Edit tour

Windows Analysis Report
https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk

Overview

General Information

Sample URL:	https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimeca
Analysis ID:	1523587
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,17459722688275995018,9549884425335363036,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/ttp/url/get-page-data HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveContent-Length: 173sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://security-us.m.mimecastprotect.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 18:04:08 GMTContent-Type: text/html; charset=utf-8Content-Length: 180Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-Encoding

Source: chromecache_140.1.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_140.1.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49745 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/39@12/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,17459722688275995018,9549884425335363036,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,17459722688275995018,9549884425335363036,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
url.us.m.mimecastprotect.com	205.139.111.117	true	false	unknown
security-us.m.mimecastprotect.com	170.10.132.88	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
www.google.co.il	142.250.181.227	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://security-us.m.mimecastprotect.com/api/ttp/url/get-page-data	false	unknown
https://www.google.co.il/amp/s/url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/images/mimecastlogo@2x.png	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA#/block?key=sQWSJDm0QP9zhFiiFttlhCGLnKk_45zZEE_qZO5dW3LxxjgqWgNlOD9HyVUNCedqLr4LnPoVC1m_XEO3KI3lDH4CSeWt8znEw064cNqjZ8AavSHAfLV0Sz5NRiGSTOpV	false	unknown
https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/languages/en.json	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA	false	unknown
https://security-us.m.mimecastprotect.com/branding/247e11fef91c5004a353fa5232e56bec0394f500/style.css?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false	unknown
https://security-us.m.mimecastprotect.com/branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js	false	unknown
https://url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA	false	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_140.1.dr	false		unknown
https://community.mimecast.com/docs/DOC-241	chromecache_140.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
205.139.111.117	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
170.10.132.89	unknown	United States	30031	MIMECAST-US	false
170.10.132.88	security-us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
142.250.181.227	www.google.co.il	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523587
Start date and time:	2024-10-01 20:03:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/39@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.174, 173.194.76.84, 34.104.35.123, 142.250.186.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk

Input	Output
URL: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7i Model: jbxai	{ "brand":["ALEM GROUP"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7i Model: jbxai	{ "brand":["ALERA GROUP"], "contains_trigger_text":true, "trigger_text":"Access has been blocked for your protection", "prominent_button_name":"Access Blocked", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 17:03:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9855713540064883
Encrypted:	false
SSDEEP:	48:8wdGTia/HvidAKZdA1FehwiZUklqeh9y+3:8F3Bey
MD5:	E6E61D687D0EB1C206572A254F047D60
SHA1:	DAFBF8EFC58AA305044E532D3F29878F6E8BA283
SHA-256:	04DAC1F7E2ADE1C16A7BAF83ADAF0DA1496BE713B53177E1C3E1DF66A263AD25
SHA-512:	4ADE7E2EAD7BCA2F1846CCFEAFC39FA7512B68E9D6B6473CBBD8FF4B8FE3C0FE60299C03603EBB4FA5F1C7E7525BEB53626294DB6C69B932F5DB7CE8489CE287
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......nJ,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 17:03:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.002984340182792
Encrypted:	false
SSDEEP:	48:8rdGTia/HvidAKZdA1seh/iZUkAQkqehOy+2:8U3X9Qry
MD5:	FEED6F59E4F5E62166AA14BDDE542D1F
SHA1:	45E104781D561245A0E62D647811E5B7FEE4DB29
SHA-256:	7CF34231403DE1A2597161020E17EEE7E067FD351D67D3E2DB0405DF5C739B7D
SHA-512:	D1F00C8A38D16B2AC611BBD8005D8645739C9A3DED0A74864704AC8DFE653D75564B253BEA848436599E37B4378AFF1E0206395749452EF0D485C662BF0C51D7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......aJ,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010459621699116
Encrypted:	false
SSDEEP:	48:8tdGTiaAHvidAKZdA14meh7sFiZUkmgqeh7ssy+BX:8m3inKy
MD5:	C8D8E9C35C3428EB2607BCB3CE314751
SHA1:	1DAB2AAD08CE52C5A6B944419B00480E3B94386C
SHA-256:	1A9B638E4A5E21CEB0261262734312ACD5D051D01864A3E38479A83F3EA00701
SHA-512:	626AB6EE1763CD3CD31467F7100411288149A8F8CC3DD9E26396D95F0C29E104D5A41C6F5B7252E26A46EBA06B328810B24330D79F894CE32EB222A89A7DF873
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 17:03:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.999821235872204
Encrypted:	false
SSDEEP:	48:8hdGTia/HvidAKZdA1TehDiZUkwqehiy+R:8S3kky
MD5:	963C86CF62BC8D316DCD70FE0618E448
SHA1:	848A902D64640FA9A3CCC13D17FD5B81D2B434AD
SHA-256:	50321221F0F6FF041B6B32E859147AADB35020B14BFF1F7729F4FD9C8CC6898E
SHA-512:	2A819BF9E2A559C169CFA37BB2C8F8E452F130DE6595BE932A0DFF776D650AB0830ABFBF80BE19BB3C2650CFABF437C5C168AE14A5EB4A977B79353DB5C159F1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H.[J,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 17:03:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.987831151036031
Encrypted:	false
SSDEEP:	48:8SdGTia/HvidAKZdA1dehBiZUk1W1qehYy+C:8X3E94y
MD5:	1B7E4E5F2E2B5762239ECBBA33873FF0
SHA1:	5BBB299CCD0C628896AC6B0A94902CC2EF562676
SHA-256:	01530E2E100272752B85439E5FB4C26813527A4865ED59112E29604F2231745E
SHA-512:	DB215F801AB15848EC7464DB45B7BDD078B29286BE5849102EE212821B1C2713236A36198A52F8C5B85C73A5F5488CC924202066B2ABF23C5F59212772C6C979
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......hJ,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 17:03:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9972885491818095
Encrypted:	false
SSDEEP:	48:8AdGTia/HvidAKZdA1duTeehOuTbbiZUk5OjqehOuTbKy+yT+:8132TfTbxWOvTbKy7T
MD5:	87F9B6A5219EC0FF020ADA96AC41E54F
SHA1:	F55CCB50DB2E8613C406F95F39FE90AA57595D21
SHA-256:	A73E7BF77D672A542C794440AC7C044C9D7A81BC1BF3F0B647BF9C853ADDD879
SHA-512:	B9E8A0E3A46F956AE923EC9B7BAAFB710CCBC755500FCB08FE993E8DC42C37CA3E272924A38069F704F8B79693505A9D2B9644454B56E0955D30315EA930474C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J(RJ,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAYs.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	7.9930739048349935
Encrypted:	true
SSDEEP:	768:NzA1kfxARdebgMmiX+c2BERO9/ufrv7KkffWz6tw2O7i:NzA1k5aebgMmYWH9mfpfSmPOe
MD5:	E5231978386520AFD0019A8F5D007882
SHA1:	5E06725A18323ED9372E3E488D4F6DF1A56B3091
SHA-256:	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
SHA-512:	D5EEE91E55BFE7FB220705545D6E767C1A969F4E313F1991C220F4EAA05A7ABC83EE9E6B804D1DF90C1779591F587E1FD58230E120CDA529F8C98BC337E4D3D3
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
Preview:	wOF2............../..............................T.V..N...x..S..~..6.$..x. ..2..U.C..T'.a..!...{.1...l.$......\|...(.U...=A.1...PkY..N....t.+P`..Kp.:n......p......~.......-....`;D.vu.p.N.t......]u....m....Hln..a.x..N.gl...'[`..V..L{.....f.9.l..sw7....M.....B..n.M.6.....z..(...)..}>...... .A.KG}.Q...Z.....G.w\K........a..,.F...3....Z.i)-..<l.eEu.eY.e6..66].VY.5.n.....\_..W....J.ARC.{....u...r.H-...x.A-j.z........?...0..K..EU...v...YC..y.?J.{.._..L60.R..%...X...j..B]E..U.w.?.....J....dD..9.'.r....o.....X.l.^@>...wj?w.7S<G3ch..%..2Hr....&.....K..Q..l;.......f..O2$..}H K......s...~.m..t\|..+.........'..,S...H{@.X.S.E....p.g..\|.{E....Vi7...u.:K...r.3s~.....d..........(tC.......D....f....higI..9.q...Y.....J.F.....X...2c./......dM.K........1....&.. L.A,I....gL....2.i.Rd.8.h.0w....=.@.b.Q..@AP.}K?.$.....k..."...D..5....#...3r.eY@(p.........&....\...@..q..1......F k<....=....9G.f*..........y..N..[..._5.....U.@..\|}..u.k2..7...).#y.................d..B

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 107, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6704
Entropy (8bit):	7.710860896274321
Encrypted:	false
SSDEEP:	192:GgSVkntnOKTDIMTnITWF1HbR8SqdAxy88KcGhULapE:GHmntnOKfIMrITU1HbR8P0yDKhU2pE
MD5:	992E865F81CC546C09EC7D8D398F25F1
SHA1:	0998C162B597516F047ACBA6B672B1DF61E3605E
SHA-256:	7EF98618CEC46FBB1B6958CD014F42D417751DA10A881F488AFFFFE3A996EEB1
SHA-512:	7A80045ECFAFB5B322A11C70C2EF03FD27C4899D515BE7D5401A5551D31E88834F82CBC14DB0F400412AB75378BB7EB3414F46CDB7806362A3D526CCC7976CA1
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp
Preview:	.PNG........IHDR...,...k......W......pHYs................wiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmp:CreateDate="2021-05-07T15:42:44-05:00" xmp:MetadataDate="2021-05-07T15:42:44-05:00" xmp:ModifyDate="2021-05-07T15:42:44-05:00" xmpMM:InstanceID="xmp.iid:811af746-bcde-4f88-9049-30fea2ea59de" xmpMM:DocumentID="adobe:docid:photoshop:c68bd257-26b0-3d46-9d94-9c2736efb97f" xmpMM:OriginalDocumentID

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 107, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6704
Entropy (8bit):	7.710860896274321
Encrypted:	false
SSDEEP:	192:GgSVkntnOKTDIMTnITWF1HbR8SqdAxy88KcGhULapE:GHmntnOKfIMrITU1HbR8P0yDKhU2pE
MD5:	992E865F81CC546C09EC7D8D398F25F1
SHA1:	0998C162B597516F047ACBA6B672B1DF61E3605E
SHA-256:	7EF98618CEC46FBB1B6958CD014F42D417751DA10A881F488AFFFFE3A996EEB1
SHA-512:	7A80045ECFAFB5B322A11C70C2EF03FD27C4899D515BE7D5401A5551D31E88834F82CBC14DB0F400412AB75378BB7EB3414F46CDB7806362A3D526CCC7976CA1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...k......W......pHYs................wiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmp:CreateDate="2021-05-07T15:42:44-05:00" xmp:MetadataDate="2021-05-07T15:42:44-05:00" xmp:ModifyDate="2021-05-07T15:42:44-05:00" xmpMM:InstanceID="xmp.iid:811af746-bcde-4f88-9049-30fea2ea59de" xmpMM:DocumentID="adobe:docid:photoshop:c68bd257-26b0-3d46-9d94-9c2736efb97f" xmpMM:OriginalDocumentID

