453588963 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.453615904 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.453634024 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.454509974 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.454566002 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.454596996 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.454607010 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.454631090 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.454653978 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.455583096 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.455625057 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.455655098 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.455665112 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.455698967 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.455698967 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.456552982 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.456597090 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.456634998 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.456650019 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.456680059 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.456701040 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.504704952 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.504725933 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.504769087 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.504787922 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.504837990 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.504837990 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.505965948 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.506031036 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.506037951 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.506057024 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.506087065 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.506100893 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.520663023 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.520709991 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.520746946 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.520761013 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.520788908 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.520806074 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.522010088 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.522053957 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.522085905 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.522099018 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.522125006 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.522145033 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.522878885 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.522923946 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.522958994 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.522978067 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523010015 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523029089 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523159981 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523201942 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523232937 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523245096 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523271084 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523288012 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523544073 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523586988 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523626089 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523638010 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.523668051 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.523753881 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.524055004 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.524096966 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.524132013 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.524143934 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.524169922 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.524210930 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.525060892 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.525103092 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.525151968 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.525165081 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.525194883 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.525216103 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.540333033 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.540376902 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.540438890 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.540452003 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.540482044 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.540496111 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.540923119 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.540966988 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.541002035 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.541012049 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.541038990 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.541054010 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.541389942 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.541430950 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.541461945 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.541472912 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.541497946 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.541517019 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542098999 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542155027 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542180061 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542196035 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542249918 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542251110 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542854071 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542897940 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542937994 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542948961 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.542975903 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.542999983 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.577028036 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.577069998 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.577105999 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.577120066 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.577151060 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.577183962 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591191053 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591208935 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591274023 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591290951 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591322899 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591350079 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591546059 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591795921 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591815948 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591851950 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591864109 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.591896057 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.591943979 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.593624115 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.607378006 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.607417107 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.607454062 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.607470036 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.607497931 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.607512951 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.607928991 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.607949972 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.607992887 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.608005047 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.608028889 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.608047009 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.608627081 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.608685017 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.608719110 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.608731031 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.608761072 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.608795881 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.609338045 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.609396935 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.609411001 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.609431028 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.609458923 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.609473944 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610107899 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610147953 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610181093 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610193014 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610222101 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610239983 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610460997 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610505104 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610539913 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610553026 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610596895 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610614061 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610810995 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610856056 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610888958 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610903025 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.610927105 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.610956907 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.627506971 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.627549887 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.627598047 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.627609968 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.627643108 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.627661943 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.627943039 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.627990961 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628024101 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628035069 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628062010 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628076077 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628336906 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.628361940 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628401995 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628432035 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.628437042 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628447056 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628469944 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628506899 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.628540993 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.628551006 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628591061 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.628684998 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.629057884 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.629090071 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.629754066 CEST	49746	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.629780054 CEST	443	49746	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.659435987 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.659519911 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.678138018 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678189039 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678230047 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.678263903 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678289890 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.678313017 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.678438902 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678482056 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678517103 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.678529024 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.678556919 