Edit tour

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com

Overview

General Information

Sample URL:	https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com
Analysis ID:	1524303
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2024,i,14144066786699680077,1103834911799437713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /api/ttp/url/get-page-data HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveContent-Length: 173sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://security-uk.m.mimecastprotect.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 02 Oct 2024 15:13:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 180Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-Encoding

Source: chromecache_76.6.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_76.6.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49724 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/34@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2024,i,14144066786699680077,1103834911799437713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2024,i,14144066786699680077,1103834911799437713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
url.uk.m.mimecastprotect.com	91.220.42.235	true	false	unknown
security-uk.m.mimecastprotect.com	91.220.42.89	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.42	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp	false	unknown
https://security-uk.m.mimecastprotect.com/api/ttp/url/get-page-data	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=OAPaJlOWQcvgsrT_iXGbgjqjmbEBF-q-27kltg4x8dCyP-6B1_VS26x_b-3_IKLQqjh-Lh5MBe7BzMhURffLVHCtnhl_FVakOs4kvrR7JeHTZSJ2pGXx3oDPk5DdH_P_	false	unknown
https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_76.6.dr	false		unknown
https://community.mimecast.com/docs/DOC-241	chromecache_76.6.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.220.42.89	security-uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.220.42.235	url.uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	false
195.130.217.89	unknown	United Kingdom	42427	MIMECAST-UKGB	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524303
Start date and time:	2024-10-02 17:12:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/34@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 172.217.16.206, 173.194.76.84, 34.104.35.123, 13.85.23.86, 217.20.57.42, 20.242.39.171, 20.3.187.198, 142.250.184.195, 88.221.110.91, 2.16.100.168
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com

Input	Output
URL: https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=OAPaJlOWQcvgsrT_iXGbgjqjmbEBF-q-27kltg4x8dCyP-6B1_VS26x_b-3_IKLQqjh-Lh5MBe7BzMhURffLVHCtnhl_FVakOs4kvrR7JeHTZSJ2pGXx3oDPk5DdH_P_ Model: jbxai

URL: https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=OAPaJlOWQcvgsrT_iXGbgjqjmbEBF-q-27kltg4x8dCyP-6B1_VS26x_b-3_IKLQqjh-Lh5MBe7BzMhURffLVHCtnhl_FVakOs4kvrR7JeHTZSJ2pGXx3oDPk5DdH_P_ Model: jbxai

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 14:13:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9772107043617595
Encrypted:	false
SSDEEP:	48:8/QTwbdaxTTolHgidAKZdA1uehwiZUklqehry+3:8/QTl4n8y
MD5:	261AD10F1583EB0F7E8CB314553D932F
SHA1:	5DFFEA3150B581B332F4F62A90F58B4989E83BD5
SHA-256:	E91C3B413B55242403AB42E34A2349C273783009089FDC6A86F3C0E13111ACF9
SHA-512:	08580ECE55CD245B3D634F9396E9FAE86A2B175DFF4CA126F2575EEF81A8BBBC0F7558E94073C1A7D3BD3362959560962D59B584E76DFD752F72C391F105E825
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....m.F.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VBY.y....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 14:13:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9961588093295983
Encrypted:	false
SSDEEP:	48:831TwbdaxTTolHgidAKZdA1Heh/iZUkAQkqehsy+2:8lTl4B9Qxy
MD5:	72948A847112108F6098B64F71D9A34A
SHA1:	9E2B4919B9C3F89F3E7F353AF0B4BB143EF7785E
SHA-256:	9F7B0365E1E9F5421322BB083B16162D163F9122B58868063D3088DDB7C24066
SHA-512:	353869B1D2E69120A7EA77DE625B0BC6F537D0AEA907F52ECF25A380CFBFB006D5EDEFA2DCCAB2FAF5680C1FFE90341AD0799F8123D03C127ACB46AC2A220ACA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....9.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VBY.y....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.004758546331522
Encrypted:	false
SSDEEP:	48:8FTwbdaxTTobHgidAKZdA149eh7sFiZUkmgqeh7sqy+BX:8FTl4Tnwy
MD5:	E38C199E98EFEB2C5E7C8AE8AE43AB0D
SHA1:	C2821A2D74A71A6F3827D3608692BD0893E5D8F0
SHA-256:	5548036D7B104F7D6E500B7796EFD52E38F04FF259C8E9955744E4D2AE8C13BA
SHA-512:	C4AEA7C071198376EC660911EA43E328BBAFC398020EEFD2BFC1C38768BE83CF8DFC267EC497C197863960204C7D90D5BFC17020A82296258FF4A674C835DD01
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 14:13:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995340158411238
Encrypted:	false
SSDEEP:	48:8uTwbdaxTTolHgidAKZdA14ehDiZUkwqehYy+R:8uTl4yyy
MD5:	9B46EEE0776E34ED66C8C6E17CE7C83C
SHA1:	4E009E173C14E65D78AEA874BA36370596885B74
SHA-256:	BF1EF3453986C25AAFBA5877644202E2C3C328D5AFE50249A2F226D87C88446F
SHA-512:	7BAF5B7A79AFFAB7BD120E6230F3186E8CECF20A612DAE6241D933E96E4108969207BDEBDD65CF8539A0F66388BD3D85EAB398D5FE80563578150BEA6D054B2F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......3.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VBY.y....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 14:13:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9845169030540157
Encrypted:	false
SSDEEP:	48:8RTwbdaxTTolHgidAKZdA1mehBiZUk1W1qehuy+C:8RTl4y9Oy
MD5:	A7B5AC2F5E6452D4831B6657F0F7A056
SHA1:	099E73BBBB1BA50A8042C06A59892831BF020530
SHA-256:	0D9480C777FBB078743402E3875A858B305A33FC2D5B3527FE29C86255126E39
SHA-512:	09D41826E744BE025809B4A8998D80080A0B3E150624D3DCD859C55C0E29AE566F366C396E4B5E7B4185A9B4550FED0DAE0FD71789FBCAB0B870DBFC570722F3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....[@.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VBY.y....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 14:13:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99510503184533
Encrypted:	false
SSDEEP:	48:8ETwbdaxTTolHgidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbwy+yT+:8ETl45TyTbxWOvTbwy7T
MD5:	BFA1ABE93CFF88604649D3C2DB6A7FA4
SHA1:	72F1BB4024532A9010159F3DF49B2E874AC8BA58
SHA-256:	FC026E97A97627114A481E361E4C90E97128218963AB42F358A2D1B0B0A2D51B
SHA-512:	00F149EB46BF014926E79EFAC0EF2D7C17B1C9CF2A0F77AF8E14B6808A7A37BB548CC16DF820178183253CE182C944CD753E0222787A57550AAF4C0EC50FE4A6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......(.........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IBY.y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBY.y....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VBY.y....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VBY.y...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VBY.y....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:	3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2088)
Category:	downloaded
Size (bytes):	3447
Entropy (8bit):	5.385539600942633
Encrypted:	false
SSDEEP:	48:08kjiKt+nPnlS2yYXyPXyBlt+nPnlS2yYXyPXybWIiMjLA:0t+nvlmYCK3t+nvlmYCKblQ
MD5:	C286C6FD6BFE7C3FAF59157B7AA0FD39
SHA1:	25D2FF78EB12EF3DB2A3907E8D2CE39C1C5505D9
SHA-256:	1062224668A272A46FF501E338702C675FF7EF413009FF3FA8E5D42BA37A90C4
SHA-512:	55F60ECBE7A0CDC251D8291F9EA40E55CE8B5C0845D1A49476926E1C711882CEF897414C860E95DE43E27282232CC57727203C8F6E5F029D4163BECACD81BB4F
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <script>window.mimecast = {"branding":{"defaultBranding":{"defaultConfiguration":{"knowledgeBase":{"href":"https://community.mimecast.com/docs/DOC-241","label":"LOGIN_HOME_LNK"},"home":{"href":"http://www.mimec