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4180)
Category:	downloaded
Size (bytes):	5896
Entropy (8bit):	5.86372536798498
Encrypted:	false
SSDEEP:	96:NLLat+nvllYCK3t+nvllYCKaNJEjSC9cUlQ:4EoxEosEVi4Q
MD5:	42B95B7676DA36E2DA7CE28B5E32FCF3
SHA1:	41BFCACFF75911D50F9FB759B635045E9810EB12
SHA-256:	2266A515A3C51F4F4CAA9945FC70080D0C35F1D5F01ACEDD66A1DE1294A29023
SHA-512:	848EDC5A189A70CF4F722DFB1DD22C9FD8022F1EC4447B885A0557C9C6F2DFACFEDFC13928BB898B99FABFC44B79DF4E7924958341AD3B75A42E66A2552651B8
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <link rel="stylesheet" href="/branding/247e11fef91c5004a353fa5232e56bec0394f500/style.css?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kG

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/languages/en.json
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.755948041571961
Encrypted:	false
SSDEEP:	3:PouV7uJLzLcvzSAEtvxLzUbSodX7JH4vrLUe9ubygGjxcM16SWXxVWRaecKBc4NM:hxuJLzLcbzEdxqXLorwe9UygqxcMUSWp
MD5:	B574A8D3BC4C6A4FE57E89008E9645A3
SHA1:	471EBF49ADD18D605FD24F188DD460F165DDEF45
SHA-256:	3237A8FE51F94BBF3E3E38E4A8E0DC1A643F5DFB5C49D265A8B456CD646D6FCC
SHA-512:	011CB4A90C3B5A4D467B8765A51121CC2AAE9F5C1B570DC82D73D3B12B32F63928F6BD9BE96C5410212392A13DA287154D729A1E0D21AF3E13CCB07F2DD11224
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>.</head>.<body>.<h1>Error 404</h1>.<h2>Sorry, page not found.</h2>.<p>We could not find the page you requested.</p>.</body>.</html>

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/images/mimecastlogo@2x.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:	3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4422)
Category:	downloaded
Size (bytes):	4423
Entropy (8bit):	4.815097705534322
Encrypted:	false
SSDEEP:	48:djeoaXikgjBI+8zeX0y1rHFThJDkMXFThEjoPscz1H+YyFWTFsPUOXFiGfzi:XaXG1I+tDDkyKjoPjzd+YfOP/y
MD5:	C4068257E0CD6D672DFE12AABA9573F0
SHA1:	25F86105FA5D49220909295C6123C15BA9840BD4
SHA-256:	D0990058A706701836F22D68CF6527FCA2C6520E18553EE6FFA0DE30B6607743
SHA-512:	2A31D4306FA9E03F0F0314D141BC9E331082D9278009381093E078FB757306E68F5E8BAE31DD29D16197E380C0F5887C03EEFDD409E6D4385623DB58F8BF0060
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/branding/247e11fef91c5004a353fa5232e56bec0394f500/style.css?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp
Preview:	.btn-primary{background-color:#1976d2;border-color:#1976d2}.btn-primary:focus,.btn-primary.focus{background-color:#145ca4;border-color:#0b3660}.btn-primary:hover{background-color:#145ca4;border-color:#12579b}.btn-primary:active,.btn-primary.active,.open>.btn-primary.dropdown-toggle{background-color:#145ca4;border-color:#12579b}.btn-primary:active:hover,.btn-primary:active:focus,.btn-primary:active.focus,.btn-primary.active:hover,.btn-primary.active:focus,.btn-primary.active.focus,.open>.btn-primary.dropdown-toggle:hover,.open>.btn-primary.dropdown-toggle:focus,.open>.btn-primary.dropdown-toggle.focus{background-color:#104a85;border-color:#0b3660}.btn-primary.disabled:hover,.btn-primary.disabled:focus,.btn-primary.disabled.focus,.btn-primary[disabled]:hover,.btn-primary[disabled]:focus,.btn-primary[disabled].focus,fieldset[disabled] .btn-primary:hover,fieldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary.focus{background-color:#1976d2;border-color:#1976d2}.btn-primary .b