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.678575993 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.693944931 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.693967104 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.694058895 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.694073915 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.694124937 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.694453955 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.694473028 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.694538116 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.694554090 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.694607973 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695039034 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695060015 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695100069 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695111990 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695144892 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695168972 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695575953 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695595980 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695648909 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695661068 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695689917 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695910931 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.695971966 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.695992947 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.696038008 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.696064949 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.696099043 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.696265936 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.698760986 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.698781013 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.698860884 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.698874950 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.699078083 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.707326889 CEST	49745	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.707345009 CEST	443	49745	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.719438076 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.736778021 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.736798048 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.737622976 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.740309000 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.765089989 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765135050 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765172958 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.765187979 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765212059 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.765254974 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.765417099 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765460014 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765494108 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.765506029 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.765528917 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.765546083 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781058073 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781104088 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781141996 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781155109 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781188011 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781208038 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781264067 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781308889 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781341076 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781352997 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781382084 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781399012 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781759024 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781802893 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781840086 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781851053 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.781903028 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.781903028 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782164097 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782203913 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782279968 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782279968 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782294989 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782377958 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782486916 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782527924 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782594919 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782607079 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.782633066 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.782654047 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.787403107 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.792105913 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.820075989 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.820121050 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.820152998 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.820167065 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.820189953 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.820214033 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.856475115 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.856523991 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.856549025 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.856570005 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.856595039 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.856620073 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.867496014 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.867542028 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.867815971 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.872881889 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.872910023 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.872955084 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873012066 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873028040 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873056889 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873064995 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873095989 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873116970 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873132944 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873140097 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873153925 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873168945 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873204947 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873214960 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873223066 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873239994 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.873281002 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.873312950 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.880484104 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.914001942 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.914031982 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.914124012 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.914830923 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:53.914845943 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:53.935359955 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.935439110 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.935703039 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.936830044 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 30, 2024 08:48:53.936837912 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 30, 2024 08:48:53.938855886 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.938875914 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.938936949 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.938961029 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.938991070 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.939028025 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.939259052 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.939279079 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.939315081 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.939326048 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.939358950 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.939373970 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954305887 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954359055 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954394102 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954407930 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954438925 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954459906 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954658031 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954716921 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954720974 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954745054 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.954772949 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.954793930 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955024958 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955070019 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955094099 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955110073 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955136061 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955174923 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955365896 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955442905 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955444098 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955467939 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955495119 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955523968 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955780983 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955825090 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955851078 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955876112 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.955909014 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.955931902 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.956231117 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.956285000 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.956299067 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.956317902 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:53.956343889 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.956362963 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:53.967761040 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026339054 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026388884 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026427984 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026446104 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026475906 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026499987 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026628971 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026669979 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026704073 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026715040 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.026742935 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.026761055 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041282892 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041326046 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041387081 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041399956 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041429996 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041446924 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041722059 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041780949 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041786909 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041805983 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.041836977 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.041865110 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042085886 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042128086 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042155981 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042171001 