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	7.9930739048349935
Encrypted:	true
SSDEEP:	768:NzA1kfxARdebgMmiX+c2BERO9/ufrv7KkffWz6tw2O7i:NzA1k5aebgMmYWH9mfpfSmPOe
MD5:	E5231978386520AFD0019A8F5D007882
SHA1:	5E06725A18323ED9372E3E488D4F6DF1A56B3091
SHA-256:	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
SHA-512:	D5EEE91E55BFE7FB220705545D6E767C1A969F4E313F1991C220F4EAA05A7ABC83EE9E6B804D1DF90C1779591F587E1FD58230E120CDA529F8C98BC337E4D3D3
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
Preview:	wOF2............../..............................T.V..N...x..S..~..6.$..x. ..2..U.C..T'.a..!...{.1...l.$......\|...(.U...=A.1...PkY..N....t.+P`..Kp.:n......p......~.......-....`;D.vu.p.N.t......]u....m....Hln..a.x..N.gl...'[`..V..L{.....f.9.l..sw7....M.....B..n.M.6.....z..(...)..}>...... .A.KG}.Q...Z.....G.w\K........a..,.F...3....Z.i)-..<l.eEu.eY.e6..66].VY.5.n.....\_..W....J.ARC.{....u...r.H-...x.A-j.z........?...0..K..EU...v...YC..y.?J.{.._..L60.R..%...X...j..B]E..U.w.?.....J....dD..9.'.r....o.....X.l.^@>...wj?w.7S<G3ch..%..2Hr....&.....K..Q..l;.......f..O2$..}H K......s...~.m..t\|..+.........'..,S...H{@.X.S.E....p.g..\|.{E....Vi7...u.:K...r.3s~.....d..........(tC.......D....f....higI..9.q...Y.....J.F.....X...2c./......dM.K........1....&.. L.A,I....gL....2.i.Rd.8.h.0w....=.@.b.Q..@AP.}K?.$.....k..."...D..5....#...3r.eY@(p.........&....\...@..q..1......F k<....=....9G.f*..........y..N..[..._5.....U.@..\|}..u.k2..7...).#y.................d..B

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4228
Entropy (8bit):	7.468692581181979
Encrypted:	false
SSDEEP:	96:vSn6knmWIrIlW/QHCZhHF4HVywjjjWm3QsVA56VBT1CvWrBLjjjjQ:vSn6knDiZhCIwjjjH31VAgBTm0RjjjjQ
MD5:	EB9048F8FBF87B993E77B0AB95DAAA60
SHA1:	38B9F52981F1E3E7C0AA3F9C0773D971D28218BC
SHA-256:	35175BBAB647CEC8479F295A98978D170CD7B62E5FD3F7B64DEFAE81B517B16A
SHA-512:	4C4E50D85B3A1F21674CF080DBD3227FBEECA50B1C6B113E1767E8D6AECF666BE65CBC7A86E17C8E9A72A24AFE335C3EB70C392278E31171D90603AD42FC7E3C
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png
Preview:	.PNG........IHDR.......x.......O.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-10-29T15:56:24+01:00" xmp:ModifyDate="2021-11-02T15:28:31Z" xmp:MetadataDate="2021-11-02T15:28:31Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:e59b0272-9f84-d042-b610-49114ee72bcc" xmpMM:DocumentID="xmp.did:0289126f-2158-4f47-aeef-18573cdfc66d" xmpMM:OriginalDocumentID

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4228
Entropy (8bit):	7.468692581181979
Encrypted:	false
SSDEEP:	96:vSn6knmWIrIlW/QHCZhHF4HVywjjjWm3QsVA56VBT1CvWrBLjjjjQ:vSn6knDiZhCIwjjjH31VAgBTm0RjjjjQ
MD5:	EB9048F8FBF87B993E77B0AB95DAAA60
SHA1:	38B9F52981F1E3E7C0AA3F9C0773D971D28218BC
SHA-256:	35175BBAB647CEC8479F295A98978D170CD7B62E5FD3F7B64DEFAE81B517B16A
SHA-512:	4C4E50D85B3A1F21674CF080DBD3227FBEECA50B1C6B113E1767E8D6AECF666BE65CBC7A86E17C8E9A72A24AFE335C3EB70C392278E31171D90603AD42FC7E3C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x.......O.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-10-29T15:56:24+01:00" xmp:ModifyDate="2021-11-02T15:28:31Z" xmp:MetadataDate="2021-11-02T15:28:31Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:e59b0272-9f84-d042-b610-49114ee72bcc" xmpMM:DocumentID="xmp.did:0289126f-2158-4f47-aeef-18573cdfc66d" xmpMM:OriginalDocumentID

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
URL:	https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.755948041571961
Encrypted:	false
SSDEEP:	3:PouV7uJLzLcvzSAEtvxLzUbSodX7JH4vrLUe9ubygGjxcM16SWXxVWRaecKBc4NM:hxuJLzLcbzEdxqXLorwe9UygqxcMUSWp
MD5:	B574A8D3BC4C6A4FE57E89008E9645A3
SHA1:	471EBF49ADD18D605FD24F188DD460F165DDEF45
SHA-256:	3237A8FE51F94BBF3E3E38E4A8E0DC1A643F5DFB5C49D265A8B456CD646D6FCC
SHA-512:	011CB4A90C3B5A4D467B8765A51121CC2AAE9F5C1B570DC82D73D3B12B32F63928F6BD9BE96C5410212392A13DA287154D729A1E0D21AF3E13CCB07F2DD11224
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>.</head>.<body>.<h1>Error 404</h1>.<h2>Sorry, page not found.</h2>.<p>We could not find the page you requested.</p>.</body>.</html>