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 20:03:59.091586113 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.091643095 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.091727972 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.092061996 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.092103004 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.092153072 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.092308998 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.092338085 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.092462063 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.092478037 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.737663031 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.748483896 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.748543024 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.749465942 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.749546051 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.749824047 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.751005888 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.751024961 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.751158953 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.751225948 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.751379967 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.751415014 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.751941919 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.752002001 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.752360106 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.752418995 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.799484968 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.799485922 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:03:59.799499035 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:03:59.846963882 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.024821997 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.024878979 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.024959087 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.025625944 CEST	49706	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.025665045 CEST	443	49706	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.027632952 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.075402021 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.353523970 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.353898048 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.353962898 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.354068041 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.354068041 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.354091883 CEST	443	49707	142.250.181.227	192.168.2.16
Oct 1, 2024 20:04:00.354166031 CEST	49707	443	192.168.2.16	142.250.181.227
Oct 1, 2024 20:04:00.373322964 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.373383045 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.373476028 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.373675108 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.373696089 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.928075075 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.928368092 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.928391933 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.929378033 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.929474115 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.930474997 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.930533886 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.930654049 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:00.930660963 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:00.977956057 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.146311045 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.146400928 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.146415949 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.146460056 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.148241043 CEST	49708	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.148262024 CEST	443	49708	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.150218010 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.150259972 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.150333881 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.150553942 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.150563955 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.719343901 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.719849110 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.719883919 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.720361948 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.720767021 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.720841885 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.721031904 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.721059084 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.935338974 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:01.952763081 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.953804016 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.953896046 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.954678059 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.954698086 CEST	443	49710	205.139.111.117	192.168.2.16
Oct 1, 2024 20:04:01.954709053 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.954775095 CEST	49710	443	192.168.2.16	205.139.111.117
Oct 1, 2024 20:04:01.998958111 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:01.999018908 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:01.999108076 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:01.999321938 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:01.999337912 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.260096073 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:02.740638971 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.741080046 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.741116047 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.742566109 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.742660046 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.743665934 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.743748903 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.743853092 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.743865013 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.791996956 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.873905897 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:02.930911064 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.930944920 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.930993080 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.931026936 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.931210995 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.931211948 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.931849003 CEST	49711	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.931873083 CEST	443	49711	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.957443953 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.957484007 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.957585096 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.957813978 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.957828045 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.960700989 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.960755110 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.960836887 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.961298943 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:02.961319923 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:02.977262020 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:02.977313042 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:02.977411985 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:02.977602959 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:02.977617025 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.418881893 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.419186115 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.419212103 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.419702053 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.420027018 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.420113087 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.420182943 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.463445902 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.634104013 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.634445906 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:03.634480000 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.635579109 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.635674953 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:03.636626005 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:03.636686087 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.636854887 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.637355089 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.637365103 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.637753010 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.638042927 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.638101101 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.638176918 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.679399967 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.687962055 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:03.687978029 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:03.735996962 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:03.747371912 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.747402906 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.747473955 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.747479916 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.747524023 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.748145103 CEST	49713	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.748162985 CEST	443	49713	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.750821114 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.750878096 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.751842976 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.752391100 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:03.752403021 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:03.783377886 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:03.783480883 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:03.783577919 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:03.783802032 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:03.783834934 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.081015110 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:04.212300062 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.213354111 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.213382959 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.213777065 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.214214087 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.214287043 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.214378119 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.255417109 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.442838907 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.443664074 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.443692923 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.444767952 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.444852114 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.445189953 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.445252895 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.445396900 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.450911999 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.450938940 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.450952053 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.451034069 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.451061964 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.451112986 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.452853918 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.452882051 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.452928066 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.452939034 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.452961922 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.452976942 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.491404057 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.497013092 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.497041941 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.537445068 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.537497997 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.537627935 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.537656069 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.537699938 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.538311958 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.538341999 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.538381100 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.538386106 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.538427114 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.538435936 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.538872004 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.538889885 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.538954973 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.538964033 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.539000988 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.539680958 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.539719105 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.539751053 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.539758921 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.539771080 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.539783001 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.539808989 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.540025949 CEST	49715	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.540043116 CEST	443	49715	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.543973923 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.544676065 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.544714928 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.544773102 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.545129061 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.545173883 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.545222998 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.545373917 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.545387030 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.545510054 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.545530081 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.554624081 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.554646969 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.554708004 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.554799080 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.554799080 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.555612087 CEST	49716	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:04.555630922 CEST	443	49716	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:04.747617960 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.747643948 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.747716904 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.747735977 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.747770071 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.748718977 CEST	49712	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.748737097 CEST	443	49712	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.751789093 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.751842976 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:04.751915932 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.752145052 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:04.752161026 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.210316896 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.210445881 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.210608006 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.210634947 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.210709095 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.210724115 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.210994005 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.211222887 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.211285114 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.211349964 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.211503983 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.211586952 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.211658001 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.211694956 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.255420923 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.259409904 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.324604988 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.324634075 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.324654102 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.324753046 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.324764967 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.324815989 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.326435089 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.326461077 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.326476097 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.326549053 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.326577902 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.326632023 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.359127998 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:05.405669928 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.405940056 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.405972958 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.406280994 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.406603098 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.406656027 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.406744957 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.407747984 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.407773018 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.407836914 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.407852888 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.407881975 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.407903910 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.409321070 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.409353018 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.409430981 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.409450054 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.409497023 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.413028955 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.413049936 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.413114071 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.413122892 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.413134098 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.413167000 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.415544987 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.415563107 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.415612936 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.415621996 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.415641069 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.415796995 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.451410055 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.495747089 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.495774031 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.495970011 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.495980024 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.496028900 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.496718884 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.496740103 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.496787071 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.496793985 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.496846914 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.497103930 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.497165918 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.497186899 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.497256041 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.497278929 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.497325897 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.498466969 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.498503923 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.498542070 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.498549938 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.498572111 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.498595953 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.498717070 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.498733044 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.498837948 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.498845100 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.498909950 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.498944998 CEST	49720	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.498959064 CEST	443	49720	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.500447989 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.500472069 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.500560999 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.500572920 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.500618935 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.504734993 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.504755974 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.504817009 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.504828930 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.504878998 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.518431902 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.518457890 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.518475056 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.518526077 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.518541098 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.518589973 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.586179972 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.586210966 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.586299896 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.586322069 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.586349964 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.586369991 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.587059021 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.587079048 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.587126017 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.587132931 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.587157965 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.587173939 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.588057995 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588083029 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588119984 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.588125944 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588152885 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.588169098 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.588798046 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588820934 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588881016 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.588887930 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.588946104 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.589747906 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.589771032 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.589822054 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.589828968 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.589870930 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.590657949 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.590682030 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.590742111 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.590749025 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.590786934 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.593507051 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.593535900 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.593595028 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.593605995 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.593652964 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.599978924 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.600006104 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.600106001 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.600116014 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.600163937 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.605648994 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.605668068 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.605731010 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.605739117 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.605787039 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.674827099 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.674839973 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.674906015 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.674931049 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.674979925 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.674999952 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.675483942 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.675504923 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.675576925 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.675585032 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.675621986 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.675977945 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.675997019 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.676049948 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.676057100 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.676099062 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.676973104 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.676990032 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.677056074 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.677062988 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.677114964 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.680063963 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680079937 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680151939 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.680160046 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680408955 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.680609941 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680625916 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680700064 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.680707932 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.680761099 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.681242943 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.681258917 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.681314945 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.681323051 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.681379080 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.682701111 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.682718039 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.682759047 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.682765007 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.682796955 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.682817936 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.686631918 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.686654091 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.686716080 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.686743021 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.686796904 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.688096046 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.688110113 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.688185930 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.688193083 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.688239098 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.689774036 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.689789057 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.689860106 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.689866066 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.689913988 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.693156958 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.693171024 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.693264008 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.693272114 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.693316936 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.774753094 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.774781942 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.775002956 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.775017023 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.775145054 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.775484085 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.775511980 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.775553942 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.775559902 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.775588989 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.775594950 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776206017 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776226997 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776268005 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776268005 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776284933 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776309967 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776309967 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776364088 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776416063 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776468039 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776483059 CEST	443	49719	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776490927 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776540995 CEST	49719	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776690006 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776705027 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776770115 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.776802063 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.776849985 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.777324915 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.777338028 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.777400017 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.777409077 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.777455091 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.778254986 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.778269053 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.778348923 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.778357029 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.778394938 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.779052019 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.779067039 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.779124022 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.779131889 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.779165030 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.779165030 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.779390097 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.779417992 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.779481888 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.779680967 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:05.779695034 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:05.779980898 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.779993057 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.780071974 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.780080080 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.780121088 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.780775070 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.780788898 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.780862093 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.780869007 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.780905008 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.784697056 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.784712076 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.784785986 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.784792900 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.784841061 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.826031923 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.826047897 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.826128960 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.826138973 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.826183081 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.864115953 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864135981 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864259005 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.864267111 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864320040 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.864682913 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864696026 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864765882 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.864772081 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.864816904 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.865670919 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.865685940 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.865753889 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.865761995 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.865813971 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.866296053 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.866314888 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.866359949 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.866367102 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.866396904 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.866415977 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.868670940 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.868685961 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.868756056 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.868763924 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.868812084 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.869240046 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.869257927 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.869313002 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.869319916 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.869364023 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.871380091 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.871400118 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.871469021 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.871474981 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.871531010 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.914428949 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.914447069 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.914556026 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.914562941 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.914613962 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.951821089 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.951836109 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952065945 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.952073097 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952198982 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.952444077 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952457905 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952517033 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.952523947 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952573061 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.952924967 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952936888 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.952997923 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.953003883 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.953049898 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.953413010 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.953425884 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.953502893 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.953510046 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.953557014 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.954195976 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954210043 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954281092 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.954288006 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954329967 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.954675913 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954689026 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954746962 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.954754114 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.954796076 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.959059954 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.959074020 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.959167004 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:05.959173918 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:05.959222078 