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042195082 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042227030 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042463064 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042507887 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042548895 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042574883 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042603970 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042896032 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042946100 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.042975903 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.042994022 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.043019056 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.043056965 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.043201923 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.043241978 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.043281078 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.043292046 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.043332100 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.043351889 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.043940067 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.112672091 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.112695932 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.112734079 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.112754107 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.112782001 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.112847090 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.113163948 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.113183975 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.113224030 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.113234997 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.113269091 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.113289118 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128092051 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128134966 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128209114 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128221989 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128254890 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128273010 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128519058 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128566980 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128592014 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128603935 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.128631115 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.128645897 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.129192114 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.129244089 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.129278898 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.129291058 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.129394054 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.129409075 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.129466057 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.133259058 CEST	49747	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.133289099 CEST	443	49747	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.341316938 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.341344118 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.341505051 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.342900991 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.342911959 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.387249947 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.387322903 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.387516022 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.388197899 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.388206005 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.388360023 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.397672892 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.397690058 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.398931980 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.398945093 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.478483915 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.478502989 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.478681087 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.479415894 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.479458094 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.479522943 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.479866982 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.479878902 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.480299950 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:54.480317116 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:54.495640039 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.495681047 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.495754957 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.496146917 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.496162891 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.545067072 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.556365013 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.556407928 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.556783915 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.557873011 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.557951927 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.558567047 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.603401899 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.724503040 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.724565983 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.724646091 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.725614071 CEST	49750	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.725629091 CEST	443	49750	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.787509918 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.787755966 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.787781954 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.788899899 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.789349079 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.789499998 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.789536953 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.905792952 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.962263107 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.962450981 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:54.962527990 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.963044882 CEST	49751	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:54.963059902 CEST	443	49751	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.153534889 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.170980930 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.171014071 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.174626112 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.174694061 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.389053106 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.412019014 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.415345907 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.416827917 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.421610117 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.458600998 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.474225998 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.474225998 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.505460024 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.505476952 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.681024075 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.681315899 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.681479931 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.681492090 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.681696892 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.681705952 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.681891918 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.681915045 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.682048082 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.682090998 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.682204008 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.682220936 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.682625055 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.682636023 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.682696104 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.682718039 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.683183908 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.683202028 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.683511972 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.683593035 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.683650017 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.683676004 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.684115887 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.684166908 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.684173107 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.684639931 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.684726000 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.685233116 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.685338020 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.685591936 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.685602903 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.685615063 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.685636997 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.685652018 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.685663939 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.685843945 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.685853004 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.686388969 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.686556101 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.686650991 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.688415051 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.688422918 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.727433920 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.727677107 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.727756977 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.731410027 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.770859003 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.770936012 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.858114004 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.858161926 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.858232975 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.858257055 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.858330011 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.858395100 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.890232086 CEST	49756	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.890250921 CEST	443	49756	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922408104 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922462940 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922487974 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922508001 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922522068 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.922539949 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922552109 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.922558069 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922601938 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.922615051 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922661066 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.922733068 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.922782898 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.927325964 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927366018 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927376032 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927412987 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.927431107 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927444935 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927452087 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927459955 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.927469015 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.927495956 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.927505970 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.927565098 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.930447102 