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 17:13:03.556847095 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 2, 2024 17:13:05.494328976 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:05.494347095 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:07.291770935 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:07.603702068 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:08.213100910 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:08.369302034 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 2, 2024 17:13:09.416224957 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:11.821990013 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:13.264961004 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.265006065 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.265089035 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.265662909 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.265671015 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.265727043 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.266364098 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.266379118 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.266580105 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.266592026 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.949639082 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.951103926 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.951133966 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.952281952 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.952349901 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.955868959 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.955935001 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.956598997 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.956613064 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.972496986 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.974533081 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.974550009 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.975740910 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:13.975805998 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.976648092 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:13.976715088 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:14.010277033 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.025590897 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.025610924 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:14.073693991 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.329895020 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:14.329988003 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:14.331351995 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.404972076 CEST	49710	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.405015945 CEST	443	49710	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:14.483350039 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:14.483445883 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:15.103499889 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:15.103600979 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:15.287774086 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.287831068 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:15.287996054 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.288640022 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.288662910 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:15.938602924 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:15.962060928 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.962080002 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:15.963337898 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:15.963426113 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.967317104 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:15.967468977 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:16.014297962 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:16.014322996 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:16.058958054 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:16.209417105 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.209480047 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:16.209585905 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.216877937 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.216892004 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:16.633549929 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:16.864873886 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:16.864939928 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.872195959 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.872217894 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:16.872509956 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:16.917090893 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:16.986279964 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.031399965 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.173230886 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.173325062 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.173369884 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.173495054 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.173515081 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.173527002 CEST	49714	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.173532963 CEST	443	49714	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.208139896 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.208178997 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.208259106 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.208580017 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.208590984 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.890252113 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.890357018 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.892220974 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.892231941 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.892503977 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.894098043 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:17.935441017 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:17.977226019 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 2, 2024 17:13:18.177795887 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:18.177876949 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:18.177958012 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:18.178987026 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:18.179004908 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:18.179019928 CEST	49715	443	192.168.2.10	184.28.90.27
Oct 2, 2024 17:13:18.179025888 CEST	443	49715	184.28.90.27	192.168.2.10
Oct 2, 2024 17:13:25.680150986 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:25.680267096 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:25.680913925 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:25.683310986 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:25.683329105 CEST	443	49709	91.220.42.235	192.168.2.10
Oct 2, 2024 17:13:25.683893919 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:25.684179068 CEST	49709	443	192.168.2.10	91.220.42.235
Oct 2, 2024 17:13:25.707315922 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:25.707355022 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:25.708075047 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:25.708580017 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:25.708591938 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:25.830179930 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:25.830246925 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:25.830389977 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:26.235409021 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 2, 2024 17:13:26.586111069 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.587268114 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.587311983 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.588438034 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.588499069 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.595716000 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.595829010 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.595923901 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.595943928 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.635656118 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.765934944 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.765959978 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.766019106 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.766028881 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.766072989 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.865430117 CEST	49716	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.865473986 CEST	443	49716	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.952153921 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.952198982 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.952256918 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.952688932 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.952739954 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.952790022 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.952927113 CEST	49713	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:13:26.952953100 CEST	443	49713	216.58.206.36	192.168.2.10
Oct 2, 2024 17:13:26.954010010 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.954051018 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.954118013 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.954895973 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.954906940 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.955132008 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.955152035 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.955264091 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.955275059 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.955960989 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.955988884 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:26.956132889 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.957833052 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:26.957849026 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.644835949 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:27.647197962 CEST	49724	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:27.647241116 CEST	443	49724	173.222.162.55	192.168.2.10
Oct 2, 2024 17:13:27.647319078 CEST	49724	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:27.649621964 CEST	49724	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:27.649647951 CEST	443	49724	173.222.162.55	192.168.2.10
Oct 2, 2024 17:13:27.808717966 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.810950994 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.810987949 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.811536074 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.812647104 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.812747002 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.812822104 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.838040113 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.838068962 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.838700056 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.838723898 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.838834047 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.838854074 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.839188099 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.839819908 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.839869022 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.840055943 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.840118885 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.841119051 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.841183901 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.841322899 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.841398001 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.841406107 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.842137098 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.845500946 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.845525026 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.846621990 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.847124100 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.847848892 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.847904921 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.847913027 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.847928047 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.855411053 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.885303020 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.887408972 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.900381088 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.900408030 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.951972008 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:27.954356909 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.984867096 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.984889984 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.984932899 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.984958887 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.984998941 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:27.985030890 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.985944033 CEST	49718	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:27.985960007 CEST	443	49718	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082549095 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082578897 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082587004 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082601070 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082633972 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082659960 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.082693100 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.082706928 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.082734108 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.084599972 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.084625959 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.084640026 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.084695101 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.084717989 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.084752083 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.088656902 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088684082 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088691950 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088705063 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088716984 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088725090 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088743925 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.088771105 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.088888884 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.088888884 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.111068010 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.111093998 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.111136913 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.111145020 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.111166954 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.111191034 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.112854004 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.112883091 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.112930059 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.112948895 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.112960100 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.112978935 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.122874022 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.122922897 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.122951984 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.122961998 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.123039007 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.123039007 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.123075008 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.123311043 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.172789097 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.172813892 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.172902107 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.172920942 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.172964096 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.174804926 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.174833059 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.174918890 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.174937010 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.174962997 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.174981117 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.179512978 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.179533005 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.179636955 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.179636955 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.179653883 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.183319092 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.194540024 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.194562912 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.194633961 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.194648981 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.194684029 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.197385073 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.197416067 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.197468996 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.197496891 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.197518110 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.197529078 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.202836037 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.202857018 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.202929020 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.202939034 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.202976942 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.202994108 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.205426931 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.205454111 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.205516100 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.205533981 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.205569983 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.205588102 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.208833933 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.208853006 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.208909035 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.208918095 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.208955050 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.210882902 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.210906029 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.210994959 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.210994959 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.211025000 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.211313963 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.213612080 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.213654041 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.213680983 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.213697910 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.213721991 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.213726997 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.213737965 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.213767052 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.214553118 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.214576006 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.214617014 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.214627981 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.214673996 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.214673996 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.217025042 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.217041016 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.217117071 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.217125893 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.217556953 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.220189095 CEST	49719	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.220216990 CEST	443	49719	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.244122982 CEST	443	49724	173.222.162.55	192.168.2.10
Oct 2, 2024 17:13:28.244929075 CEST	49724	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:28.263943911 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.263978958 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.264030933 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.264065981 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.264094114 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.264112949 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.270996094 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.271027088 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.271317959 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.271339893 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.271507025 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.284636021 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.284660101 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.284697056 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.284713030 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.284753084 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.287831068 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.287851095 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.287883997 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.287889004 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.287914991 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.287934065 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.290458918 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.290488005 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.290571928 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.290575981 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.290612936 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293037891 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293070078 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293129921 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293162107 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293337107 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293337107 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293858051 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293881893 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293920994 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293926954 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.293960094 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.293981075 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.296523094 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.296542883 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.298410892 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.298441887 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.298496008 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.298502922 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.298526049 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.298544884 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.299326897 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.299326897 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.299365044 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.299957037 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.299981117 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.300098896 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.300098896 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.300098896 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.300122023 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.301654100 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.301672935 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.301795006 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.301795006 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.301795006 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.301821947 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.302638054 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.302994013 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.302994967 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.303348064 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.303374052 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.305757999 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.305757999 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.305775881 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.307316065 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.334652901 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.334685087 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.334743023 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.334758043 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.334796906 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.340662956 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.340687037 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.343317986 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.343343973 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.345743895 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.354240894 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.354264021 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.354345083 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.354360104 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.354398966 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.361984015 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.362004042 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.363325119 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.363363981 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.367324114 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.374118090 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.374141932 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.374186039 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.374192953 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.374217033 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.374239922 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.375788927 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.375807047 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.375845909 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.375852108 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.375883102 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.375902891 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.377546072 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.377564907 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.377604008 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.377608061 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.377660990 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.379209995 