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.001970053 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.001983881 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.002110004 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.002118111 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.002207994 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.039525986 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.039542913 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.039628029 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.039638996 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.039690018 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.039913893 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.039928913 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.039983034 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.039989948 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.040045977 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.040728092 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.040745020 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.040818930 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.040826082 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.040868998 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.041570902 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.041587114 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.041661024 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.041667938 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.041714907 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.042515993 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042536020 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042593956 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.042601109 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042622089 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042643070 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042649984 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.042654991 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.042696953 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.042731047 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.046684027 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.046700001 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.046757936 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.046765089 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.046797991 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.046813011 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.089520931 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.089534998 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.089612961 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.089626074 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.089679956 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.126883984 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.126899004 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.127137899 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.127151012 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.127223015 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.127463102 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.127476931 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.127552986 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.127566099 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.127621889 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.128119946 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.128132105 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.128194094 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.128206968 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.128232002 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.128254890 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.128984928 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.128998041 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.129060030 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.129071951 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.129100084 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.129120111 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.129856110 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.129868984 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.129936934 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.129951000 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.130002975 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.130423069 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.130438089 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.130491972 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.130503893 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.130532026 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.130549908 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.134032965 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.134047031 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.134119987 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.134134054 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.134183884 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.134183884 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.188805103 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.188821077 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.188911915 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.188925982 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.188997984 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.214353085 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.214370966 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.214508057 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.214514971 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.214557886 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.214963913 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.214979887 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.215049982 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.215055943 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.215096951 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.215555906 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.215569973 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.215634108 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.215641022 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.215687037 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.216319084 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.216341972 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.216414928 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.216423035 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.216464996 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.217199087 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217214108 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217283010 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.217289925 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217335939 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.217844009 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217856884 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217911959 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.217919111 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.217967033 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.221539974 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.221553087 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.221616030 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.221622944 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.221669912 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.264415979 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.264429092 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.264520884 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.264529943 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.264580011 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.302090883 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.302104950 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.302192926 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.302201033 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.302258015 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.302896976 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.302915096 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.302983046 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.302989006 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.303033113 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.303574085 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.303592920 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.303653955 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.303659916 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.303714037 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.304510117 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.304524899 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.304615974 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.304624081 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.304667950 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.305212975 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.305227041 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.305293083 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.305299997 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.305341005 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.306056023 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.306071043 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.306130886 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.306138039 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.306178093 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.309020042 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.309034109 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.309088945 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.309096098 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.309134960 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.351869106 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.351885080 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.352010965 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.352018118 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.352067947 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.389369011 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.389411926 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.389435053 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.389445066 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.389455080 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.389496088 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.389512062 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.389626026 CEST	49721	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.389637947 CEST	443	49721	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.392985106 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.393014908 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.393079042 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.393366098 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.393382072 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.435034990 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.435122967 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.435221910 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.435445070 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.435482025 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.456223965 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.456255913 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.456381083 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.456554890 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.456579924 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.458148003 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.458342075 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.458353996 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.458714962 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.459002972 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.459064960 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.459112883 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.464395046 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.464421988 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.464502096 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.464799881 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.464826107 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.464833021 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.464844942 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.464891911 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.465210915 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.465225935 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.484011889 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484033108 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.484112024 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484340906 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484352112 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.484405041 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484519958 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484534025 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.484658957 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.484668970 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.484997988 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:06.499397993 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.501003981 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.574537992 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574564934 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574572086 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574584961 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574634075 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.574632883 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574687004 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.574702024 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.574702024 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.574731112 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.661371946 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.661392927 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.661501884 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.661511898 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.661551952 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.666999102 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.667020082 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.667120934 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.667129040 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.667165995 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.749171019 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.749186993 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.749281883 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.749289989 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.749336958 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.750551939 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.750567913 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.750628948 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.750638008 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.750684023 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.751683950 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.751701117 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.751758099 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.751765966 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.751811028 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.756350040 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.756366014 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.756445885 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.756454945 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.756500959 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.840477943 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.840497017 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.840574026 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.840584993 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.840631008 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.841192961 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.841211081 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.841264963 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.841272116 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.841315031 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.841981888 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.841999054 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.842067957 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.842076063 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.842118025 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.842930079 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.842943907 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.842991114 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.842999935 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.843034983 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.843045950 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.843852043 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.843871117 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.843924999 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.843933105 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.843972921 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.844608068 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.844624043 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.844687939 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.844696045 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.844744921 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.847480059 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.847496033 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.847568989 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.847578049 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.847620010 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.930870056 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.930891991 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.931000948 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.931009054 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.931055069 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.931476116 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.931494951 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.931548119 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.931555986 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.931593895 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.932192087 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932209015 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932260990 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.932271004 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932312965 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.932820082 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932836056 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932888031 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.932897091 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.932951927 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.933525085 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.933542013 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.933594942 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.933604956 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.933648109 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.936058998 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936075926 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936145067 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.936152935 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936188936 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.936697960 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936719894 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936765909 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.936774969 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.936819077 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.938525915 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.938544035 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.938596010 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.938604116 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:06.938647985 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:06.944220066 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.944452047 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.944469929 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.945386887 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.945458889 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.945744038 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.945806980 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.945911884 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:06.945923090 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:06.993999004 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.022150040 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022173882 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022275925 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.022285938 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022329092 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.022787094 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022803068 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022859097 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.022866964 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.022908926 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023318052 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023334980 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023376942 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023381948 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023399115 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023406982 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023444891 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023478031 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023524046 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023636103 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.023648977 CEST	443	49722	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.023690939 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.024877071 CEST	49722	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.051316023 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.051572084 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.051584005 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.051882982 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.052196980 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.052253008 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.052339077 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.083224058 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.099400997 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.109342098 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.114716053 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.114761114 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.114907980 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.114923000 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.115242004 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.115242958 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.115731955 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.115797043 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.116044044 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.116131067 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.116240025 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.116355896 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.118448973 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.118654013 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.118678093 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.119560003 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.119616032 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.119935036 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.119987965 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.120059013 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.120068073 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.132915020 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.133857965 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.133877039 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.134934902 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.134994030 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.136053085 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.136120081 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.137820959 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.137830019 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.159410000 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.160780907 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.161350965 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.161360025 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.162384033 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.162450075 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.163259029 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.163320065 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.163404942 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.164751053 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.164760113 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.165266991 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.165285110 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.165298939 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.165344000 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.165359020 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.165379047 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.165402889 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.169977903 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.186664104 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.190035105 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190053940 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190059900 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190071106 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190099001 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190124989 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.190136909 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.190160036 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.190172911 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.191329002 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.191344976 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.191402912 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.191411018 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.191450119 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.217987061 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.235944986 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.235970974 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.236033916 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.236068964 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.236088991 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.236113071 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.236121893 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.236141920 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.236164093 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.237534046 CEST	49726	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.237560034 CEST	443	49726	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.238691092 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.238708019 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.238764048 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.238781929 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.238797903 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.238831997 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.238852978 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.240583897 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.240621090 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.240681887 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.241149902 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.241162062 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.248625040 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.248642921 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.248718977 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.248732090 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.248769999 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.253773928 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.253798962 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.253842115 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.253851891 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.253891945 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.272939920 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.272959948 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.273026943 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.273119926 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.273119926 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.273551941 CEST	49730	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.273571968 CEST	443	49730	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.276019096 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.276052952 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.276133060 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.276344061 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.276357889 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.280716896 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.280735970 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.280796051 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.280802965 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.280844927 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.281685114 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.281699896 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.281770945 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.281778097 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.281815052 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.283479929 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.283498049 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.283557892 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.283565998 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.283612967 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.308068037 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.308089972 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.308119059 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.308137894 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.308170080 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.308203936 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.308764935 CEST	49729	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.308783054 CEST	443	49729	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.310914993 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.310971022 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.311079979 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.311260939 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.311306000 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.319525003 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.319547892 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.319642067 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.319658041 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.319719076 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.320473909 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.320525885 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.320544958 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.320585012 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.320692062 CEST	49725	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.320708036 CEST	443	49725	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.335913897 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.335928917 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.336007118 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.336016893 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.336061001 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.337764978 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.337779999 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.337836027 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.337843895 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.337888002 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.339059114 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.339072943 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.339133978 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.339140892 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.339186907 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.342329979 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.342344999 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.342418909 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.342427969 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.342474937 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.355568886 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.355618954 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.355674982 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.356118917 CEST	49728	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.356141090 CEST	443	49728	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.358306885 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.358336926 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.358424902 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.358669996 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.358692884 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.371493101 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.371510029 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.371598959 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.371611118 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.371650934 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.372423887 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.372437954 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.372502089 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.372509956 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.372561932 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.373482943 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.373498917 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.373543978 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.373549938 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.373578072 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.373598099 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.374022961 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.374082088 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.374087095 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.374130964 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.374217987 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.374233961 CEST	443	49727	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.374243021 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.374284029 CEST	49727	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.389148951 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.389173985 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.389252901 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.389447927 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:07.389461040 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:07.424247026 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.424263000 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.424349070 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.424364090 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.424407959 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.424952984 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.424971104 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.425033092 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.425039053 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.425081015 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.425707102 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.425721884 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.425791025 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.425798893 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.425837994 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.426512957 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.426527023 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.426589966 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.426598072 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.426645041 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.427299023 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.427313089 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.427369118 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.427376032 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.427422047 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.429384947 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.429400921 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.429450035 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.429457903 