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930491924 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930510998 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930547953 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.930551052 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930581093 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930586100 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.930603981 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.930604935 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.930623055 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.930656910 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.940639019 CEST	49753	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.940644979 CEST	443	49753	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946659088 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946691036 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946700096 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946715117 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946736097 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.946738005 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946747065 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946765900 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.946773052 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.946794033 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.946818113 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.948157072 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.948179960 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.948224068 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.948231936 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:55.948263884 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.948277950 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:55.948700905 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.948712111 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.948735952 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.948764086 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.948771954 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.948800087 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.948808908 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.953099012 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953142881 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953161955 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.953170061 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953202009 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.953223944 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.953248978 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953305960 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.953310966 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953376055 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.953423977 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.954358101 CEST	49752	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.954371929 CEST	443	49752	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979440928 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979466915 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979476929 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979536057 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979579926 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.979583979 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979614019 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979634047 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979644060 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.979644060 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.979661942 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.979682922 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.979687929 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979705095 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:55.979744911 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.998745918 CEST	49755	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:55.998754025 CEST	443	49755	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.017559052 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.017582893 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.017627954 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.017635107 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.017669916 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.017692089 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.037837982 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.037903070 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.037909985 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.037956953 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.037964106 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.038001060 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.038326979 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.038347960 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.038383007 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.038389921 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.038414001 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.038424969 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.039612055 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.039669991 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.039688110 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.039696932 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.039731026 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.039741993 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.040443897 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.040463924 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.040512085 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.040519953 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.040549040 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.040559053 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.041384935 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.041451931 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.041452885 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.041476965 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.041513920 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.041522980 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.041956902 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.041975975 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.042011976 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.042020082 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.042054892 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.042064905 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.109039068 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.109065056 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.109112978 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.109121084 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.109149933 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.109169960 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.111962080 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.112051010 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.112128019 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.112308025 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.112340927 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.113579988 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.113610983 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.113673925 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.113828897 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.113852978 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.118427992 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.118452072 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.118515015 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.118662119 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.118674994 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.128556967 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128633976 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.128640890 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128684998 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128699064 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.128730059 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.128860950 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128921032 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.128931999 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128952026 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.128985882 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.128995895 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.129645109 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.129667044 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.129703999 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.129713058 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.129738092 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.129765987 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.130317926 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.130338907 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.130369902 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.130378008 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.130410910 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.130439997 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.130551100 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.130604982 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.130610943 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.130628109 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.130656004 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.130673885 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.130767107 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.130824089 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.130831957 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.130877018 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.130955935 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.131004095 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.131576061 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.131597042 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.131633043 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.131639957 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.131669044 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.131685019 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.132380009 CEST	49754	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.132389069 CEST	443	49754	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.132622957 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.132649899 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.132698059 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.132704020 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.132733107 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.132750034 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.133569002 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.133590937 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.133630991 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.133636951 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.133662939 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.133676052 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.154838085 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.154850006 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.154915094 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.155147076 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:56.155159950 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:56.180341959 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.180362940 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.180413008 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.180421114 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.180454969 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.180474043 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.199604988 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.199625969 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.199678898 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.199687958 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.199723005 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.199732065 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.219696999 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.219717026 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.219774008 