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.379231930 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.379270077 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.379275084 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.379297972 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.379317045 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.381017923 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.381037951 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.381071091 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.381076097 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.381108999 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.381125927 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.382662058 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.382678986 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.382742882 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.382746935 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.382797956 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.383644104 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.383662939 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.383709908 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.383735895 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.383868933 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.383868933 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.384614944 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.384629965 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.384692907 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.384710073 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.385140896 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.386439085 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.386456013 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.386519909 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.386535883 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.387025118 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.387521982 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.387537003 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.387912989 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.387934923 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.388361931 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.389277935 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.389292955 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.389339924 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.389373064 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.389472008 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.389472008 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.391047001 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.391185999 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.411602020 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.411621094 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.411973000 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.411997080 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.412457943 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.425390959 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.425415993 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.425467014 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.425472975 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.425529003 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.431236029 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.431284904 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.431540012 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.431540012 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.431557894 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.431907892 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.445034981 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.445054054 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.445091963 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.445101023 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.445147991 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.452692032 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.452717066 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.452756882 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.452790976 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.452917099 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.452917099 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.467745066 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.467766047 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.467803001 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.467808962 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.467859983 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.468610048 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.468626976 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.468664885 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.468668938 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.468689919 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.468707085 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470232010 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470254898 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470290899 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470357895 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470403910 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470403910 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470403910 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470757008 CEST	49720	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470774889 CEST	443	49720	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470784903 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470798016 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.470901012 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.470937967 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.471316099 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.472100019 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.472122908 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.472172022 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.472197056 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.472332954 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.472332954 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.473098040 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.473114967 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.473157883 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.473177910 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.473299026 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.473299026 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.474086046 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.474102020 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.474168062 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.474185944 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.474560976 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.474972010 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.474986076 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.475018024 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.475032091 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.475138903 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.475138903 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.502264977 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.502341032 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.502361059 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.502394915 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.502500057 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.502500057 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.542761087 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.542812109 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.542936087 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.542936087 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.542958021 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.543124914 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.543946028 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.543991089 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.544014931 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.544049025 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.544178009 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.544178009 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.557027102 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:28.561575890 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.561616898 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.561693907 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.561722994 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.561775923 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.561775923 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563074112 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563092947 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563146114 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563157082 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563203096 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563203096 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563689947 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563713074 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563777924 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563777924 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.563786983 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.563838005 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.564522982 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.564542055 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.564610958 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.564619064 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.564728022 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.565543890 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.565572023 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.565619946 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.565628052 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.565656900 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.565861940 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.593565941 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.593595982 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.593699932 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.593718052 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.593729019 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.593780994 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.633600950 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.633634090 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.633765936 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.633780956 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.633897066 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.634573936 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.634594917 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.634748936 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.634748936 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.634758949 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.634824038 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.652478933 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.652504921 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.652548075 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.652569056 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.652662992 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.652662992 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.653168917 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.653183937 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.653237104 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.653254986 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.653672934 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.654035091 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.654051065 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.654083014 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.654098988 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.654196978 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.654196978 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.654999018 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.655016899 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.655066013 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.655082941 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.655329943 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.655329943 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.656016111 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.656035900 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.656099081 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.656116962 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.656573057 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.677979946 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.684355021 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.684391975 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.684437990 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.684461117 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.684565067 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.684565067 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.724409103 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.724437952 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.724477053 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.724515915 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.724642038 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.724642038 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.725826025 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.725843906 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.725892067 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.725910902 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.726355076 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.726355076 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.766367912 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.766391993 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.766450882 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.766474962 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.766659975 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.766659975 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.766958952 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.766973972 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.767061949 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.767061949 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.767067909 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.767311096 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.768028021 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.768043995 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.768074036 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.768090010 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.768240929 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.768240929 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.768924952 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.768940926 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.768985033 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.769001961 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.769148111 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.769958019 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.769973040 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.770395041 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.770401955 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.770921946 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.775085926 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.775104046 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.775154114 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.775172949 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.775326014 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.775326014 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.796287060 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.815352917 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.815375090 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.815608978 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.815622091 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.816031933 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.816050053 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.816081047 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.816081047 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.816087961 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.816592932 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.833791018 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.833812952 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.833916903 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.833916903 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.833942890 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.834542036 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.834562063 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.834616899 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.834616899 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.834623098 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.834790945 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.834790945 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.855794907 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.855817080 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.855931044 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.855931044 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.855948925 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.856700897 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.856722116 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.856754065 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.856754065 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.856760025 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.857283115 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.857283115 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.857673883 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.857690096 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.859312057 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.859324932 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.859746933 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.865478039 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.865499020 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.865551949 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.865570068 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.866071939 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.866071939 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.873773098 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.905788898 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.905814886 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.905865908 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.905884027 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.906088114 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.906088114 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.906610012 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.906625032 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.906658888 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.906677008 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.906784058 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.906784058 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.924495935 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.924515963 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.924604893 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.924617052 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.924757957 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.924841881 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.924875975 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.924923897 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.925076008 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.925076008 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.926203012 CEST	49721	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:28.926223993 CEST	443	49721	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:28.938081026 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.938123941 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.938190937 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.938378096 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.938410044 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.938452959 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.938947916 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.938991070 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.939249992 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.939260960 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.939310074 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.939485073 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.939498901 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.939959049 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.939974070 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.945184946 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.945225000 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:28.945375919 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.945975065 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:28.945997000 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.050081968 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.050136089 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.050225019 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.050524950 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.050535917 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.081540108 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.081581116 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.081633091 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.083138943 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.083148956 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.093691111 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.093729973 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.093791008 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.095105886 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.095117092 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.121807098 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.121819973 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.121875048 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.122347116 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.122373104 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.122421980 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.122576952 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.122585058 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.122724056 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.122733116 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.713474989 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.716960907 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.716976881 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.718049049 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.718094110 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.718943119 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.718997955 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.719419956 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.719425917 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.781923056 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.782630920 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.784193039 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.784202099 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.784548044 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.784562111 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.785185099 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.785233021 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.785705090 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.785751104 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.786345005 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.786401033 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.786990881 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.787054062 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.787172079 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.787178040 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.787241936 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.787247896 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.789730072 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.830785036 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:29.840990067 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.866333008 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:29.866349936 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.866352081 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.866523027 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.882494926 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.882503033 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.882611036 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.882636070 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.883796930 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.883857012 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.885727882 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.885735989 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.885777950 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.945135117 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.951086998 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.959917068 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.959934950 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.959988117 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:29.960000992 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.960045099 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:29.962631941 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:29.976943970 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.019115925 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.019258976 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.020457029 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.020596981 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.020705938 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.020716906 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.021143913 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.021262884 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.021272898 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.021615028 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.021632910 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.022058010 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.022063971 