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.429497957 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.430715084 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.430728912 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.430778980 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.430785894 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.430831909 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.431363106 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.431375980 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.431428909 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.431437016 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.431473970 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.512780905 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.512795925 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.512866974 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.512880087 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.512916088 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.513847113 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.513861895 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.513909101 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.513916969 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.513931036 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.513967991 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.514484882 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.514503956 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.514579058 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.514585972 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.514637947 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.514944077 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.514964104 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.515002966 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.515008926 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.515033960 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.515045881 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.515779018 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.515794039 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.515830040 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.515841961 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.515852928 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.515878916 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.516746044 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.516765118 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.516817093 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.516823053 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.516859055 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.519277096 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.519309044 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.519344091 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.519350052 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.519367933 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.519391060 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.600945950 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.600965023 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.601032019 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.601042986 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.601090908 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.601435900 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.601450920 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.601492882 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.601500034 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.601530075 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.601550102 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.602274895 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.602289915 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.602341890 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.602350950 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.602400064 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.603111982 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.603126049 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.603171110 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.603177071 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.603215933 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.603938103 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.603956938 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.603998899 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.604006052 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.604053974 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.604641914 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.604659081 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.604754925 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.604774952 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.604820013 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.605346918 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.605369091 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.605406046 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.605412960 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.605436087 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.605457067 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.608340025 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.608355045 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.608407974 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.608414888 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.608453035 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.689423084 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.689438105 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.689552069 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.689568043 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.689604998 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.690064907 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690078020 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690138102 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.690148115 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690181017 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.690675974 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690690994 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690743923 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.690751076 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.690790892 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.691462994 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.691494942 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.691514969 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.691523075 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.691545010 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.691559076 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.692291021 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.692306042 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.692354918 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.692359924 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.692397118 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.693202972 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693218946 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693269014 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.693275928 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693285942 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693319082 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693331003 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.693341017 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.693375111 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.696902990 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.696916103 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.696993113 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.697004080 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.697046995 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.777920961 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.777936935 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.778014898 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.778027058 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.778064013 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.778656960 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.778671980 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.778732061 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.778739929 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.778769016 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.779170990 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.779186010 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.779232979 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.779241085 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.779273987 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.780112982 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780129910 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780175924 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.780183077 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780215025 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.780858994 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780874014 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780922890 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.780929089 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.780961037 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.781645060 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.781657934 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.781706095 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.781712055 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.781750917 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.782365084 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.782380104 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.782428980 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.782437086 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.782475948 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.785916090 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.785931110 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.785986900 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.785994053 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.786029100 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.866462946 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.866478920 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.866548061 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.866559029 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.866591930 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.867192984 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867207050 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867257118 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.867264986 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867302895 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.867827892 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867841959 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867892027 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.867898941 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.867944956 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.868218899 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.868233919 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.868289948 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.868298054 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.868333101 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.869482040 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.869502068 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.869549990 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.869561911 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.869625092 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.870091915 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870105982 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870143890 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.870151043 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870160103 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870177031 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.870179892 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870209932 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.870219946 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.870234966 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.870256901 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.874397993 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.874413013 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.874479055 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.874486923 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.874524117 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.917470932 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.919816971 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.919826984 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.920248985 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.920597076 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.920665979 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.920733929 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.925065994 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.925301075 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.925327063 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.925821066 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.926146984 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.926229954 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.926265955 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.955909967 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.955928087 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.956007004 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.956027031 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.956058979 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.956599951 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.956619978 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.956660986 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.956670046 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.956707001 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.956726074 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.957353115 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957369089 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957423925 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.957432032 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957469940 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.957859039 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957874060 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957921982 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.957930088 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.957982063 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.958808899 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.958822966 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.958872080 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.958878994 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.958899975 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.958915949 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.959409952 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.959424973 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.959479094 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.959487915 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.959521055 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.960269928 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.960284948 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.960335970 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.960344076 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.960376978 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.963407040 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.966972113 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.966980934 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.967494011 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.967792988 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.967856884 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.968923092 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.968997002 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.969284058 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.969367027 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.969429970 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.970907927 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.970925093 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.970980883 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:07.970989943 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:07.971020937 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.011442900 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.015011072 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.015037060 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.029804945 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.030085087 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.030101061 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.030989885 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.031056881 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.031851053 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.031903028 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.032110929 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.032124043 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.040605068 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.040627956 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.040683031 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.040716887 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.040751934 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.041443110 CEST	49732	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.041466951 CEST	443	49732	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.044585943 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.044603109 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.044676065 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.044686079 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.044737101 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.044989109 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.045032024 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.045042992 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.045047998 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.045057058 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.045083046 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.045109034 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.045227051 CEST	49724	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.045233011 CEST	443	49724	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050690889 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050720930 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050750017 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050781965 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.050791979 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050829887 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.050851107 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.050856113 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050865889 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.050904989 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.051793098 CEST	49731	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.051805973 CEST	443	49731	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.062971115 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.076965094 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.101116896 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.101361990 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:08.101380110 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.101713896 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.102015972 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:08.102070093 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.102164030 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:08.134735107 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.134759903 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.134773016 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.134831905 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.134839058 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.134896994 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.135468006 CEST	49733	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.135490894 CEST	443	49733	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.135685921 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.135751963 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.135788918 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.136627913 CEST	49734	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.136636019 CEST	443	49734	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.143414974 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.147214890 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.147265911 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.147352934 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.148890972 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.148907900 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.161633968 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.161684990 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:08.161762953 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.162863016 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.162875891 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:08.217792034 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.217854023 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.217906952 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:08.218492985 CEST	49735	443	192.168.2.16	170.10.132.88
Oct 1, 2024 20:04:08.218514919 CEST	443	49735	170.10.132.88	192.168.2.16
Oct 1, 2024 20:04:08.221082926 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.221124887 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.221200943 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.221434116 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.221447945 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.816986084 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.817069054 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.819519043 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.819533110 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.819740057 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.860172987 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:08.868556976 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.868805885 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.868829012 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.869141102 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.869432926 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.869489908 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.869609118 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.907398939 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:08.911420107 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.939481974 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:08.939579964 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.942143917 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.942161083 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:08.942460060 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:08.974452019 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.974499941 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.974550009 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.975306034 CEST	49741	443	192.168.2.16	170.10.132.89
Oct 1, 2024 20:04:08.975322008 CEST	443	49741	170.10.132.89	192.168.2.16
Oct 1, 2024 20:04:08.986002922 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:08.996314049 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.039407015 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.094361067 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.094403028 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.094474077 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.094552994 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.094552994 CEST	49737	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.094595909 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.094624043 CEST	443	49737	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.133677959 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.133708954 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.133775949 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.134025097 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.134036064 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.264611006 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264642000 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264648914 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264663935 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264686108 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264720917 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.264782906 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.264818907 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.264841080 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.273998022 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.274065971 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.274074078 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.274146080 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.275497913 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.275535107 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.275559902 CEST	49738	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:09.275576115 CEST	443	49738	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:09.782890081 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.782979012 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.784255028 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.784261942 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.784460068 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:09.785449982 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:09.831401110 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:10.096098900 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:10.096142054 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:10.096195936 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:10.096887112 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:10.096900940 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:10.096910000 CEST	49742	443	192.168.2.16	184.28.90.27
Oct 1, 2024 20:04:10.096915007 CEST	443	49742	184.28.90.27	192.168.2.16
Oct 1, 2024 20:04:10.113373995 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:10.416002035 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:11.024012089 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:11.295001030 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:12.238990068 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:13.611515045 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:13.611584902 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:13.611684084 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:14.391496897 CEST	49714	443	192.168.2.16	142.250.184.228
Oct 1, 2024 20:04:14.391524076 CEST	443	49714	142.250.184.228	192.168.2.16
Oct 1, 2024 20:04:14.582154989 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:14.646074057 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:14.886025906 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:15.494019985 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:16.270524979 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:16.275346994 CEST	53	49743	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.275432110 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:16.275485992 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:16.275496960 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:16.280399084 CEST	53	49743	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.280793905 CEST	53	49743	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.694020987 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:16.752156019 CEST	53	49743	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.752669096 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:16.758250952 CEST	53	49743	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.758302927 CEST	49743	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:19.109030962 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:19.460036039 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:20.898039103 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 20:04:23.914119959 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:29.072079897 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 20:04:33.528057098 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 20:04:45.569957972 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:45.570050955 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:45.570159912 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:45.570528030 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:45.570574999 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:45.610196114 CEST	49697	80	192.168.2.16	199.232.214.172
Oct 1, 2024 20:04:45.610268116 CEST	49698	80	192.168.2.16	199.232.214.172
Oct 1, 2024 20:04:45.615511894 CEST	80	49697	199.232.214.172	192.168.2.16
Oct 1, 2024 20:04:45.615582943 CEST	49697	80	192.168.2.16	199.232.214.172
Oct 1, 2024 20:04:45.616204023 CEST	80	49698	199.232.214.172	192.168.2.16
Oct 1, 2024 20:04:45.616264105 CEST	49698	80	192.168.2.16	199.232.214.172
Oct 1, 2024 20:04:47.363585949 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.363686085 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.364893913 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.364923954 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.365138054 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.366473913 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.411410093 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.761451960 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.761476994 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.761491060 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.761585951 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.761653900 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.761722088 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765310049 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.765352011 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.765388966 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765413046 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.765433073 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.765438080 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765491009 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765531063 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765567064 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:04:47.765594959 CEST	49745	443	192.168.2.16	20.114.59.183
Oct 1, 2024 20:04:47.765610933 CEST	443	49745	20.114.59.183	192.168.2.16
Oct 1, 2024 20:05:03.029783964 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:03.029820919 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.029895067 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:03.030210972 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:03.030224085 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.664494991 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.664809942 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:03.664834976 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.665240049 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.665541887 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:03.665613890 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:03.707180023 CEST	49747	443	192.168.2.16	142.250.186.100
Oct 1, 2024 20:05:13.573535919 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:13.573616982 CEST	443	49747	142.250.186.100	192.168.2.16
Oct 1, 2024 20:05:13.573682070 CEST	49747	443	192.168.2.16	142.250.186.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 20:03:58.132177114 CEST	53	57041	1.1.1.1	192.168.2.16
Oct 1, 2024 20:03:58.223577023 CEST	53	61735	1.1.1.1	192.168.2.16
Oct 1, 2024 20:03:59.083411932 CEST	63302	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:03:59.083646059 CEST	59145	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:03:59.090529919 CEST	53	63302	1.1.1.1	192.168.2.16
Oct 1, 2024 20:03:59.091037989 CEST	53	59145	1.1.1.1	192.168.2.16
Oct 1, 2024 20:03:59.221209049 CEST	53	64712	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:00.356396914 CEST	59414	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:00.356544018 CEST	54947	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:00.364233971 CEST	53	59414	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:00.378436089 CEST	53	54947	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:01.955535889 CEST	63892	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:01.955686092 CEST	60179	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:01.994750023 CEST	53	60179	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:01.998322964 CEST	53	63892	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:02.969162941 CEST	52749	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:02.969407082 CEST	50850	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:02.976208925 CEST	53	52749	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:02.976567984 CEST	53	50850	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:03.751806021 CEST	60441	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:03.752129078 CEST	54133	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:04:03.782373905 CEST	53	54133	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:03.782713890 CEST	53	60441	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.270045042 CEST	53	53246	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:16.272846937 CEST	53	60806	1.1.1.1	192.168.2.16
Oct 1, 2024 20:04:58.123248100 CEST	53	50416	1.1.1.1	192.168.2.16
Oct 1, 2024 20:05:03.021135092 CEST	51971	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:05:03.021300077 CEST	50840	53	192.168.2.16	1.1.1.1
Oct 1, 2024 20:05:03.028178930 CEST	53	51971	1.1.1.1	192.168.2.16
Oct 1, 2024 20:05:03.028955936 CEST	53	50840	1.1.1.1	192.168.2.16
Oct 1, 2024 20:05:06.276942015 CEST	138	138	192.168.2.16	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 1, 2024 20:04:00.378499985 CEST	192.168.2.16	1.1.1.1	c236	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 20:03:59.083411932 CEST	192.168.2.16	1.1.1.1	0x95eb	Standard query (0)	www.google.co.il	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:03:59.083646059 CEST	192.168.2.16	1.1.1.1	0x4c1a	Standard query (0)	www.google.co.il	65	IN (0x0001)	false
Oct 1, 2024 20:04:00.356396914 CEST	192.168.2.16	1.1.1.1	0x9136	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.356544018 CEST	192.168.2.16	1.1.1.1	0x2073	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Oct 1, 2024 20:04:01.955535889 CEST	192.168.2.16	1.1.1.1	0xcce4	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.955686092 CEST	192.168.2.16	1.1.1.1	0xea49	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false
Oct 1, 2024 20:04:02.969162941 CEST	192.168.2.16	1.1.1.1	0x9b30	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:02.969407082 CEST	192.168.2.16	1.1.1.1	0x869e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:04:03.751806021 CEST	192.168.2.16	1.1.1.1	0x151	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.752129078 CEST	192.168.2.16	1.1.1.1	0xa0da	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false
Oct 1, 2024 20:05:03.021135092 CEST	192.168.2.16	1.1.1.1	0x61f1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:05:03.021300077 CEST	192.168.2.16	1.1.1.1	0x4d89	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 20:03:59.090529919 CEST	1.1.1.1	192.168.2.16	0x95eb	No error (0)	www.google.co.il	142.250.181.227	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	205.139.111.117	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	205.139.111.113	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	205.139.111.12	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	207.211.31.106	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	207.211.31.64	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:00.364233971 CEST	1.1.1.1	192.168.2.16	0x9136	No error (0)	url.us.m.mimecastprotect.com	207.211.31.113	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.132.88	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.128.87	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.128.88	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.128.89	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.132.89	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:01.998322964 CEST	1.1.1.1	192.168.2.16	0xcce4	No error (0)	security-us.m.mimecastprotect.com	170.10.132.87	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:02.976208925 CEST	1.1.1.1	192.168.2.16	0x9b30	No error (0)	www.google.com	142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:02.976567984 CEST	1.1.1.1	192.168.2.16	0x869e	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.132.89	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.128.87	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.128.89	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.132.88	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.132.87	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:04:03.782713890 CEST	1.1.1.1	192.168.2.16	0x151	No error (0)	security-us.m.mimecastprotect.com	170.10.128.88	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:05:03.028178930 CEST	1.1.1.1	192.168.2.16	0x61f1	No error (0)	www.google.com	142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:05:03.028955936 CEST	1.1.1.1	192.168.2.16	0x4d89	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.co.il