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.219782114 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.219815016 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.219835043 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.220199108 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220220089 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220254898 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.220261097 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220293999 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.220320940 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.220818043 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220835924 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220892906 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.220901012 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.220942974 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.221568108 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.221587896 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.221626043 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.221632004 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.221658945 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.221668959 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.222038031 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222057104 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222110033 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.222117901 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222166061 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.222816944 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222836971 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222877026 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.222884893 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.222925901 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.270934105 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.270955086 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.271002054 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.271009922 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.271039963 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.271049976 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.290432930 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.290453911 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.290497065 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.290503025 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.290545940 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.290570021 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.310333014 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310353041 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310398102 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.310405970 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310442924 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.310457945 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.310802937 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310822010 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310882092 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.310888052 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.310935974 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311171055 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311191082 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311232090 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311237097 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311268091 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311291933 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311661959 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311687946 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311724901 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311733961 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.311747074 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.311774969 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.315762997 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.315787077 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.315834999 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.315840960 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.315870047 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.315879107 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.316212893 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.316231966 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.316260099 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.316301107 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.316306114 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.316350937 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.361587048 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.361605883 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.361655951 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.361665010 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.361711979 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.381035089 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.381056070 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.381094933 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.381102085 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.381133080 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.381150961 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401110888 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401133060 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401179075 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401186943 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401217937 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401232004 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401324987 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401344061 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401379108 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401384115 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401410103 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401426077 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401870966 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401890993 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401942015 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.401948929 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.401998043 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402237892 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402256012 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402307034 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402313948 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402354956 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402527094 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402545929 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402585030 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402591944 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402617931 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402637959 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402884960 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402904987 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402945995 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.402952909 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.402978897 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.403002977 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.452275038 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.452296972 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.452358007 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.452367067 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.452409983 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.471707106 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.471735001 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.471779108 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.471785069 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.471816063 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.471827030 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.491595984 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.491620064 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.491672993 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.491679907 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.491719007 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.491976023 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.491995096 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492033958 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492039919 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492065907 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492084026 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492336035 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492362976 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492402077 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492410898 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492436886 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492450953 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492748022 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492770910 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492814064 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492820978 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.492856979 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.492871046 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493113041 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493132114 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493165016 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493170977 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493196964 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493211031 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493515968 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493535042 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493573904 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493578911 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.493602037 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.493609905 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.542778015 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.542813063 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.542864084 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.542870998 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.542901039 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.542926073 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.562164068 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.562185049 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.562230110 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.562237978 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.562266111 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.562273979 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582146883 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582169056 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582205057 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582210064 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582242966 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582250118 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582554102 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582576036 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582624912 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582632065 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582676888 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582899094 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582921028 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582954884 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582961082 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.582983971 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.582993031 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583271027 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583290100 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583317995 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583324909 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583358049 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583376884 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583766937 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583787918 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583830118 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583836079 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.583863974 