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.022399902 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.023123980 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.023132086 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.023154020 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.023176908 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.023206949 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.023468018 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.023511887 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.038237095 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038244963 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038258076 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038280964 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038291931 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038306952 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038326979 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.038333893 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.038490057 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.045839071 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.045851946 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.046428919 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.046545982 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.046546936 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.046562910 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.047287941 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.047348976 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.047630072 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.047637939 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.047658920 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.047689915 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.047693968 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.047725916 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.047751904 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.047961950 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.048074007 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.048403978 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.054560900 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.054688931 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.054692030 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.054699898 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.054708004 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.058990002 CEST	49729	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.059005022 CEST	443	49729	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.077828884 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077846050 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077852964 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077867031 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077874899 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077879906 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.077887058 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.077898979 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079324961 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.079324961 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.079555035 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079562902 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079586983 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079608917 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079617023 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.079621077 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.079653025 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.079672098 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.091393948 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.095391989 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.124808073 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.124840975 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.124871016 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.124882936 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.124929905 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.133725882 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.133814096 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.133830070 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.133841991 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.133882046 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.133888006 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.133936882 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.136219025 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.136234999 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.136265039 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.136271000 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.136316061 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.138035059 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.138062954 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.138088942 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.138093948 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.138132095 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.138137102 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.138171911 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.138384104 CEST	49727	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.138395071 CEST	443	49727	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.164972067 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.164992094 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.165031910 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.165039062 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.165077925 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.165950060 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.165966034 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.166016102 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.166021109 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.166052103 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.166934013 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.166954041 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.166990042 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.166994095 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.167035103 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.167665005 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.167680025 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.167718887 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.167722940 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.167756081 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.224200964 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.224220037 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.224261045 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.224270105 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.224287033 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.224303961 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.224335909 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.226301908 CEST	49735	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.226310968 CEST	443	49735	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.231884956 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.231914043 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.231987000 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.232234955 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.232244968 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.235579967 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.235780954 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.252130985 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.252154112 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.252194881 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.252208948 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.252249002 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.252899885 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.252913952 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.252957106 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.252963066 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.253006935 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.253184080 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.253235102 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.253238916 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.253248930 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.253285885 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.253576994 CEST	49734	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.253588915 CEST	443	49734	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.287247896 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287276983 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287290096 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287303925 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287312984 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287319899 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.287321091 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287334919 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.287359953 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.287379026 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.292969942 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.292987108 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.292994022 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.293005943 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.293019056 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.293025970 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.293046951 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.293061972 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.293087006 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.293107033 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.293951035 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.293972015 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.293977976 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.293991089 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.293999910 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.294006109 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.294011116 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.294020891 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.294050932 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.294073105 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.298790932 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298808098 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298815012 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298829079 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298835993 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298839092 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298846960 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.298856020 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298885107 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.298906088 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.298917055 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.298955917 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.300134897 CEST	49732	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.300142050 CEST	443	49732	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.303607941 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303622007 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303637981 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303647995 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303662062 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.303673029 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303683043 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.303697109 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.303723097 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.308048010 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.308059931 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.308135033 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.308576107 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.308583975 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317405939 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317414999 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317430019 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317436934 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317452908 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317457914 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.317461967 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.317533970 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.318919897 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.318929911 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.318947077 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.318973064 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.318983078 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.319015980 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.319504976 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.319555044 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.319561005 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.319574118 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.319617987 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.319775105 CEST	49731	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.319785118 CEST	443	49731	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.335206032 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.335251093 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.335316896 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.335549116 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:30.335560083 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:30.374119043 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374131918 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374150038 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374156952 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374181032 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374190092 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.374197960 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.374249935 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.388241053 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.388250113 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.388271093 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.388278008 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.388324976 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.388338089 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.388431072 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.389650106 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.389659882 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.389678955 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.389700890 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.389708042 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.389734030 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.389738083 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.389774084 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.391310930 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.391330004 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.391364098 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.391369104 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.391411066 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.393579006 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.393598080 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.393668890 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.393668890 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.393675089 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.393711090 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.410505056 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.410512924 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.410578012 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.410599947 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.410619020 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.410624027 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.410682917 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.412472963 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.412481070 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.412506104 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.412537098 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.412542105 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.412585020 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.414249897 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.414267063 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.414329052 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.414335012 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.414412975 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.460860014 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.460880995 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.460938931 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.460947037 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.460994959 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.477679968 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.477699995 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.477751017 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.477757931 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.477813005 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.478941917 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.478957891 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.479023933 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.479028940 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.479060888 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.479163885 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.479990005 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.480006933 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.480040073 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.480045080 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.480078936 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.482414961 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.482438087 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.482474089 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.482479095 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.482501984 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.482583046 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.484231949 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.484252930 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.484304905 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.484313965 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.484694004 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.505373955 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.505390882 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.505450010 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.505460024 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.505511045 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.506309032 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.506325960 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.506371021 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.506376028 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.506417990 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.507306099 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.507322073 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.507364988 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.507370949 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.507420063 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.508192062 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.508208990 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.508251905 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.508258104 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.508294106 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.509192944 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.509207964 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.509257078 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.509263039 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.509294987 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.517612934 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.517642975 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.517676115 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.517683983 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.517729998 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.530949116 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.530966997 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.531030893 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.531042099 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.531332970 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.547969103 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.547996044 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.548069954 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.548069954 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.548078060 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.548122883 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.548583984 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.548605919 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.548640013 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.548646927 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.548667908 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.548990965 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.564568996 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.564594984 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.564637899 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.564652920 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.564671040 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.564702988 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.565705061 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.565723896 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.565756083 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.565761089 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.565800905 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.565831900 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.566416025 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.566431046 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.566498995 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.566504955 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.566829920 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.567349911 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.567368984 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.567436934 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.567444086 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.567513943 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.568217039 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.568233967 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.568368912 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.568376064 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.568418026 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.578999043 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579058886 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579066038 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.579104900 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579119921 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.579145908 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.579875946 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579917908 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579935074 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.579942942 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.579969883 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.579988956 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.600398064 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.600452900 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.600480080 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.600487947 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.600524902 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.601213932 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.601264000 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.601281881 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.601289988 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.601310968 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.601330042 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.602309942 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.602353096 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.602416992 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.602422953 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.602519035 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.604264975 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.604284048 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.604397058 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.604418039 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.604547977 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605072975 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605115891 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605135918 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605151892 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605170965 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605185986 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605712891 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605752945 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605773926 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605781078 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.605803013 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.605824947 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.619396925 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.619416952 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.619543076 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.619543076 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.619555950 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.620773077 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.625760078 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.625788927 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.625823975 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.625830889 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.625870943 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.635420084 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.635443926 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.635538101 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.635538101 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.635560036 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.635696888 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.651650906 