url.us.m.mimecastprotect.com

security-us.m.mimecastprotect.com

https:

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49706	142.250.181.227	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:03:59 UTC	1053	OUT	GET /url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk HTTP/1.1 Host: www.google.co.il Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:00 UTC	1065	IN	HTTP/1.1 302 Found Location: https://www.google.co.il/amp/s/url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-eszuuBW226ikHtraCNHLHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Tue, 01 Oct 2024 18:03:59 GMT Server: gws Content-Length: 305 X-XSS-Protection: 0 Set-Cookie: NID=518=OxeKUIC_FU1plg7rlyXKVHNVYjJ5p1n_TNTpoBH4HOU7ZlmFL090-11oAxs-qyOI5kkGWENRJnn42FrHPBCbTIb6V-u-A99lf_YNCwAHdCKtvtG19sPXxIT4i24PsaOhsi0VxXgqQRTYki5znQJXnYH8pNAXgFf9bfkEAGCvatZ-tSBDvukOMc2CCLibYiso; expires=Wed, 02-Apr-2025 18:03:59 GMT; path=/; domain=.google.co.il; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:04:00 UTC	305	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 2e 69 6c 2f 61 6d 70 2f 73 2f 75 72 6c 2e 75 73 2e 6d 2e 6d 69 6d 65 63 61 73 74 70 72 6f 74 65 63 74 2e 63 6f 6d 2f 73 2f 34 6c 75 63 43 38 32 4e 76 77 46 4d 6a 70 47 4f 68 6e 66 45 43 79 6a 47 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.co.il/amp/s/url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	142.250.181.227	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:00 UTC	1109	OUT	GET /amp/s/url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk HTTP/1.1 Host: www.google.co.il Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=OxeKUIC_FU1plg7rlyXKVHNVYjJ5p1n_TNTpoBH4HOU7ZlmFL090-11oAxs-qyOI5kkGWENRJnn42FrHPBCbTIb6V-u-A99lf_YNCwAHdCKtvtG19sPXxIT4i24PsaOhsi0VxXgqQRTYki5znQJXnYH8pNAXgFf9bfkEAGCvatZ-tSBDvukOMc2CCLibYiso
2024-10-01 18:04:00 UTC	879	IN	HTTP/1.1 302 Found Location: https://url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-op_wGLqCoOk0xZx4p6ef1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Tue, 01 Oct 2024 18:04:00 GMT Server: gws Content-Length: 262 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:04:00 UTC	262	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 2e 75 73 2e 6d 2e 6d 69 6d 65 63 61 73 74 70 72 6f 74 65 63 74 2e 63 6f 6d 2f 73 2f 34 6c 75 63 43 38 32 4e 76 77 46 4d 6a 70 47 4f 68 6e 66 45 43 79 6a 47 70 41 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA">here</A>.</BODY></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49708	205.139.111.117	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:00 UTC	699	OUT	GET /s/4lucC82NvwFMjpGOhnfECyjGpA HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:01 UTC	2392	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 01 Oct 2024 18:04:01 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/y_VEIIaQod2LPISf_LfYGGV4Tj3KQ5xk7-XThm1dYP5uCSU6RKTBEDwtlti4oDTqGO5w0qEePY1NlIlB2g7Vc52OZDWiCA5bklVQ_kMK0VusmKo6sp-QHRFT_hNVxgYWl1_TpGJJ3u5QggUtdNWfh3xkiTrkK4PYGfIfJWsC-5UFMJe7Il8dzRCjnSm9aI1ATtnRoePcGZdcVQ4B0o1hM2eCNuXaP6xAM0HeBX4sm_T3UB6CZwxch8HU-tSReX6jz5jhJuwxKt4VTSg2VQn6lZmDP3I8Hnv7tG-kXehCFFN-XI0egLESJ6mO5NeH9qqgAfdw5DxEDsEM94cnj7CS296Vny4I3pLiiOFYhvK8BMUnN1TwrbZ-u2FfjWda7WNOAnQ-DqyET_2UrQ2KdjlUhcBNiZBXpivf13uIYtxNzGU_aLpSqp52RH3LtOOJ-mNLjZxXBuEXnVlMW1l0I0cOWhIVLHzKYu1shRBJQ8XLXjbr87ihhYtS70dbcbNQ2B4BIqRlwNmDLAempJacxVys-emiYS3Sqt-IS38FF-GkkCKjN97RCW1kukvUgKZE2kjb1OJEkEVfMU-DSKmX3WByfee3EuiHECRjQKInsmhL08rnOqs-hlO10vM5Q5CHCDiq8MZS9DbxXYPtVlv4gaDO_XcRqned0qqyP5f8S71nQq8TDXDb5JqwRsaYjzJw4My4IzC_3pmGYZo9j00550I8OgqrziClVv0tdTn9sKjNZrPRc1ejWtaSHUP3vCc9eU4789Bo19yYS_GrGPn00q8B1EVR-VdkmJVb4oY7t-yVVJGSpcw1su3Mzx6hMnufMqBmjNArzDAKt3K1nXNu6gn58GCBSJBV7IHGD4fmGoQtyR9-XplqiSPBvQ7SP4YJ5Jn88MKqJJ-DOcifMg6Gdj5kDpWBI3lW37J_CPsJtVgIJGdX7iswEvPrKoGeu95YF_GUjQIBGnTXFQiJt7o [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49710	205.139.111.117	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:01 UTC	2828	OUT	GET /r/y_VEIIaQod2LPISf_LfYGGV4Tj3KQ5xk7-XThm1dYP5uCSU6RKTBEDwtlti4oDTqGO5w0qEePY1NlIlB2g7Vc52OZDWiCA5bklVQ_kMK0VusmKo6sp-QHRFT_hNVxgYWl1_TpGJJ3u5QggUtdNWfh3xkiTrkK4PYGfIfJWsC-5UFMJe7Il8dzRCjnSm9aI1ATtnRoePcGZdcVQ4B0o1hM2eCNuXaP6xAM0HeBX4sm_T3UB6CZwxch8HU-tSReX6jz5jhJuwxKt4VTSg2VQn6lZmDP3I8Hnv7tG-kXehCFFN-XI0egLESJ6mO5NeH9qqgAfdw5DxEDsEM94cnj7CS296Vny4I3pLiiOFYhvK8BMUnN1TwrbZ-u2FfjWda7WNOAnQ-DqyET_2UrQ2KdjlUhcBNiZBXpivf13uIYtxNzGU_aLpSqp52RH3LtOOJ-mNLjZxXBuEXnVlMW1l0I0cOWhIVLHzKYu1shRBJQ8XLXjbr87ihhYtS70dbcbNQ2B4BIqRlwNmDLAempJacxVys-emiYS3Sqt-IS38FF-GkkCKjN97RCW1kukvUgKZE2kjb1OJEkEVfMU-DSKmX3WByfee3EuiHECRjQKInsmhL08rnOqs-hlO10vM5Q5CHCDiq8MZS9DbxXYPtVlv4gaDO_XcRqned0qqyP5f8S71nQq8TDXDb5JqwRsaYjzJw4My4IzC_3pmGYZo9j00550I8OgqrziClVv0tdTn9sKjNZrPRc1ejWtaSHUP3vCc9eU4789Bo19yYS_GrGPn00q8B1EVR-VdkmJVb4oY7t-yVVJGSpcw1su3Mzx6hMnufMqBmjNArzDAKt3K1nXNu6gn58GCBSJBV7IHGD4fmGoQtyR9-XplqiSPBvQ7SP4YJ5Jn88MKqJJ-DOcifMg6Gdj5kDpWBI3lW37J_CPsJtVgIJGdX7iswEvPrKoGeu95YF_GUjQIBGnTXFQiJt7oT1mHFAvijJr3nRVn7-g5SV_j6uBJCmEKJUG4MInSE5 [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:01 UTC	680	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 01 Oct 2024 18:04:01 GMT Content-Length: 0 Connection: close Location: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA#/block?key=sQWSJDm0QP9zhFiiFttlhCGLnKk_45zZEE_qZO5dW3LxxjgqWgNlOD9HyVUNCedqLr4LnPoVC1m_XEO3KI3lDH4CSeWt8znEw064cNqjZ8AavSHAfLV0Sz5NRiGSTOpV Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49711	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:02 UTC	903	OUT	GET /ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:02 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5896 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"1708-Qb/Kz/dZEdUPn7dZtjUEXpgQ6xI" Vary: Accept-Encoding
2024-10-01 18:04:02 UTC	5896	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49712	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:03 UTC	819	OUT	GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/style.css?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:04 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:04 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 4423 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Tue, 11 Jun 2024 12:49:46 GMT ETag: W/"1147-1900758ec3e" Vary: Accept-Encoding
2024-10-01 18:04:04 UTC	4423	IN	Data Raw: 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 39 37 36 64 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 39 37 36 64 32 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 34 35 63 61 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 62 33 36 36 30 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 34 35 63 61 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 35 37 39 62 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e Data Ascii: .btn-primary{background-color:#1976d2;border-color:#1976d2}.btn-primary:focus,.btn-primary.focus{background-color:#145ca4;border-color:#0b3660}.btn-primary:hover{background-color:#145ca4;border-color:#12579b}.btn-primary:active,.btn-primary.active,.open>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:03 UTC	545	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:03 UTC	533	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:03 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49715	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:04 UTC	547	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:04 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:04 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-10-01 18:04:04 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-10-01 18:04:04 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-10-01 18:04:04 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-10-01 18:04:04 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-10-01 18:04:04 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49716	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:04 UTC	404	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:04 UTC	533	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:04 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49719	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:05 UTC	544	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:05 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:05 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49720	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:05 UTC	406	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:05 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:05 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-10-01 18:04:05 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49721	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:05 UTC	542	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:05 UTC	538	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:05 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-10-01 18:04:05 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49722	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:06 UTC	403	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:06 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:06 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-10-01 18:04:06 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:06 UTC	879	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-us.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: font/woff2 Content-Length: 137104 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"21790-18d89b1f630"
2024-10-01 18:04:07 UTC	15897	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 0f cc 4f 6c d2 1a 86 c3 e9 8b 88 99 f3 d5 a1 91 67 4c b2 13 7d 63 a8 9b fe c9 ae f3 d5 a9 a7 a7 09 39 b1 36 9f 9e a3 1f a0 90 ed 3a 9a 44 0d 5c 8d 8d 7b 81 1e 8a ae 3d 1b e9 ef 78 68 a7 d2 d5 cc 4b 22 83 b2 53 fb 67 03 b5 43 80 31 6b 6e ea 0b 64 9e 5d 91 43 ab 53 e6 59 13 e2 65 23 13 4e a3 13 df ad 58 23 54 ad 67 ae 58 f6 17 b3 09 75 e2 b6 66 07 58 34 68 96 e2 6f eb 86 2c 9f 25 ed e0 16 6b 9d 16 2e 94 d8 e0 3e 0a 07 e2 b6 59 1c bb 22 ec 90 46 04 ba b2 e9 b8 07 e6 13 6c a8 8e 18 57 fb cf 2d 26 80 6a f1 0b c9 b4 76 9e b1 48 c1 b1 36 31 27 0c 29 55 f7 b1 37 65 8d 37 ab d5 cd 2c ca 86 65 bf cf 8e 2b 4f 7c 6a e2 d3 8c 1b 3d 66 6c 63 4c 3b 5d dd 62 40 41 37 42 38 4f e5 fb b1 65 53 54 1c e7 3e f9 08 40 0c fb 47 77 8c 0f da 6a 5b 2f cf 18 be e8 53 2d ac a8 ae 00 Data Ascii: OlgL}c96:D\{=xhK"SgC1knd]CSYe#NX#TgXufX4ho,%k.>Y"FlW-&jvH61')U7e7,e+O\|j=flcL;]b@A7B8OeST>@Gwj[/S-