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.583873987 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.584167004 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.584187984 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.584223032 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.584228992 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.584255934 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.584266901 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.633634090 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.633660078 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.633696079 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.633702993 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.633740902 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.633754015 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.652945042 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.652966022 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.653001070 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.653006077 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.653059006 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.672919035 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.672939062 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.672981977 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.672996998 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673012018 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673036098 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673365116 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673391104 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673429966 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673438072 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673464060 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673479080 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673810005 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673834085 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673917055 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673923969 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.673958063 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.673958063 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674045086 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674072027 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674104929 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674110889 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674139977 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674206972 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674531937 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674551010 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674586058 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674592018 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674623013 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674639940 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674870968 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674889088 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674921989 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674927950 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.674957037 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.674972057 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.724168062 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.724189043 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.724260092 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.724284887 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.724385023 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.743592978 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.743613958 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.743769884 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.743769884 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.743794918 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.743841887 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.763771057 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.763792038 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.763950109 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.763952017 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.763952017 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.763976097 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.764020920 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.764076948 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.764117956 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.764131069 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.764393091 CEST	49757	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.764410019 CEST	443	49757	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.954963923 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.955269098 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.955318928 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.956861973 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.957503080 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.957639933 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.957700968 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.965221882 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.965781927 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.965797901 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.966149092 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.968096018 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.968169928 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.968208075 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.992964983 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.993311882 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.993335009 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.996931076 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:56.997056007 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.997381926 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.997499943 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:56.997550964 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.001826048 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.002132893 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.002141953 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.002578974 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.003025055 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.003098011 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.003458023 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.011878967 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.049170971 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.049171925 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.049180984 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.049196959 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.095645905 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.111520052 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.111520052 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.124007940 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.124064922 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.124212980 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.125025034 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.126251936 CEST	49760	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.126291990 CEST	443	49760	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.169565916 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.169791937 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.170197010 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.170577049 CEST	49762	443	192.168.2.4	91.220.42.88
Sep 30, 2024 08:48:57.170588970 CEST	443	49762	91.220.42.88	192.168.2.4
Sep 30, 2024 08:48:57.175751925 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.175785065 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.179894924 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.180278063 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.180293083 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191731930 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191751957 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191761017 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191781998 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191788912 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191813946 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191824913 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.191824913 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.191831112 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.191874981 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.191936016 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.193037987 CEST	49759	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.193063021 CEST	443	49759	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240770102 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240843058 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240863085 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240907907 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240932941 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.240932941 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.240947962 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.240974903 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.240977049 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.241014004 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.241031885 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.241050005 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.241072893 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.241084099 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.241117954 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.241323948 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:57.241436958 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.242842913 CEST	49761	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:57.242850065 CEST	443	49761	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.057096004 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.058862925 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:58.058897018 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.060050011 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.062820911 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:58.062999010 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.065787077 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:58.111428022 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.239407063 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.239583015 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:48:58.239645004 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:58.241605043 CEST	49765	443	192.168.2.4	91.220.42.89
Sep 30, 2024 08:48:58.241622925 CEST	443	49765	91.220.42.89	192.168.2.4
Sep 30, 2024 08:49:01.592184067 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:01.592250109 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:01.592509985 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:03.370770931 CEST	49742	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:03.370807886 CEST	443	49742	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.087934971 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:51.088032961 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.088128090 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:51.088493109 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:51.088531017 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.725398064 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.726574898 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:51.726608992 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.726905107 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.727981091 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:51.728051901 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:49:51.781316996 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:49:53.650506973 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 30, 2024 08:49:53.650568008 CEST	49724	80	192.168.2.4	93.184.221.240
Sep 30, 2024 08:49:53.655971050 CEST	80	49723	93.184.221.240	192.168.2.4
Sep 30, 2024 08:49:53.656011105 CEST	80	49724	93.184.221.240	192.168.2.4
Sep 30, 2024 08:49:53.656048059 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 30, 2024 08:49:53.656085968 CEST	49724	80	192.168.2.4	93.184.221.240
Sep 30, 2024 08:50:01.635689020 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:50:01.635749102 CEST	443	49775	142.250.184.196	192.168.2.4
Sep 30, 2024 08:50:01.635824919 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:50:03.037950039 CEST	49775	443	192.168.2.4	142.250.184.196