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.651670933 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.652246952 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.652290106 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.652345896 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.652620077 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.652637959 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.652698994 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.652721882 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653007984 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.653433084 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653450966 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653490067 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.653491020 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653503895 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653520107 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.653542995 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.653577089 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653747082 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.653767109 CEST	443	49730	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.653795958 CEST	49730	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.673815012 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.673846006 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.673899889 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.673913956 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.673944950 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.673964024 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.694184065 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694207907 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694266081 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.694281101 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694832087 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694853067 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694897890 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.694904089 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.694926023 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.694952011 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.695983887 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696002007 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696049929 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.696055889 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696078062 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.696094990 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.696727991 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696748972 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696796894 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.696803093 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.696830988 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.697738886 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.697761059 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.697801113 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.697807074 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.697844982 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.698640108 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.698661089 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.698688030 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.698693037 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.698714018 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.698730946 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.720057964 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.720078945 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.720114946 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.720128059 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.720149994 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.720166922 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.768537045 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.768559933 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.768626928 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:30.768647909 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:30.769243002 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.019992113 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.020015955 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.020066977 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.020091057 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.020123005 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.020139933 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.021079063 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021095991 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021153927 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.021162033 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021380901 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.021764040 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021779060 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021811008 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.021817923 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.021845102 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.021862984 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.022864103 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.022878885 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.022941113 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.022948027 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.023118973 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.023854017 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.023871899 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.023930073 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.023937941 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.024034977 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.024755001 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.024770021 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.024812937 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.024820089 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.024897099 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.025794029 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.025808096 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.025871038 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.025877953 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.026041985 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.026731968 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.026746988 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.026793957 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.026802063 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.026983976 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.027872086 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.027887106 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.027945042 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.027951002 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.028431892 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.028923988 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.028939962 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.028990984 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.028997898 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.029004097 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.029019117 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.029031992 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.029067039 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.029071093 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.029295921 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.030060053 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030073881 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030128002 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.030134916 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030170918 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.030874014 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030889034 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030927896 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.030936003 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.030956984 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.030972958 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.031845093 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.031858921 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.031915903 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.031922102 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.032012939 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.032701969 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.032716036 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.032761097 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.032768011 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.033075094 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.033699989 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.033716917 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.033761978 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.033771038 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.034495115 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.034512043 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.034543991 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.034549952 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.034578085 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.034594059 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.035988092 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036026955 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036076069 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036082983 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036096096 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036114931 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036226988 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036264896 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036282063 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036288977 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036313057 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036330938 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.036940098 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.036982059 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.037015915 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.037022114 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.037045956 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.037065029 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.037492990 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.037530899 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.037554979 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.037561893 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.037590027 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.037605047 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.038501024 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.038539886 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.038563967 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.038569927 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.038594961 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.038614035 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.039484978 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.039525032 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.039541960 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.039549112 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.039572001 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.039587021 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.053925991 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.053986073 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.054044008 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.054060936 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.054086924 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.054104090 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.072608948 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.072642088 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.072758913 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.072776079 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.072810888 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.073251963 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.073271036 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.073323965 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.073329926 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074120045 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074145079 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074178934 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.074186087 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074208975 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.074239016 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.074579954 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074605942 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074642897 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.074650049 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.074662924 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.074682951 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.075783968 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075804949 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075853109 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.075859070 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075871944 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075891018 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.075906038 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075937033 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.075942993 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.075964928 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.075989008 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.086036921 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.098187923 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.098217964 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.098278046 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.098301888 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.098329067 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.098349094 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.148691893 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.148742914 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.148787022 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.148819923 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.148852110 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.148874044 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.167349100 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167372942 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167429924 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.167452097 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167650938 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.167817116 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167849064 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167874098 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.167880058 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167933941 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.167949915 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.167975903 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.168296099 CEST	49728	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.168308973 CEST	443	49728	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.202346087 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.202862024 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.202897072 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.203249931 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.203591108 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.203653097 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.203814983 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.204260111 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.204438925 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.204466105 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.204799891 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.207593918 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.207710028 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.208043098 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.251410961 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.255408049 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.433111906 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.433399916 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.433427095 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.433793068 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.434120893 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.434174061 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.434279919 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.449040890 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.449136972 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.449187040 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.449994087 CEST	49733	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.450016975 CEST	443	49733	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.455490112 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.455523014 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.455585003 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.456578016 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.456593037 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.479413033 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.599843025 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.599926949 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.600003958 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.600713968 CEST	49739	443	192.168.2.10	91.220.42.89
Oct 2, 2024 17:13:31.600737095 CEST	443	49739	91.220.42.89	192.168.2.10
Oct 2, 2024 17:13:31.608356953 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.608416080 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.608489990 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.608758926 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.608768940 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.624037981 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.624074936 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.624135971 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.624150038 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.624190092 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.625313997 CEST	49737	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.625333071 CEST	443	49737	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678807974 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678838968 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678857088 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678905010 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.678924084 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678956032 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.678958893 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:31.678980112 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.679001093 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.680413961 CEST	49738	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:31.680423975 CEST	443	49738	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.267205000 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:32.314939976 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.330534935 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.330565929 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.330959082 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.331866026 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.331921101 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.332325935 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.379406929 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.464168072 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.501301050 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.501394987 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.507404089 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.511632919 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.644501925 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.644535065 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.645101070 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.648263931 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.648338079 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.648911953 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.648922920 CEST	49740	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.648962021 CEST	443	49740	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.695405960 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.817339897 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.817425013 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:32.817543030 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.826056957 CEST	49741	443	192.168.2.10	195.130.217.89
Oct 2, 2024 17:13:32.826082945 CEST	443	49741	195.130.217.89	192.168.2.10
Oct 2, 2024 17:13:37.072550058 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:46.672533989 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:13:47.441466093 CEST	443	49724	173.222.162.55	192.168.2.10
Oct 2, 2024 17:13:47.441521883 CEST	49724	443	192.168.2.10	173.222.162.55
Oct 2, 2024 17:14:15.517501116 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:15.517564058 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:15.517710924 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:15.518007994 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:15.518022060 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:16.192496061 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:16.192781925 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:16.192800045 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:16.193263054 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:16.193880081 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:16.193960905 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:16.251841068 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:26.085887909 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:26.085972071 CEST	443	49744	216.58.206.36	192.168.2.10
Oct 2, 2024 17:14:26.086231947 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:27.553335905 CEST	49744	443	192.168.2.10	216.58.206.36
Oct 2, 2024 17:14:27.553380013 CEST	443	49744	216.58.206.36	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 17:13:11.345483065 CEST	53	51204	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:12.421627998 CEST	53	55611	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:13.235019922 CEST	53792	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:13.235152960 CEST	60464	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:13.256815910 CEST	53	53792	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:13.264271021 CEST	53	60464	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:15.279339075 CEST	52948	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:15.279412985 CEST	54485	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:15.286112070 CEST	53	52948	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:15.286129951 CEST	53	54485	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:25.684180021 CEST	51411	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:25.684627056 CEST	62600	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:25.706542969 CEST	53	62600	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:25.706582069 CEST	53	51411	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:28.896425009 CEST	63001	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:28.896732092 CEST	55296	53	192.168.2.10	1.1.1.1
Oct 2, 2024 17:13:28.922411919 CEST	53	63001	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:29.008877039 CEST	53	55296	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:29.364574909 CEST	53	60120	1.1.1.1	192.168.2.10
Oct 2, 2024 17:13:48.408319950 CEST	53	56169	1.1.1.1	192.168.2.10
Oct 2, 2024 17:14:06.395371914 CEST	138	138	192.168.2.10	192.168.2.255
Oct 2, 2024 17:14:10.742038012 CEST	53	64934	1.1.1.1	192.168.2.10
Oct 2, 2024 17:14:10.745275021 CEST	53	50967	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 2, 2024 17:13:29.008970022 CEST	192.168.2.10	1.1.1.1	c235	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 17:13:13.235019922 CEST	192.168.2.10	1.1.1.1	0x4fb	Standard query (0)	url.uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.235152960 CEST	192.168.2.10	1.1.1.1	0xb585	Standard query (0)	url.uk.m.mimecastprotect.com	65	IN (0x0001)	false
Oct 2, 2024 17:13:15.279339075 CEST	192.168.2.10	1.1.1.1	0x444c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:15.279412985 CEST	192.168.2.10	1.1.1.1	0xea8c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 17:13:25.684180021 CEST	192.168.2.10	1.1.1.1	0x7a83	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.684627056 CEST	192.168.2.10	1.1.1.1	0x2167	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false
Oct 2, 2024 17:13:28.896425009 CEST	192.168.2.10	1.1.1.1	0x94db	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.896732092 CEST	192.168.2.10	1.1.1.1	0x2637	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.235	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.215	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.73	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.180	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.187	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:13.256815910 CEST	1.1.1.1	192.168.2.10	0x4fb	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.63	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:15.286112070 CEST	1.1.1.1	192.168.2.10	0x444c	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:15.286129951 CEST	1.1.1.1	192.168.2.10	0xea8c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:25.706582069 CEST	1.1.1.1	192.168.2.10	0x7a83	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.42	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.19	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.38	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.27	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.36	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.37	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.41	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:27.601056099 CEST	1.1.1.1	192.168.2.10	0x57fb	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.21	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:28.922411919 CEST	1.1.1.1	192.168.2.10	0x94db	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:41.769633055 CEST	1.1.1.1	192.168.2.10	0xbe8f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:13:41.769633055 CEST	1.1.1.1	192.168.2.10	0xbe8f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:14:03.488145113 CEST	1.1.1.1	192.168.2.10	0x287d	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 17:14:03.488145113 CEST	1.1.1.1	192.168.2.10	0x287d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:14:03.488145113 CEST	1.1.1.1	192.168.2.10	0x287d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.uk.m.mimecastprotect.com