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: b6 a3 dc 1f d7 6d 94 a2 70 41 3f 30 2b e9 4d 9c 50 fe 51 07 81 e2 46 1d 88 9a e1 20 91 d8 c3 84 a0 6f ff fa 8f d8 09 d6 ac da 1f b0 13 ac d8 d5 ef 7d 10 ac 9a e5 29 b1 96 ef 48 1f 0a 57 49 85 a1 54 60 01 b0 36 f5 e9 44 9f 11 ed f1 46 d9 0b 9a d1 0f 72 d8 42 eb 3e fa 6d b2 04 91 8a 6c 6d 92 ce cd 74 c0 6c b8 ba 93 46 15 45 1e 42 ca 91 be 7f 40 60 c3 89 82 3f a2 a1 04 7b ac 57 5f 34 f5 f9 08 4c 29 ff 61 12 8f 7c 76 78 b5 a8 5c 8d 64 a1 af 05 cd 2a 12 3e 6f 3a a0 09 ea 41 ab 5d a6 2c 37 8d b0 de 10 80 0d e2 a2 e5 30 4d 4e ee d7 d2 a8 cb dd d5 ab f1 66 1e 02 e1 ef 30 96 58 aa 1a fe 63 9e c5 03 c6 b7 7d cb e7 35 b8 92 84 fd 7d 65 21 6a 1c 2d 1b c1 d3 d1 73 56 1e 2c 9e 17 d6 14 ef 7f 0e 22 c4 bd ec f0 aa c8 83 3e 49 99 cc 25 7c 2c 49 8c fc 46 fe d1 3d 45 71 e4 Data Ascii: mpA?0+MPQF o})HWIT`6DFrB>mlmtlFEB@`?{W_4L)a\|vx\d*>o:A],70MNf0Xc}5}e!j-sV,">I%\|,IF=Eq
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: f7 a6 35 f3 4e af be ab 74 f9 38 66 2e 2b 08 49 48 2b e6 97 ae 58 68 87 8e 4f e3 42 6a c0 27 3e 24 94 ce 22 13 79 aa 3a 0e 61 58 29 5a 0c 8c 27 55 08 51 55 0f b5 92 a0 35 71 8c 71 d8 dd a3 76 fc 9b 25 e1 0c 5c ed 4a 50 04 d2 1a c8 c2 d2 16 74 39 ba da 75 d5 e2 f2 4c b6 50 ff e6 e8 14 99 6e c4 82 a4 52 2e 1e 64 97 eb 59 d1 08 b3 17 f6 88 c1 2e 19 b9 73 69 a4 27 77 c5 f3 ae eb 36 78 8c ac da 87 cb 33 d8 42 c5 c1 d8 9a 0b 95 7e 97 e4 d0 60 a1 6d b0 c9 79 9b d1 1b bc cb fb e1 00 3c d3 b3 c3 16 ba ba 10 ae 36 82 bb 3e 6b b0 65 ae d7 17 eb e6 60 3d d9 29 42 ad 68 bb 78 6a 1c 5f 9d 92 d1 a4 60 b1 f8 da 1e f6 b8 32 8b 48 55 64 89 77 3d 21 50 a4 22 8c d6 4b bc da 22 64 e5 da 9e 85 5c cc 0d 4a 32 33 0e af e9 cd 4c 0a 22 d7 9e 46 6f 20 9e ec 23 96 0f 85 a9 7c 4b 96 Data Ascii: 5Nt8f.+IH+XhOBj'>$"y:aX)Z'UQU5qqv%\JPt9uLPnR.dY.si'w6x3B~`my<6>ke`=)Bhxj_`2HUdw=!P"K"d\J23L"Fo #\|K
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 90 b7 1a 1b e1 08 5c ce 9e f7 d5 75 13 c1 24 81 e6 f5 1b 23 93 da 05 1c 7b ca 40 8c 57 57 c7 e0 35 42 9c ff af 7f 69 a3 8e 47 45 2f 7b e3 93 e2 ed 73 fa a2 86 1a 8f 48 31 13 ae 0d 76 b6 37 50 c6 6f 25 d0 73 ca a1 f8 f1 f2 1e d8 24 c7 2f d2 8c cc 5b f8 5c 23 81 6a 28 39 68 6e 8c 60 33 f8 5a 97 4b bf 58 bd d3 14 cd b1 4e c5 ce 04 45 27 3b 8e ff 06 14 f5 cf 9f df d8 18 28 be be 13 2f d1 e9 40 a1 55 4f 23 92 db fa 8b da 7e 5a ff 3d 10 1d b8 82 b5 fd 21 27 b9 ca 44 d2 b8 43 1d ec 30 1c 0f 62 06 49 39 4f c4 b5 45 da e6 e8 e2 98 3b e5 99 2e 43 f1 db 54 44 d1 c3 0f cb 61 4e f6 d4 60 54 8f 88 b6 ec d7 a5 a6 c8 51 f3 ef cb 03 7c 68 25 87 c0 50 82 99 92 89 9e ed 68 af 2b ba 8a b0 fc b0 14 ed ac b0 1f 97 95 9d b7 2d bd 13 46 60 c8 7b 8b 83 9e f9 12 fb cf 0d 9a ee 9c Data Ascii: \u$#{@WW5BiGE/{sH1v7Po%s$/[\#j(9hn`3ZKXNE';(/@UO#~Z=!'DC0bI9OE;.CTDaN`TQ\|h%Ph+-F`{
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: a1 35 53 99 88 9c 1a ca c1 40 cc f3 bf 63 39 53 a2 6e 0c 10 b4 c5 46 3f 6e ea 80 77 a4 72 5d 0b 8b eb 07 36 70 43 80 9c c2 fb fd bc 33 84 2b 42 91 53 f3 13 33 ab 48 ba aa 67 d7 0e 48 2f 6d fb bb b0 fe c1 fc b5 ed 92 c7 81 a7 cf aa 58 47 56 91 58 ea c4 79 1d 7b 13 81 7a 15 58 fb ae 24 f1 08 44 55 2b a1 ca 7c f6 4f ca 31 f7 50 ec d4 b0 4f e7 0e b2 72 5c 78 53 4a e4 a9 6e b6 70 76 bb 79 12 dd 98 27 2e db 12 cd a3 01 13 b3 dc e7 d2 ca 0d 75 ee 86 11 aa 7b 1d 75 b6 be 8e 53 b0 3b a9 7a 31 f1 1e be 07 f0 57 c3 6a 7a 75 9f b7 97 8c c9 32 b1 78 87 5d 67 9b f1 fe f1 cf 1e 5a 86 d7 4d 7a c1 9b 1a 5a d4 d4 92 8f 7d a2 82 27 05 d8 5e 32 2b f1 88 23 a4 ff 19 d5 7e 0e a0 9b 7c 5f c4 ba d5 70 c1 24 76 a0 91 6e dc db 52 cf bb 1a 9e b5 52 54 c2 11 5d 3e 88 43 7f 11 93 2a Data Ascii: 5S@c9SnF?nwr]6pC3+BS3HgH/mXGVXy{zX$DU+\|O1POr\xSJnpvy'.u{uS;z1Wjzu2x]gZMzZ}'^2+#~\|_p$vnRRT]>C*
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 52 67 87 e5 4d ba f3 da 59 cf a6 a6 6e 97 66 ca f7 51 80 90 a8 bf a4 19 d5 44 d8 32 61 d8 c6 e4 e3 61 62 b1 d7 b0 48 bc 72 d1 b9 de ce 30 91 18 24 be 93 62 b4 93 09 f6 1f 51 4d f3 6d a8 9f bc 84 6c e9 0a fe 8c 71 ef 74 4b c9 49 fc 62 bb c5 ed d2 bd a2 fb 8c 3c cb 3c fc 19 4f 89 2c 76 0e 7a 13 50 8f 01 9d 72 15 8c ab bc 2e d6 32 0a 87 2a fe 1e 0c 6a ae f7 80 fd a7 4f 86 f8 82 33 9f e2 17 74 7d fc c2 ea 10 da 75 1b 5c dd de 96 5d 0f e7 be fb 97 70 da b7 bc 1b ff 8e ee 9a fb 65 5c f8 58 02 a4 c7 16 4d cc ab fc 51 2e b9 22 51 3b c3 7c e3 72 ca ea 7a 22 a9 b0 29 c6 1a 50 4d ca f2 52 0c 4d b5 00 a7 86 45 5b e9 88 e4 19 9f a9 8e f1 fc bc 63 c3 9f 1e df 47 47 24 2f 4d 8e 50 6e ef f7 f6 e7 06 45 73 a3 fd fe 68 18 3d c7 c9 f5 4f c2 f1 49 fe 5c 7c 72 34 1b fe c5 80 Data Ascii: RgMYnfQD2aabHr0$bQMmlqtKIb<<O,vzPr.2*jO3t}u\]pe\XMQ."Q;\|rz")PMRME[cGG$/MPnEsh=OI\\|r4
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 6a a2 29 33 2b 25 81 17 2a 72 1f 4b 88 26 3a 33 95 0e 95 c8 52 ee 3a 12 0a 3e 89 30 a9 71 46 57 17 ad 23 d2 47 7e 60 f3 81 86 4d ac 50 d5 f2 90 ea eb df 41 be dc b1 7f 23 63 de 4d 96 d2 6c 90 2c 98 0f bb 44 a1 23 dd 10 e9 be 15 ae d2 d7 00 e7 b1 37 dd b0 42 aa ce c8 08 ef 10 bc d1 c8 da c8 52 c3 cb 19 af db aa ab 07 59 ae de ce dd 1b 95 ef 3d 3f 6a 5f b1 76 cc a5 8f f1 1d dc 8f 8f 75 42 d7 0f ee 5f e1 fc 30 7e 56 40 f5 12 c8 de 7e e7 95 8b 4b b9 4e 70 1f cc 80 e6 95 a0 72 54 d3 86 e6 cd 13 1e 43 70 71 58 1c da cb 35 ef 31 84 a1 b8 a6 d9 cb cf 61 ee 5e 2c 80 f3 0f cc 0c 71 f9 cf 02 c0 1e 2f 64 c6 c5 d7 e8 f3 eb 66 c7 a2 b1 cc 3c 45 ac d1 d7 83 c5 c1 3c c4 15 21 2d c8 c8 9e 19 14 34 53 e2 3f ee 02 98 1f 0c 4b b1 9d 6a 02 93 5a 74 5c 5b 65 e4 db 80 e6 01 c3 Data Ascii: j)3+%*rK&:3R:>0qFW#G~`MPA#cMl,D#7BRY=?j_vuB_0~V@~KNprTCpqX51a^,q/df<E<!-4S?KjZt\[e
2024-10-01 18:04:07 UTC	6519	IN	Data Raw: e4 c4 03 48 1e bf ea 31 f2 fe 38 48 f5 29 00 bd 8a e3 0d 8a d9 e1 40 97 92 dd 9c 15 0e b5 1b 6f 44 60 77 29 6e 51 16 34 b3 5e 38 d1 f3 ef 50 35 40 32 63 52 d1 27 62 e7 5d 1f e4 86 13 19 f3 d5 b7 b8 ae b0 da a1 8b d1 7c a3 66 17 a4 e4 e8 f0 50 2d 39 23 87 3b d5 08 3b 65 ff 1f 89 99 99 7b 22 11 6f a0 e6 a6 98 12 fe 9d 6e 8d 6a f1 0d 39 de 04 db 4e d0 38 5b ff 83 e8 be 4a 3d 8d e6 68 23 77 85 14 dd 05 06 ce 58 28 e9 35 86 9d b7 eb fe b8 25 8d 99 5b 3c 46 1f 69 30 82 4d 78 a0 33 08 54 5d b3 5b f2 45 04 82 16 91 6b 6f d0 9c a7 63 84 19 35 8b 35 5e 76 ab 50 37 7e 16 2a 6f c5 bf 6d 95 a9 c0 a5 d1 70 a4 a9 f8 72 68 84 8a fb 02 2a 73 aa 42 e4 4f 65 79 51 d8 52 a7 83 27 b5 2b fc 75 40 e0 3b 6e f1 07 c1 17 89 b7 4c 43 06 d5 b2 48 c0 84 92 12 84 f6 42 7e 89 7b 8b ca Data Ascii: H18H)@oD`w)nQ4^8P5@2cR'b]\|fP-9#;;e{"onj9N8[J=h#wX(5%[<Fi0Mx3T][Ekoc55^vP7~omprhsBOeyQR'+u@;nLCHB~{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49724	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	401	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	538	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:07 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49725	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	890	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-us.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	485	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: font/woff2 Content-Length: 37608 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"92e8-18d89b1f630"
2024-10-01 18:04:07 UTC	15899	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2024-10-01 18:04:07 UTC	16384	IN	Data Raw: 30 ff 97 55 a3 dd 4a 98 74 fc 1d 83 f0 9e ff fc 77 93 f0 07 4c c4 e3 ba a4 82 18 61 e5 f4 8a e3 d4 f8 ff 6c 4b 8a 92 a2 a0 cc e5 a8 30 d2 08 4c 00 9b 9b 95 da d4 30 64 74 f0 d2 a0 cb 76 ee 3e 11 83 e3 6a ad 5b 0e 85 17 bb 23 bb 40 81 27 f3 97 b7 2c 40 a1 3c f7 32 13 ed f0 02 da 35 87 bd 38 c0 0f 39 3d b4 aa 24 b4 ae c3 56 ec df 36 36 59 5a 77 c4 2d 65 d8 ee bb 1d 03 24 fc a3 73 36 eb 6e 1c 69 dd 7a 75 f5 de e1 6c e8 1a 8a 49 59 09 83 71 90 44 08 46 54 f8 ab 50 28 2f 84 22 a8 40 a4 ab 55 0a db b9 a7 a6 5c 31 13 8d dd fd 30 47 21 e4 f8 52 e2 28 c1 30 18 09 2e 22 18 30 ee 2e 68 13 08 6a 1e 38 77 a9 17 da 19 ad ec 02 1c e2 97 92 f5 ce 4d f6 55 ef 29 de 3d fe 05 7d 95 bf 17 80 30 ad 4b 65 a3 ad ef 83 31 6f 52 df 48 6f 58 d8 f1 bc 80 7e 75 3f 93 17 c7 c5 f1 71 Data Ascii: 0UJtwLalK0L0dtv>j[#@',@<2589=$V66YZw-e$s6nizulIYqDFTP(/"@U\10G!R(0."0.hj8wMU)=}0Ke1oRHoX~u?q
2024-10-01 18:04:07 UTC	5325	IN	Data Raw: 05 e0 1d 01 df a5 f3 b4 96 e6 75 df 45 19 80 a8 d0 ad ff 46 55 eb 3f b6 9e d6 a6 66 06 05 dd 07 11 f4 9f 2f da 16 52 b3 0b af 46 23 d1 d4 20 51 c1 85 31 3b d4 26 f3 c8 bb 09 79 39 76 76 e6 a9 24 e7 46 43 53 55 07 39 68 b4 be 94 95 d7 d1 ca e9 cd ac 1e ff c5 a4 7d 51 a9 8a 13 7f 34 74 c9 ba 12 ba 14 aa ae 33 6a 18 5e c9 4d 1f eb db 36 f1 b5 b1 03 34 1c 93 31 66 aa 3b 36 e9 27 87 2b 2b 0e 85 7f 6e f1 2d 59 b5 49 d7 26 d1 d6 dc 00 39 70 ed 30 bb 9b 61 c9 3c 28 6a a0 25 a0 6a 67 d0 27 f8 98 ab 5b 86 cb 52 e3 e8 92 ec 68 7f 34 6a 30 34 c9 69 95 22 3e 1d eb 2f b9 0d b8 8b 2f 25 4a 7e 40 35 b8 c8 9b d1 d4 cf 3f 15 7c a8 f1 40 b6 e7 aa 3a 3d 3c d9 9a e4 10 90 c2 c7 23 54 58 ab 29 51 93 7b c8 a0 b5 e0 1c ed 7f da 53 da 24 8d 90 c6 4c 7b cc 94 b0 d3 a7 e7 9f e6 8c Data Ascii: uEFU?f/RF# Q1;&y9vv$FCSU9h}Q4t3j^M641f;6'++n-YI&9p0a<(j%jg'[Rh4j04i">//%J~@5?\|@:=<#TX)Q{S$L{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49726	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	613	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:07 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-10-01 18:04:07 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49728	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	678	OUT	POST /api/ttp/url/get-page-data HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive Content-Length: 173 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://security-us.m.mimecastprotect.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	173	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 73 51 57 53 4a 44 6d 30 51 50 39 7a 68 46 69 69 46 74 74 6c 68 43 47 4c 6e 4b 6b 5f 34 35 7a 5a 45 45 5f 71 5a 4f 35 64 57 33 4c 78 78 6a 67 71 57 67 4e 6c 4f 44 39 48 79 56 55 4e 43 65 64 71 4c 72 34 4c 6e 50 6f 56 43 31 6d 5f 58 45 4f 33 4b 49 33 6c 44 48 34 43 53 65 57 74 38 7a 6e 45 77 30 36 34 63 4e 71 6a 5a 38 41 61 76 53 48 41 66 4c 56 30 53 7a 35 4e 52 69 47 53 54 4f 70 56 22 2c 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"sQWSJDm0QP9zhFiiFttlhCGLnKk_45zZEE_qZO5dW3LxxjgqWgNlOD9HyVUNCedqLr4LnPoVC1m_XEO3KI3lDH4CSeWt8znEw064cNqjZ8AavSHAfLV0Sz5NRiGSTOpV","pageType":"block"}]}