Sep 30, 2024 08:50:03.038019896 CEST	443	49775	142.250.184.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 08:48:46.878989935 CEST	53	57137	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:46.893579006 CEST	53	56952	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:48.001754999 CEST	53	57112	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:48.205235958 CEST	65427	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:48.205436945 CEST	54140	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:48.226238012 CEST	53	54140	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:48.228439093 CEST	53	65427	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:49.489249945 CEST	65189	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:49.489516973 CEST	52712	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:49.511035919 CEST	53	52712	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:49.511900902 CEST	53	65189	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:51.040091991 CEST	58136	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:51.040760994 CEST	61021	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:51.047058105 CEST	53	58136	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:51.048079967 CEST	53	61021	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:52.365816116 CEST	60248	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:52.368295908 CEST	64293	53	192.168.2.4	1.1.1.1
Sep 30, 2024 08:48:52.372863054 CEST	53	60248	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:52.461129904 CEST	53	64293	1.1.1.1	192.168.2.4
Sep 30, 2024 08:48:54.545871973 CEST	53	63795	1.1.1.1	192.168.2.4
Sep 30, 2024 08:49:05.230618000 CEST	138	138	192.168.2.4	192.168.2.255
Sep 30, 2024 08:49:05.812694073 CEST	53	49221	1.1.1.1	192.168.2.4
Sep 30, 2024 08:49:24.576067924 CEST	53	60000	1.1.1.1	192.168.2.4
Sep 30, 2024 08:49:46.573581934 CEST	53	64499	1.1.1.1	192.168.2.4
Sep 30, 2024 08:49:47.285161972 CEST	53	63331	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 30, 2024 08:48:52.461209059 CEST	192.168.2.4	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 08:48:48.205235958 CEST	192.168.2.4	1.1.1.1	0x6014	Standard query (0)	url.uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.205436945 CEST	192.168.2.4	1.1.1.1	0xe8c5	Standard query (0)	url.uk.m.mimecastprotect.com	65	IN (0x0001)	false
Sep 30, 2024 08:48:49.489249945 CEST	192.168.2.4	1.1.1.1	0xfd9	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.489516973 CEST	192.168.2.4	1.1.1.1	0x342e	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false
Sep 30, 2024 08:48:51.040091991 CEST	192.168.2.4	1.1.1.1	0x11e9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:51.040760994 CEST	192.168.2.4	1.1.1.1	0xadf5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 08:48:52.365816116 CEST	192.168.2.4	1.1.1.1	0x14d7	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.368295908 CEST	192.168.2.4	1.1.1.1	0x66df	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.187	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.215	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.180	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.63	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:48.228439093 CEST	1.1.1.1	192.168.2.4	0x6014	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.235	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:49.511900902 CEST	1.1.1.1	192.168.2.4	0xfd9	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:51.047058105 CEST	1.1.1.1	192.168.2.4	0x11e9	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:51.048079967 CEST	1.1.1.1	192.168.2.4	0xadf5	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:48:52.372863054 CEST	1.1.1.1	192.168.2.4	0x14d7	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:00.434458017 CEST	1.1.1.1	192.168.2.4	0x3333	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:00.434458017 CEST	1.1.1.1	192.168.2.4	0x3333	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:00.980515003 CEST	1.1.1.1	192.168.2.4	0xefad	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 08:49:00.980515003 CEST	1.1.1.1	192.168.2.4	0xefad	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:14.033725977 CEST	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 08:49:14.033725977 CEST	1.1.1.1	192.168.2.4	0xc2ad	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:39.658322096 CEST	1.1.1.1	192.168.2.4	0x14bb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 08:49:39.658322096 CEST	1.1.1.1	192.168.2.4	0x14bb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 08:49:59.616975069 CEST	1.1.1.1	192.168.2.4	0x8da8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 08:49:59.616975069 CEST	1.1.1.1	192.168.2.4	0x8da8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.uk.m.mimecastprotect.com

security-uk.m.mimecastprotect.com

fs.microsoft.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	195.130.217.187	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:48 UTC	735	OUT	GET /s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/ HTTP/1.1 Host: url.uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:49 UTC	2819	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 30 Sep 2024 06:48:49 GMT Content-Length: 0 Connection: close Location: https://url.uk.m.mimecastprotect.com/r/ofkwqtl0sc-hJgXIcV3JNqlFzxd9F3tXQzsjUBaaGuuR0DiczYofULGqG_gyAP_qo3_YPVWx9TwzyDY2bLK3Rr14XvqFyFnk8OxOctpabXzFkOQMKkwXBEUj1yNCQhTn--0GQyx3oCCaFzXQ-yoIWKLbfCvVKDElG1TUTb7iVEx7tYpLVjrE1pWQfCWzGRBPGQUkgeNAwKL3yUD2Pa4L_PQ5C0572KYALUqNeoZ_pcB1Nb7TR_cwdhhko7G0SC9Z-keyLK_2N8xAmu42Uc1NO3U0qsydNESHIxdNU6y95aRXTOJbfKgVb0pyTY97kwDcXtK9ji5WVLlNMGLBuFJZXN8n7ZOaVya3Oek_cHBv3Klh8xShNmrCZU_6JU9zxkGPh52qZkP5KQeGTqgzdF7zAW542x2uAGfDc05CYS9ktQ28aswxqDLD_NOyO6fNH6WXwoXC5X-dQfVIZXRGUWAZlreueH9MmWNFxhMOW9ZTO71qU-yZXxUfkYnugmp1hHLdGU96pqwhux52mHTzCewvTo0-q6Kvm4Q2iBfNLzuNbAER2d0nX5Bm_4zWOFBTej3Vgi5w8f3fRpW9g7T-A-gLHPtgcI8M9LV9hmTqrBNcJYXPOQsN3_7yOwG4H6SVB49ByXJ5OqNxWPl3YCJl08jxvjmg4KjA-elCmMMoY-4syM8hJmU9r2He1TELqCL3M9yTmRrV7CY9ycaZNsqfhNzqyjg-kNNNgt1NAktUbsWE6Hy-5DCiJOl-l5czU-JEwpa8l6PPx-WtAsr-jvtQkVvc0sEYYm_Nu9i7dAQ3q60dtyhPw9AczbFsS8jB4UYomhutaorYznO852TZv3dPoC541Q9NAGJ2yYgw6TFx3gBralwJYd4LLecpoT9NH65HMy668T4XgYBM8Gdq0MZNF_6-K4Oxa8_indipsNjvDC0DTO98oz2ItMTUijeIEeuBm51xbpqgz0dygnnvgzG [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	195.130.217.187	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:49 UTC	3255	OUT	GET /r/ofkwqtl0sc-hJgXIcV3JNqlFzxd9F3tXQzsjUBaaGuuR0DiczYofULGqG_gyAP_qo3_YPVWx9TwzyDY2bLK3Rr14XvqFyFnk8OxOctpabXzFkOQMKkwXBEUj1yNCQhTn--0GQyx3oCCaFzXQ-yoIWKLbfCvVKDElG1TUTb7iVEx7tYpLVjrE1pWQfCWzGRBPGQUkgeNAwKL3yUD2Pa4L_PQ5C0572KYALUqNeoZ_pcB1Nb7TR_cwdhhko7G0SC9Z-keyLK_2N8xAmu42Uc1NO3U0qsydNESHIxdNU6y95aRXTOJbfKgVb0pyTY97kwDcXtK9ji5WVLlNMGLBuFJZXN8n7ZOaVya3Oek_cHBv3Klh8xShNmrCZU_6JU9zxkGPh52qZkP5KQeGTqgzdF7zAW542x2uAGfDc05CYS9ktQ28aswxqDLD_NOyO6fNH6WXwoXC5X-dQfVIZXRGUWAZlreueH9MmWNFxhMOW9ZTO71qU-yZXxUfkYnugmp1hHLdGU96pqwhux52mHTzCewvTo0-q6Kvm4Q2iBfNLzuNbAER2d0nX5Bm_4zWOFBTej3Vgi5w8f3fRpW9g7T-A-gLHPtgcI8M9LV9hmTqrBNcJYXPOQsN3_7yOwG4H6SVB49ByXJ5OqNxWPl3YCJl08jxvjmg4KjA-elCmMMoY-4syM8hJmU9r2He1TELqCL3M9yTmRrV7CY9ycaZNsqfhNzqyjg-kNNNgt1NAktUbsWE6Hy-5DCiJOl-l5czU-JEwpa8l6PPx-WtAsr-jvtQkVvc0sEYYm_Nu9i7dAQ3q60dtyhPw9AczbFsS8jB4UYomhutaorYznO852TZv3dPoC541Q9NAGJ2yYgw6TFx3gBralwJYd4LLecpoT9NH65HMy668T4XgYBM8Gdq0MZNF_6-K4Oxa8_indipsNjvDC0DTO98oz2ItMTUijeIEeuBm51xbpqgz0dygnnvgzGEh5317QYC3FbTrZCIU7fKwUg0k5gXYXLqN45U3Xn5b [TRUNCATED] Host: url.uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:49 UTC	520	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 30 Sep 2024 06:48:49 GMT Content-Length: 0 Connection: close Location: https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w#/enrollment?key=7f171171-6be5-3c2e-9b8e-8571492e5caa Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:50 UTC	903	OUT	GET /ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:50 UTC	435	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5895 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"1707-Uqil5XrtubyF8MN0yNXs6ekDCcs" Vary: Accept-Encoding
2024-09-30 06:48:50 UTC	5895	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:51 UTC	819	OUT	GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/style.css?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:52 UTC	529	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:51 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 4402 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Tue, 11 Jun 2024 19:42:48 GMT ETag: W/"1132-19008d310a3" Vary: Accept-Encoding
2024-09-30 06:48:52 UTC	4402	IN	Data Raw: 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 61 32 39 31 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 61 32 39 31 63 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 32 31 31 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 39 31 34 30 64 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 32 31 31 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 34 31 66 31 35 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e Data Ascii: .btn-primary{background-color:#da291c;border-color:#da291c}.btn-primary:focus,.btn-primary.focus{background-color:#ad2116;border-color:#69140d}.btn-primary:hover{background-color:#ad2116;border-color:#a41f15}.btn-primary:active,.btn-primary.active,.open>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:51 UTC	545	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:52 UTC	533	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:52 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 06:48:52 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=35770 Date: Mon, 30 Sep 2024 06:48:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:53 UTC	547	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:53 UTC	536	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:53 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-09-30 06:48:53 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:53 UTC	544	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:53 UTC	537	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:53 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:53 UTC	542	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:53 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:53 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-09-30 06:48:53 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:53 UTC	404	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:53 UTC	533	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:53 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 06:48:53 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=35799 Date: Mon, 30 Sep 2024 06:48:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 06:48:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:54 UTC	406	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:54 UTC	437	IN	HTTP/1.1 404 Not Found Date: Mon, 30 Sep 2024 06:48:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding
2024-09-30 06:48:54 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:54 UTC	403	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:54 UTC	437	IN	HTTP/1.1 404 Not Found Date: Mon, 30 Sep 2024 06:48:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding
2024-09-30 06:48:54 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	879	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	487	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: font/woff2 Content-Length: 137104 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"21790-18d89b1f630"
2024-09-30 06:48:55 UTC	15897	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2024-09-30 06:48:55 UTC	16384	IN	Data Raw: 0f cc 4f 6c d2 1a 86 c3 e9 8b 88 99 f3 d5 a1 91 67 4c b2 13 7d 63 a8 9b fe c9 ae f3 d5 a9 a7 a7 09 39 b1 36 9f 9e a3 1f a0 90 ed 3a 9a 44 0d 5c 8d 8d 7b 81 1e 8a ae 3d 1b e9 ef 78 68 a7 d2 d5 cc 4b 22 83 b2 53 fb 67 03 b5 43 80 31 6b 6e ea 0b 64 9e 5d 91 43 ab 53 e6 59 13 e2 65 23 13 4e a3 13 df ad 58 23 54 ad 67 ae 58 f6 17 b3 09 75 e2 b6 66 07 58 34 68 96 e2 6f eb 86 2c 9f 25 ed e0 16 6b 9d 16 2e 94 d8 e0 3e 0a 07 e2 b6 59 1c bb 22 ec 90 46 04 ba b2 e9 b8 07 e6 13 6c a8 8e 18 57 fb cf 2d 26 80 6a f1 0b c9 b4 76 9e b1 48 c1 b1 36 31 27 0c 29 55 f7 b1 37 65 8d 37 ab d5 cd 2c ca 86 65 bf cf 8e 2b 4f 7c 6a e2 d3 8c 1b 3d 66 6c 63 4c 3b 5d dd 62 40 41 37 42 38 4f e5 fb b1 65 53 54 1c e7 3e f9 08 40 0c fb 47 77 8c 0f da 6a 5b 2f cf 18 be e8 53 2d ac a8 ae 00 Data Ascii: OlgL}c96:D\{=xhK"SgC1knd]CSYe#NX#TgXufX4ho,%k.>Y"FlW-&jvH61')U7e7,e+O\|j=flcL;]b@A7B8OeST>@Gwj[/S-
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: b6 a3 dc 1f d7 6d 94 a2 70 41 3f 30 2b e9 4d 9c 50 fe 51 07 81 e2 46 1d 88 9a e1 20 91 d8 c3 84 a0 6f ff fa 8f d8 09 d6 ac da 1f b0 13 ac d8 d5 ef 7d 10 ac 9a e5 29 b1 96 ef 48 1f 0a 57 49 85 a1 54 60 01 b0 36 f5 e9 44 9f 11 ed f1 46 d9 0b 9a d1 0f 72 d8 42 eb 3e fa 6d b2 04 91 8a 6c 6d 92 ce cd 74 c0 6c b8 ba 93 46 15 45 1e 42 ca 91 be 7f 40 60 c3 89 82 3f a2 a1 04 7b ac 57 5f 34 f5 f9 08 4c 29 ff 61 12 8f 7c 76 78 b5 a8 5c 8d 64 a1 af 05 cd 2a 12 3e 6f 3a a0 09 ea 41 ab 5d a6 2c 37 8d b0 de 10 80 0d e2 a2 e5 30 4d 4e ee d7 d2 a8 cb dd d5 ab f1 66 1e 02 e1 ef 30 96 58 aa 1a fe 63 9e c5 03 c6 b7 7d cb e7 35 b8 92 84 fd 7d 65 21 6a 1c 2d 1b c1 d3 d1 73 56 1e 2c 9e 17 d6 14 ef 7f 0e 22 c4 bd ec f0 aa c8 83 3e 49 99 cc 25 7c 2c 49 8c fc 46 fe d1 3d 45 71 e4 Data Ascii: mpA?0+MPQF o})HWIT`6DFrB>mlmtlFEB@`?{W_4L)a\|vx\d*>o:A],70MNf0Xc}5}e!j-sV,">I%\|,IF=Eq