fs.microsoft.com

security-uk.m.mimecastprotect.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49710	91.220.42.235	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:13 UTC	731	OUT	GET /s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com HTTP/1.1 Host: url.uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:14 UTC	2883	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 02 Oct 2024 15:13:14 GMT Content-Length: 0 Connection: close Location: https://url.uk.m.mimecastprotect.com/r/oVmfKtrMaWNW0Ws36O78X_OkOKFuIHUHD3fz7q0tusMdFQdR7TDnm8aybopRegBVFa0fun8jf60zlrCHjmFXWf-EV8YvX6Bxir0QElT0x5MDaJByV7iaxvirocNzwSqJ2_U4_91FKjKJ3R0d1LDPRs9iW641qXHX8EKq7oXNKFj_z_fUC2u9OSaKRXsoNLxOOqa4qArDFFSZpfDji2tw5bTqPI9bmNaG-xY0B9eOHhNSKQxj3uA01up_ounuskoro3uNrT2YyHg1H26ZfccCjXX8-1EHdXSftewHVQ6eR_Q2IOEA1Z_eugsw83gWILgscBIINGDyyzZ8KI6evR2S_uVYYv0IdRr56rVAyHZqemWQq_wzideYC6YczzLiuCssUbZmO43algTCfZ9xqvIgB64EmsxoiXKfCLMM64Vro51Paj3iJVWQqAv67bhu3cPmpd59yNFLkjWnn92djaZBucUagc4Md-kkA2h4mqkaofSa2HpcZRAv6wN206tKwz0pATikgQNqqXyE3GbFYM_ke0ANq6EvzG_C3R96tkIaTtKzON326KECzqRhtPe-QGuUI6eMbVCeVx4ozeO3pPUNPagKvQLmE0XiptLj2FekJFc6h2pwYiZJdOwXaalB72j4vC7mrzv6YM9M8lufek_wNMbNN3IsdK7xsix3OyX9mUAVjjuntwm8WIxJNpa87gSploLQKqMLmCaqW-GaFLzEuEZh9hIK-KMpW_KVktsMubY7A7LSSWu9Za7BdypkYhiBh0dYsQ2YLIMnXESgfdDHRW6_dHpckgUlpBpwb_cmAJ79OPqRtdzJztdM-i7BUYj3B_ZR5S6vI-HgVbklaoZMPGE5qDVDPdrOLzsISyBdKou5yEIC4iHH-rjpgZERSX9LHE7GsC4xtwSrLHYpHgBK_jFJPHOzjjlAf6tJWOgIpeKVYys0GoItilz2M7_vbcPdb1uazFO3rmtVp5o [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49709	91.220.42.235	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:14 UTC	3319	OUT	GET /r/oVmfKtrMaWNW0Ws36O78X_OkOKFuIHUHD3fz7q0tusMdFQdR7TDnm8aybopRegBVFa0fun8jf60zlrCHjmFXWf-EV8YvX6Bxir0QElT0x5MDaJByV7iaxvirocNzwSqJ2_U4_91FKjKJ3R0d1LDPRs9iW641qXHX8EKq7oXNKFj_z_fUC2u9OSaKRXsoNLxOOqa4qArDFFSZpfDji2tw5bTqPI9bmNaG-xY0B9eOHhNSKQxj3uA01up_ounuskoro3uNrT2YyHg1H26ZfccCjXX8-1EHdXSftewHVQ6eR_Q2IOEA1Z_eugsw83gWILgscBIINGDyyzZ8KI6evR2S_uVYYv0IdRr56rVAyHZqemWQq_wzideYC6YczzLiuCssUbZmO43algTCfZ9xqvIgB64EmsxoiXKfCLMM64Vro51Paj3iJVWQqAv67bhu3cPmpd59yNFLkjWnn92djaZBucUagc4Md-kkA2h4mqkaofSa2HpcZRAv6wN206tKwz0pATikgQNqqXyE3GbFYM_ke0ANq6EvzG_C3R96tkIaTtKzON326KECzqRhtPe-QGuUI6eMbVCeVx4ozeO3pPUNPagKvQLmE0XiptLj2FekJFc6h2pwYiZJdOwXaalB72j4vC7mrzv6YM9M8lufek_wNMbNN3IsdK7xsix3OyX9mUAVjjuntwm8WIxJNpa87gSploLQKqMLmCaqW-GaFLzEuEZh9hIK-KMpW_KVktsMubY7A7LSSWu9Za7BdypkYhiBh0dYsQ2YLIMnXESgfdDHRW6_dHpckgUlpBpwb_cmAJ79OPqRtdzJztdM-i7BUYj3B_ZR5S6vI-HgVbklaoZMPGE5qDVDPdrOLzsISyBdKou5yEIC4iHH-rjpgZERSX9LHE7GsC4xtwSrLHYpHgBK_jFJPHOzjjlAf6tJWOgIpeKVYys0GoItilz2M7_vbcPdb1uazFO3rmtVp5o8tgx_9mBxLDY9W8WP3DHTKo2ZJgkg00HhX_VWbYRFs [TRUNCATED] Host: url.uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:25 UTC	458	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 02 Oct 2024 15:13:25 GMT Content-Length: 0 Connection: close Location: https://security-uk.m.mimecastprotect.com/ttpwp#/block?key=OAPaJlOWQcvgsrT_iXGbgjqjmbEBF-q-27kltg4x8dCyP-6B1_VS26x_b-3_IKLQqjh-Lh5MBe7BzMhURffLVHCtnhl_FVakOs4kvrR7JeHTZSJ2pGXx3oDPk5DdH_P_ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 15:13:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=91953 Date: Wed, 02 Oct 2024 15:13:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 15:13:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=91896 Date: Wed, 02 Oct 2024 15:13:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-02 15:13:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49716	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:26 UTC	681	OUT	GET /ttpwp HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:26 UTC	434	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d77-JdL/eOsS7z2yo5B+jSzjnBxVBdk" Vary: Accept-Encoding
2024-10-02 15:13:26 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49718	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:27 UTC	545	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:27 UTC	533	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:27 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49719	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:27 UTC	547	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:28 UTC	536	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:28 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-10-02 15:13:28 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49720	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:27 UTC	544	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:28 UTC	537	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:28 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49721	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:27 UTC	542	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:28 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:28 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-10-02 15:13:28 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49734	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:29 UTC	657	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	487	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:29 GMT Content-Type: font/woff2 Content-Length: 137104 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"21790-18d89b1f630"