2024-10-01 18:04:07 UTC	510	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 208 Connection: close cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow x-mc-req-id: b362751c-d5e3-43c5-842c-c8f66f7c84be x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d0-QG4NUiRgZ+2WBn9YGBXf2domPGg"
2024-10-01 18:04:07 UTC	208	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 2c 22 73 61 66 65 22 3a 66 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 42 6c 6f 63 6b 65 64 20 55 52 4c 20 43 61 74 65 67 6f 72 79 22 2c 22 63 75 73 74 6f 6d 65 72 43 6f 64 65 22 3a 22 43 55 53 41 31 30 41 34 37 36 22 2c 22 66 69 6c 65 44 6f 77 6e 6c 6f 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 48 65 75 72 69 73 74 69 63 73 4d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 61 63 74 69 6f 6e 45 6e 66 6f 72 63 65 6d 65 6e 74 22 3a 22 22 7d 5d 2c 22 66 61 69 6c 22 3a 5b 5d 7d Data Ascii: {"meta":{"status":200},"data":[{"pageType":"block","safe":false,"category":"Blocked URL Category","customerCode":"CUSA10A476","fileDownload":false,"isHeuristicsMatch":false,"actionEnforcement":""}],"fail":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49729	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	874	OUT	GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: image/png Content-Length: 6704 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Tue, 11 Jun 2024 12:25:23 GMT ETag: W/"1a30-19007429863"
2024-10-01 18:04:07 UTC	6704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 6b 08 06 00 00 00 cd 57 bf 15 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 07 77 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,kWpHYswiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49730	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	600	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:07 UTC	482	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: image/png Content-Length: 2782 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630"
2024-10-01 18:04:07 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49731	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	390	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:08 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-10-01 18:04:08 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49732	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	399	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	482	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:07 GMT Content-Type: image/png Content-Length: 2782 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630"
2024-10-01 18:04:08 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49733	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:07 UTC	673	OUT	GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:08 GMT Content-Type: image/png Content-Length: 6704 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Tue, 11 Jun 2024 12:17:33 GMT ETag: W/"1a30-190073b6e4d"
2024-10-01 18:04:08 UTC	6704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 6b 08 06 00 00 00 cd 57 bf 15 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 07 77 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR,kWpHYswiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49734	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:08 UTC	382	OUT	GET /api/ttp/url/get-page-data HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	439	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Oct 2024 18:04:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 180 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding
2024-10-01 18:04:08 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49735	170.10.132.88	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:08 UTC	592	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	508	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:08 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:08 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49737	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 18:04:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=168102 Date: Tue, 01 Oct 2024 18:04:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49741	170.10.132.89	443	3680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:08 UTC	391	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:04:08 UTC	508	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:04:08 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-10-01 18:04:08 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49738	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SfErxx7VhXxsLb8&MD=ZAv1LC24 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 18:04:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 278571ba-be5a-4201-b657-786fd2dbfd0b MS-RequestId: 3dbe98ae-165a-40c4-941b-f4a1a85b9b53 MS-CV: YBh/SjYXOkabqDEp.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 18:04:08 GMT Connection: close Content-Length: 24490
2024-10-01 18:04:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-01 18:04:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 18:04:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=168045 Date: Tue, 01 Oct 2024 18:04:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 18:04:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49745	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:04:47 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SfErxx7VhXxsLb8&MD=ZAv1LC24 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 18:04:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: aa983624-e423-4b86-b8ab-e560f502b3da MS-RequestId: ac069817-983e-43fd-80f5-c78730f5d5e8 MS-CV: l1UX6h743Ui7zMnL.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 18:04:46 GMT Connection: close Content-Length: 30005
2024-10-01 18:04:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-01 18:04:47 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	14:03:56
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:03:57
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,17459722688275995018,9549884425335363036,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:03:58
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk HTTP/1.1Host: www.google.co.ilConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/s/url.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk HTTP/1.1Host: www.google.co.ilConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=OxeKUIC_FU1plg7rlyXKVHNVYjJ5p1n_TNTpoBH4HOU7ZlmFL090-11oAxs-qyOI5kkGWENRJnn42FrHPBCbTIb6V-u-A99lf_YNCwAHdCKtvtG19sPXxIT4i24PsaOhsi0VxXgqQRTYki5znQJXnYH8pNAXgFf9bfkEAGCvatZ-tSBDvukOMc2CCLibYiso
Source: global traffic	HTTP traffic detected: GET /s/4lucC82NvwFMjpGOhnfECyjGpA HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/y_VEIIaQod2LPISf_LfYGGV4Tj3KQ5xk7-XThm1dYP5uCSU6RKTBEDwtlti4oDTqGO5w0qEePY1NlIlB2g7Vc52OZDWiCA5bklVQ_kMK0VusmKo6sp-QHRFT_hNVxgYWl1_TpGJJ3u5QggUtdNWfh3xkiTrkK4PYGfIfJWsC-5UFMJe7Il8dzRCjnSm9aI1ATtnRoePcGZdcVQ4B0o1hM2eCNuXaP6xAM0HeBX4sm_T3UB6CZwxch8HU-tSReX6jz5jhJuwxKt4VTSg2VQn6lZmDP3I8Hnv7tG-kXehCFFN-XI0egLESJ6mO5NeH9qqgAfdw5DxEDsEM94cnj7CS296Vny4I3pLiiOFYhvK8BMUnN1TwrbZ-u2FfjWda7WNOAnQ-DqyET_2UrQ2KdjlUhcBNiZBXpivf13uIYtxNzGU_aLpSqp52RH3LtOOJ-mNLjZxXBuEXnVlMW1l0I0cOWhIVLHzKYu1shRBJQ8XLXjbr87ihhYtS70dbcbNQ2B4BIqRlwNmDLAempJacxVys-emiYS3Sqt-IS38FF-GkkCKjN97RCW1kukvUgKZE2kjb1OJEkEVfMU-DSKmX3WByfee3EuiHECRjQKInsmhL08rnOqs-hlO10vM5Q5CHCDiq8MZS9DbxXYPtVlv4gaDO_XcRqned0qqyP5f8S71nQq8TDXDb5JqwRsaYjzJw4My4IzC_3pmGYZo9j00550I8OgqrziClVv0tdTn9sKjNZrPRc1ejWtaSHUP3vCc9eU4789Bo19yYS_GrGPn00q8B1EVR-VdkmJVb4oY7t-yVVJGSpcw1su3Mzx6hMnufMqBmjNArzDAKt3K1nXNu6gn58GCBSJBV7IHGD4fmGoQtyR9-XplqiSPBvQ7SP4YJ5Jn88MKqJJ-DOcifMg6Gdj5kDpWBI3lW37J_CPsJtVgIJGdX7iswEvPrKoGeu95YF_GUjQIBGnTXFQiJt7oT1mHFAvijJr3nRVn7-g5SV_j6uBJCmEKJUG4MInSE5QsHw62fU6kTFC5smLWuFtqyjqpaw7e6mmGQ6Tn70LYyNJKsHyPagZp6KN-ybY6eR-52tqih7t4ZEVte9MJrVRRg3P0HgbQr_07wmLM41SSz0wyPQBiyPvUOSoci9FSg5b1_z9twN9gZBvYpxt8-2c1xcKIq8lhpqoDyzUQ9kQC2udHCwsNmekF3uY-JAipjy68dbmPkSGwEQ8gkKBCwTn1k5gvxb9y_wHFEIfCP_nyL6S-Jm7X36mvSya5ZWRtn4r42b1zIY7q6zhRwSmF4vvy0Qu6QC-U7FjKPAUBNS1C1_0Zq2WyKy8VOwXRPmfnTWlaAoCR97EjhKl6Cm-n4Zxu4N0ueoS43Wfs4d5pNYv4v1ewhGeGMa2mFdvAHmNigo6RhVPplqbOIphiSG3OEh6NLbJaecrwZvPpl0GinJIt0pVUZnf4lb5DOEAWH7DKqgnFDJc-78LgtogVBJFbLn8xOqzaGNExVbjskaupfleAzPqQj02mC3LwWVAbaUjHQQVkCEkH91PC9KvpTK8UkBDgn2kS6HtYW4455_vO1a43MgybmwKxWJfL8Un6OV-9RddRqYv8Ab4NlaPhTToh_mH5JfCwNVEludl9Dq0teeIvx1Jb0zR9x28hkyc__qkA6KpmGpheTRWu4hQQWMn2FYWtkjai6Y4Ny_idaVYNK66IV9VbOIWTNuMu6m--CgDXdOW4pFmHLEFq8tQbwN43SqX-j3fSnlUHHzFWXEMhQGH17dAKKibWpqpeNtwkM4H-SxrdOOaLy3E4QyjOW5nd1K3Wm3AN_uSjq45VkUt5P3_Xyo4lxY3YACvLOr1fbCgxCQoyHw9HxZx1DoCMsB5DekHuUjVtNUHmOTcFuMPAVh202skhkUjgs2Zx1ZvUPLWIgGh7YrSVK6tGCeOCw-nV263xrXgmEfQfbfKT83KRcn-5iOG3oOjN0P8L26RbvK4ntusjR64bNppXxhR97aTVOFWLoOVoGA72fFTJyFu2EM9jFD6L7g9Cb2TP89JBEzO3SljjZdM8pnBG8w_qF8Recb-XLTBHMidXy8Wy74vRoSiYWz7kkhUWwJgZMpHv-b8ZAW9pnENpQp1-RdppeY9bS5z0DIz3p7Yx7LSUApyxkTjxZx7SP7pM HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/style.css?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-us.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-us.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/247e11fef91c5004a353fa5232e56bec0394f500/main-page-logo.png?tkn=3.366SikdTFMAy_TaEdvcV9GHcM0jj3dClYtnrvpDzbL5ZTSzhCRv8AOCS6_zdupT_lktVIsYg6yMAb6nItbRjJhN5jgGTDcVXrR37as__jmB-kGMos0GEzPdWSFHZXsyMuGEOa0gQn5KACOEcTv3Us_daiq-XAk0CW6nas8dM_gEKbWQM47dfyp7NWkJ5zhgZ.HXSzu7iEgmzrwUxf-KvnkA&originalContextPath=ttpwp HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ttp/url/get-page-data HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SfErxx7VhXxsLb8&MD=ZAv1LC24 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SfErxx7VhXxsLb8&MD=ZAv1LC24 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.co.il
Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: security-us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Windows Analysis Report
https://www.google.co.il/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2Furl.us.m.mimecastprotect.com/s/4lucC82NvwFMjpGOhnfECyjGpA?domain=google.co.uk