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: f7 a6 35 f3 4e af be ab 74 f9 38 66 2e 2b 08 49 48 2b e6 97 ae 58 68 87 8e 4f e3 42 6a c0 27 3e 24 94 ce 22 13 79 aa 3a 0e 61 58 29 5a 0c 8c 27 55 08 51 55 0f b5 92 a0 35 71 8c 71 d8 dd a3 76 fc 9b 25 e1 0c 5c ed 4a 50 04 d2 1a c8 c2 d2 16 74 39 ba da 75 d5 e2 f2 4c b6 50 ff e6 e8 14 99 6e c4 82 a4 52 2e 1e 64 97 eb 59 d1 08 b3 17 f6 88 c1 2e 19 b9 73 69 a4 27 77 c5 f3 ae eb 36 78 8c ac da 87 cb 33 d8 42 c5 c1 d8 9a 0b 95 7e 97 e4 d0 60 a1 6d b0 c9 79 9b d1 1b bc cb fb e1 00 3c d3 b3 c3 16 ba ba 10 ae 36 82 bb 3e 6b b0 65 ae d7 17 eb e6 60 3d d9 29 42 ad 68 bb 78 6a 1c 5f 9d 92 d1 a4 60 b1 f8 da 1e f6 b8 32 8b 48 55 64 89 77 3d 21 50 a4 22 8c d6 4b bc da 22 64 e5 da 9e 85 5c cc 0d 4a 32 33 0e af e9 cd 4c 0a 22 d7 9e 46 6f 20 9e ec 23 96 0f 85 a9 7c 4b 96 Data Ascii: 5Nt8f.+IH+XhOBj'>$"y:aX)Z'UQU5qqv%\JPt9uLPnR.dY.si'w6x3B~`my<6>ke`=)Bhxj_`2HUdw=!P"K"d\J23L"Fo #\|K
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 90 b7 1a 1b e1 08 5c ce 9e f7 d5 75 13 c1 24 81 e6 f5 1b 23 93 da 05 1c 7b ca 40 8c 57 57 c7 e0 35 42 9c ff af 7f 69 a3 8e 47 45 2f 7b e3 93 e2 ed 73 fa a2 86 1a 8f 48 31 13 ae 0d 76 b6 37 50 c6 6f 25 d0 73 ca a1 f8 f1 f2 1e d8 24 c7 2f d2 8c cc 5b f8 5c 23 81 6a 28 39 68 6e 8c 60 33 f8 5a 97 4b bf 58 bd d3 14 cd b1 4e c5 ce 04 45 27 3b 8e ff 06 14 f5 cf 9f df d8 18 28 be be 13 2f d1 e9 40 a1 55 4f 23 92 db fa 8b da 7e 5a ff 3d 10 1d b8 82 b5 fd 21 27 b9 ca 44 d2 b8 43 1d ec 30 1c 0f 62 06 49 39 4f c4 b5 45 da e6 e8 e2 98 3b e5 99 2e 43 f1 db 54 44 d1 c3 0f cb 61 4e f6 d4 60 54 8f 88 b6 ec d7 a5 a6 c8 51 f3 ef cb 03 7c 68 25 87 c0 50 82 99 92 89 9e ed 68 af 2b ba 8a b0 fc b0 14 ed ac b0 1f 97 95 9d b7 2d bd 13 46 60 c8 7b 8b 83 9e f9 12 fb cf 0d 9a ee 9c Data Ascii: \u$#{@WW5BiGE/{sH1v7Po%s$/[\#j(9hn`3ZKXNE';(/@UO#~Z=!'DC0bI9OE;.CTDaN`TQ\|h%Ph+-F`{
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: a1 35 53 99 88 9c 1a ca c1 40 cc f3 bf 63 39 53 a2 6e 0c 10 b4 c5 46 3f 6e ea 80 77 a4 72 5d 0b 8b eb 07 36 70 43 80 9c c2 fb fd bc 33 84 2b 42 91 53 f3 13 33 ab 48 ba aa 67 d7 0e 48 2f 6d fb bb b0 fe c1 fc b5 ed 92 c7 81 a7 cf aa 58 47 56 91 58 ea c4 79 1d 7b 13 81 7a 15 58 fb ae 24 f1 08 44 55 2b a1 ca 7c f6 4f ca 31 f7 50 ec d4 b0 4f e7 0e b2 72 5c 78 53 4a e4 a9 6e b6 70 76 bb 79 12 dd 98 27 2e db 12 cd a3 01 13 b3 dc e7 d2 ca 0d 75 ee 86 11 aa 7b 1d 75 b6 be 8e 53 b0 3b a9 7a 31 f1 1e be 07 f0 57 c3 6a 7a 75 9f b7 97 8c c9 32 b1 78 87 5d 67 9b f1 fe f1 cf 1e 5a 86 d7 4d 7a c1 9b 1a 5a d4 d4 92 8f 7d a2 82 27 05 d8 5e 32 2b f1 88 23 a4 ff 19 d5 7e 0e a0 9b 7c 5f c4 ba d5 70 c1 24 76 a0 91 6e dc db 52 cf bb 1a 9e b5 52 54 c2 11 5d 3e 88 43 7f 11 93 2a Data Ascii: 5S@c9SnF?nwr]6pC3+BS3HgH/mXGVXy{zX$DU+\|O1POr\xSJnpvy'.u{uS;z1Wjzu2x]gZMzZ}'^2+#~\|_p$vnRRT]>C*
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 52 67 87 e5 4d ba f3 da 59 cf a6 a6 6e 97 66 ca f7 51 80 90 a8 bf a4 19 d5 44 d8 32 61 d8 c6 e4 e3 61 62 b1 d7 b0 48 bc 72 d1 b9 de ce 30 91 18 24 be 93 62 b4 93 09 f6 1f 51 4d f3 6d a8 9f bc 84 6c e9 0a fe 8c 71 ef 74 4b c9 49 fc 62 bb c5 ed d2 bd a2 fb 8c 3c cb 3c fc 19 4f 89 2c 76 0e 7a 13 50 8f 01 9d 72 15 8c ab bc 2e d6 32 0a 87 2a fe 1e 0c 6a ae f7 80 fd a7 4f 86 f8 82 33 9f e2 17 74 7d fc c2 ea 10 da 75 1b 5c dd de 96 5d 0f e7 be fb 97 70 da b7 bc 1b ff 8e ee 9a fb 65 5c f8 58 02 a4 c7 16 4d cc ab fc 51 2e b9 22 51 3b c3 7c e3 72 ca ea 7a 22 a9 b0 29 c6 1a 50 4d ca f2 52 0c 4d b5 00 a7 86 45 5b e9 88 e4 19 9f a9 8e f1 fc bc 63 c3 9f 1e df 47 47 24 2f 4d 8e 50 6e ef f7 f6 e7 06 45 73 a3 fd fe 68 18 3d c7 c9 f5 4f c2 f1 49 fe 5c 7c 72 34 1b fe c5 80 Data Ascii: RgMYnfQD2aabHr0$bQMmlqtKIb<<O,vzPr.2*jO3t}u\]pe\XMQ."Q;\|rz")PMRME[cGG$/MPnEsh=OI\\|r4
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 6a a2 29 33 2b 25 81 17 2a 72 1f 4b 88 26 3a 33 95 0e 95 c8 52 ee 3a 12 0a 3e 89 30 a9 71 46 57 17 ad 23 d2 47 7e 60 f3 81 86 4d ac 50 d5 f2 90 ea eb df 41 be dc b1 7f 23 63 de 4d 96 d2 6c 90 2c 98 0f bb 44 a1 23 dd 10 e9 be 15 ae d2 d7 00 e7 b1 37 dd b0 42 aa ce c8 08 ef 10 bc d1 c8 da c8 52 c3 cb 19 af db aa ab 07 59 ae de ce dd 1b 95 ef 3d 3f 6a 5f b1 76 cc a5 8f f1 1d dc 8f 8f 75 42 d7 0f ee 5f e1 fc 30 7e 56 40 f5 12 c8 de 7e e7 95 8b 4b b9 4e 70 1f cc 80 e6 95 a0 72 54 d3 86 e6 cd 13 1e 43 70 71 58 1c da cb 35 ef 31 84 a1 b8 a6 d9 cb cf 61 ee 5e 2c 80 f3 0f cc 0c 71 f9 cf 02 c0 1e 2f 64 c6 c5 d7 e8 f3 eb 66 c7 a2 b1 cc 3c 45 ac d1 d7 83 c5 c1 3c c4 15 21 2d c8 c8 9e 19 14 34 53 e2 3f ee 02 98 1f 0c 4b b1 9d 6a 02 93 5a 74 5c 5b 65 e4 db 80 e6 01 c3 Data Ascii: j)3+%*rK&:3R:>0qFW#G~`MPA#cMl,D#7BRY=?j_vuB_0~V@~KNprTCpqX51a^,q/df<E<!-4S?KjZt\[e
2024-09-30 06:48:56 UTC	6519	IN	Data Raw: e4 c4 03 48 1e bf ea 31 f2 fe 38 48 f5 29 00 bd 8a e3 0d 8a d9 e1 40 97 92 dd 9c 15 0e b5 1b 6f 44 60 77 29 6e 51 16 34 b3 5e 38 d1 f3 ef 50 35 40 32 63 52 d1 27 62 e7 5d 1f e4 86 13 19 f3 d5 b7 b8 ae b0 da a1 8b d1 7c a3 66 17 a4 e4 e8 f0 50 2d 39 23 87 3b d5 08 3b 65 ff 1f 89 99 99 7b 22 11 6f a0 e6 a6 98 12 fe 9d 6e 8d 6a f1 0d 39 de 04 db 4e d0 38 5b ff 83 e8 be 4a 3d 8d e6 68 23 77 85 14 dd 05 06 ce 58 28 e9 35 86 9d b7 eb fe b8 25 8d 99 5b 3c 46 1f 69 30 82 4d 78 a0 33 08 54 5d b3 5b f2 45 04 82 16 91 6b 6f d0 9c a7 63 84 19 35 8b 35 5e 76 ab 50 37 7e 16 2a 6f c5 bf 6d 95 a9 c0 a5 d1 70 a4 a9 f8 72 68 84 8a fb 02 2a 73 aa 42 e4 4f 65 79 51 d8 52 a7 83 27 b5 2b fc 75 40 e0 3b 6e f1 07 c1 17 89 b7 4c 43 06 d5 b2 48 c0 84 92 12 84 f6 42 7e 89 7b 8b ca Data Ascii: H18H)@oD`w)nQ4^8P5@2cR'b]\|fP-9#;;e{"onj9N8[J=h#wX(5%[<Fi0Mx3T][Ekoc55^vP7~omprhsBOeyQR'+u@;nLCHB~{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	890	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	485	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: font/woff2 Content-Length: 37608 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"92e8-18d89b1f630"
2024-09-30 06:48:55 UTC	15899	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2024-09-30 06:48:55 UTC	16384	IN	Data Raw: 30 ff 97 55 a3 dd 4a 98 74 fc 1d 83 f0 9e ff fc 77 93 f0 07 4c c4 e3 ba a4 82 18 61 e5 f4 8a e3 d4 f8 ff 6c 4b 8a 92 a2 a0 cc e5 a8 30 d2 08 4c 00 9b 9b 95 da d4 30 64 74 f0 d2 a0 cb 76 ee 3e 11 83 e3 6a ad 5b 0e 85 17 bb 23 bb 40 81 27 f3 97 b7 2c 40 a1 3c f7 32 13 ed f0 02 da 35 87 bd 38 c0 0f 39 3d b4 aa 24 b4 ae c3 56 ec df 36 36 59 5a 77 c4 2d 65 d8 ee bb 1d 03 24 fc a3 73 36 eb 6e 1c 69 dd 7a 75 f5 de e1 6c e8 1a 8a 49 59 09 83 71 90 44 08 46 54 f8 ab 50 28 2f 84 22 a8 40 a4 ab 55 0a db b9 a7 a6 5c 31 13 8d dd fd 30 47 21 e4 f8 52 e2 28 c1 30 18 09 2e 22 18 30 ee 2e 68 13 08 6a 1e 38 77 a9 17 da 19 ad ec 02 1c e2 97 92 f5 ce 4d f6 55 ef 29 de 3d fe 05 7d 95 bf 17 80 30 ad 4b 65 a3 ad ef 83 31 6f 52 df 48 6f 58 d8 f1 bc 80 7e 75 3f 93 17 c7 c5 f1 71 Data Ascii: 0UJtwLalK0L0dtv>j[#@',@<2589=$V66YZw-e$s6nizulIYqDFTP(/"@U\10G!R(0."0.hj8wMU)=}0Ke1oRHoX~u?q
2024-09-30 06:48:55 UTC	5325	IN	Data Raw: 05 e0 1d 01 df a5 f3 b4 96 e6 75 df 45 19 80 a8 d0 ad ff 46 55 eb 3f b6 9e d6 a6 66 06 05 dd 07 11 f4 9f 2f da 16 52 b3 0b af 46 23 d1 d4 20 51 c1 85 31 3b d4 26 f3 c8 bb 09 79 39 76 76 e6 a9 24 e7 46 43 53 55 07 39 68 b4 be 94 95 d7 d1 ca e9 cd ac 1e ff c5 a4 7d 51 a9 8a 13 7f 34 74 c9 ba 12 ba 14 aa ae 33 6a 18 5e c9 4d 1f eb db 36 f1 b5 b1 03 34 1c 93 31 66 aa 3b 36 e9 27 87 2b 2b 0e 85 7f 6e f1 2d 59 b5 49 d7 26 d1 d6 dc 00 39 70 ed 30 bb 9b 61 c9 3c 28 6a a0 25 a0 6a 67 d0 27 f8 98 ab 5b 86 cb 52 e3 e8 92 ec 68 7f 34 6a 30 34 c9 69 95 22 3e 1d eb 2f b9 0d b8 8b 2f 25 4a 7e 40 35 b8 c8 9b d1 d4 cf 3f 15 7c a8 f1 40 b6 e7 aa 3a 3d 3c d9 9a e4 10 90 c2 c7 23 54 58 ab 29 51 93 7b c8 a0 b5 e0 1c ed 7f da 53 da 24 8d 90 c6 4c 7b cc 94 b0 d3 a7 e7 9f e6 8c Data Ascii: uEFU?f/RF# Q1;&y9vv$FCSU9h}Q4t3j^M641f;6'++n-YI&9p0a<(j%jg'[Rh4j04i">//%J~@5?\|@:=<#TX)Q{S$L{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	613	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	529	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:55 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-09-30 06:48:55 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	401	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:55 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-09-30 06:48:55 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-09-30 06:48:56 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49753	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	874	OUT	GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	493	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: image/png Content-Length: 11793 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Wed, 12 Jun 2024 06:20:08 GMT ETag: W/"2e11-1900b1a8eb9"
2024-09-30 06:48:55 UTC	11793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 06 00 00 00 48 15 cf 20 00 00 00 04 67 41 4d 41 00 00 a2 a4 c6 af d9 d7 00 00 00 20 63 48 52 4d 00 00 87 10 00 00 8c 12 00 01 05 ba 00 00 80 e9 00 00 52 06 00 01 15 5d 00 00 36 b0 00 00 1f 42 cc 99 6f 4a 00 00 07 20 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 48 c7 95 94 09 50 93 d7 16 c7 ef f7 7d d9 13 12 12 12 08 fb c7 be 18 48 40 64 15 0a 84 45 94 7d 53 11 17 48 22 44 02 89 21 24 58 c1 d2 a7 22 b2 08 b1 40 a9 82 a8 20 f5 a1 28 c8 52 7c 2e 85 ba 14 c4 67 05 2a a0 02 2e 80 55 8a 55 b1 a2 be 62 69 28 f3 a6 7d 6f de 74 e6 9d 99 3b ff df 9c 7b ee 9c 7b ce 99 39 00 e0 7b fc 02 fc 03 61 5f 00 d2 33 14 f2 e8 60 7f 74 dd fa 04 14 3f 0c 10 00 03 12 c0 Data Ascii: PNGIHDR,xH gAMA cHRMR]6BoJ iCCPPhotoshop ICC profileHP}H@dE}SH"D!$X"@ (R\|.g*.UUbi(}ot;{{9{a_3`t?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:55 UTC	600	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:55 UTC	482	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:55 GMT Content-Type: image/png Content-Length: 2782 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630"
2024-09-30 06:48:55 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:56 UTC	399	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:57 UTC	482	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:57 GMT Content-Type: image/png Content-Length: 2782 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630"
2024-09-30 06:48:57 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:56 UTC	673	OUT	GET /branding/81f15691c8e13abeef2b9606ac8f301ee5b26dd1/main-page-logo.png?tkn=3.oLd3rhcdaN5iJRshRhexMTAQcLvFS0rcHXyG7-4JTZtDZkP9k0kZhNVwhq1qISKW6X7917WgQq0KRgxFPqAbD7PGvItFoiRtHaxccInLNxwtPQxoGXih61GdrYdk0CSDen40FyAxQWY6eINSLiOk2D0ZRX_xGTs-nlabFp45DSXrdc-PCKHiDmqViIaCaPbl.7jFMsSODCqrQqxMKlS6b7w&originalContextPath=ttpwp HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:57 UTC	493	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:57 GMT Content-Type: image/png Content-Length: 11793 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Wed, 12 Jun 2024 05:24:03 GMT ETag: W/"2e11-1900ae735b1"
2024-09-30 06:48:57 UTC	11793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 06 00 00 00 48 15 cf 20 00 00 00 04 67 41 4d 41 00 00 a2 a4 c6 af d9 d7 00 00 00 20 63 48 52 4d 00 00 87 10 00 00 8c 12 00 01 05 ba 00 00 80 e9 00 00 52 06 00 01 15 5d 00 00 36 b0 00 00 1f 42 cc 99 6f 4a 00 00 07 20 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 48 c7 95 94 09 50 93 d7 16 c7 ef f7 7d d9 13 12 12 12 08 fb c7 be 18 48 40 64 15 0a 84 45 94 7d 53 11 17 48 22 44 02 89 21 24 58 c1 d2 a7 22 b2 08 b1 40 a9 82 a8 20 f5 a1 28 c8 52 7c 2e 85 ba 14 c4 67 05 2a a0 02 2e 80 55 8a 55 b1 a2 be 62 69 28 f3 a6 7d 6f de 74 e6 9d 99 3b ff df 9c 7b ee 9c 7b ce 99 39 00 e0 7b fc 02 fc 03 61 5f 00 d2 33 14 f2 e8 60 7f 74 dd fa 04 14 3f 0c 10 00 03 12 c0 Data Ascii: PNGIHDR,xH gAMA cHRMR]6BoJ iCCPPhotoshop ICC profileHP}H@dE}SH"D!$X"@ (R\|.g*.UUbi(}ot;{{9{a_3`t?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:56 UTC	390	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:57 UTC	529	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:57 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:57 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-09-30 06:48:57 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49762	91.220.42.88	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:57 UTC	592	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:57 UTC	508	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:57 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:57 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	91.220.42.89	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 06:48:58 UTC	391	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 06:48:58 UTC	508	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 06:48:58 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-09-30 06:48:58 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Target ID:	0
Start time:	02:48:40
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:48:45
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,17619125482257120158,7670211923122109498,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:48:47
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/r06pCLv4mSmE7ORSBfNCyUvN-?domain=clicktracking.yellowbook.com/