2024-10-02 15:13:30 UTC	15897	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 0f cc 4f 6c d2 1a 86 c3 e9 8b 88 99 f3 d5 a1 91 67 4c b2 13 7d 63 a8 9b fe c9 ae f3 d5 a9 a7 a7 09 39 b1 36 9f 9e a3 1f a0 90 ed 3a 9a 44 0d 5c 8d 8d 7b 81 1e 8a ae 3d 1b e9 ef 78 68 a7 d2 d5 cc 4b 22 83 b2 53 fb 67 03 b5 43 80 31 6b 6e ea 0b 64 9e 5d 91 43 ab 53 e6 59 13 e2 65 23 13 4e a3 13 df ad 58 23 54 ad 67 ae 58 f6 17 b3 09 75 e2 b6 66 07 58 34 68 96 e2 6f eb 86 2c 9f 25 ed e0 16 6b 9d 16 2e 94 d8 e0 3e 0a 07 e2 b6 59 1c bb 22 ec 90 46 04 ba b2 e9 b8 07 e6 13 6c a8 8e 18 57 fb cf 2d 26 80 6a f1 0b c9 b4 76 9e b1 48 c1 b1 36 31 27 0c 29 55 f7 b1 37 65 8d 37 ab d5 cd 2c ca 86 65 bf cf 8e 2b 4f 7c 6a e2 d3 8c 1b 3d 66 6c 63 4c 3b 5d dd 62 40 41 37 42 38 4f e5 fb b1 65 53 54 1c e7 3e f9 08 40 0c fb 47 77 8c 0f da 6a 5b 2f cf 18 be e8 53 2d ac a8 ae 00 Data Ascii: OlgL}c96:D\{=xhK"SgC1knd]CSYe#NX#TgXufX4ho,%k.>Y"FlW-&jvH61')U7e7,e+O\|j=flcL;]b@A7B8OeST>@Gwj[/S-
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: b6 a3 dc 1f d7 6d 94 a2 70 41 3f 30 2b e9 4d 9c 50 fe 51 07 81 e2 46 1d 88 9a e1 20 91 d8 c3 84 a0 6f ff fa 8f d8 09 d6 ac da 1f b0 13 ac d8 d5 ef 7d 10 ac 9a e5 29 b1 96 ef 48 1f 0a 57 49 85 a1 54 60 01 b0 36 f5 e9 44 9f 11 ed f1 46 d9 0b 9a d1 0f 72 d8 42 eb 3e fa 6d b2 04 91 8a 6c 6d 92 ce cd 74 c0 6c b8 ba 93 46 15 45 1e 42 ca 91 be 7f 40 60 c3 89 82 3f a2 a1 04 7b ac 57 5f 34 f5 f9 08 4c 29 ff 61 12 8f 7c 76 78 b5 a8 5c 8d 64 a1 af 05 cd 2a 12 3e 6f 3a a0 09 ea 41 ab 5d a6 2c 37 8d b0 de 10 80 0d e2 a2 e5 30 4d 4e ee d7 d2 a8 cb dd d5 ab f1 66 1e 02 e1 ef 30 96 58 aa 1a fe 63 9e c5 03 c6 b7 7d cb e7 35 b8 92 84 fd 7d 65 21 6a 1c 2d 1b c1 d3 d1 73 56 1e 2c 9e 17 d6 14 ef 7f 0e 22 c4 bd ec f0 aa c8 83 3e 49 99 cc 25 7c 2c 49 8c fc 46 fe d1 3d 45 71 e4 Data Ascii: mpA?0+MPQF o})HWIT`6DFrB>mlmtlFEB@`?{W_4L)a\|vx\d*>o:A],70MNf0Xc}5}e!j-sV,">I%\|,IF=Eq
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: f7 a6 35 f3 4e af be ab 74 f9 38 66 2e 2b 08 49 48 2b e6 97 ae 58 68 87 8e 4f e3 42 6a c0 27 3e 24 94 ce 22 13 79 aa 3a 0e 61 58 29 5a 0c 8c 27 55 08 51 55 0f b5 92 a0 35 71 8c 71 d8 dd a3 76 fc 9b 25 e1 0c 5c ed 4a 50 04 d2 1a c8 c2 d2 16 74 39 ba da 75 d5 e2 f2 4c b6 50 ff e6 e8 14 99 6e c4 82 a4 52 2e 1e 64 97 eb 59 d1 08 b3 17 f6 88 c1 2e 19 b9 73 69 a4 27 77 c5 f3 ae eb 36 78 8c ac da 87 cb 33 d8 42 c5 c1 d8 9a 0b 95 7e 97 e4 d0 60 a1 6d b0 c9 79 9b d1 1b bc cb fb e1 00 3c d3 b3 c3 16 ba ba 10 ae 36 82 bb 3e 6b b0 65 ae d7 17 eb e6 60 3d d9 29 42 ad 68 bb 78 6a 1c 5f 9d 92 d1 a4 60 b1 f8 da 1e f6 b8 32 8b 48 55 64 89 77 3d 21 50 a4 22 8c d6 4b bc da 22 64 e5 da 9e 85 5c cc 0d 4a 32 33 0e af e9 cd 4c 0a 22 d7 9e 46 6f 20 9e ec 23 96 0f 85 a9 7c 4b 96 Data Ascii: 5Nt8f.+IH+XhOBj'>$"y:aX)Z'UQU5qqv%\JPt9uLPnR.dY.si'w6x3B~`my<6>ke`=)Bhxj_`2HUdw=!P"K"d\J23L"Fo #\|K
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 90 b7 1a 1b e1 08 5c ce 9e f7 d5 75 13 c1 24 81 e6 f5 1b 23 93 da 05 1c 7b ca 40 8c 57 57 c7 e0 35 42 9c ff af 7f 69 a3 8e 47 45 2f 7b e3 93 e2 ed 73 fa a2 86 1a 8f 48 31 13 ae 0d 76 b6 37 50 c6 6f 25 d0 73 ca a1 f8 f1 f2 1e d8 24 c7 2f d2 8c cc 5b f8 5c 23 81 6a 28 39 68 6e 8c 60 33 f8 5a 97 4b bf 58 bd d3 14 cd b1 4e c5 ce 04 45 27 3b 8e ff 06 14 f5 cf 9f df d8 18 28 be be 13 2f d1 e9 40 a1 55 4f 23 92 db fa 8b da 7e 5a ff 3d 10 1d b8 82 b5 fd 21 27 b9 ca 44 d2 b8 43 1d ec 30 1c 0f 62 06 49 39 4f c4 b5 45 da e6 e8 e2 98 3b e5 99 2e 43 f1 db 54 44 d1 c3 0f cb 61 4e f6 d4 60 54 8f 88 b6 ec d7 a5 a6 c8 51 f3 ef cb 03 7c 68 25 87 c0 50 82 99 92 89 9e ed 68 af 2b ba 8a b0 fc b0 14 ed ac b0 1f 97 95 9d b7 2d bd 13 46 60 c8 7b 8b 83 9e f9 12 fb cf 0d 9a ee 9c Data Ascii: \u$#{@WW5BiGE/{sH1v7Po%s$/[\#j(9hn`3ZKXNE';(/@UO#~Z=!'DC0bI9OE;.CTDaN`TQ\|h%Ph+-F`{
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: a1 35 53 99 88 9c 1a ca c1 40 cc f3 bf 63 39 53 a2 6e 0c 10 b4 c5 46 3f 6e ea 80 77 a4 72 5d 0b 8b eb 07 36 70 43 80 9c c2 fb fd bc 33 84 2b 42 91 53 f3 13 33 ab 48 ba aa 67 d7 0e 48 2f 6d fb bb b0 fe c1 fc b5 ed 92 c7 81 a7 cf aa 58 47 56 91 58 ea c4 79 1d 7b 13 81 7a 15 58 fb ae 24 f1 08 44 55 2b a1 ca 7c f6 4f ca 31 f7 50 ec d4 b0 4f e7 0e b2 72 5c 78 53 4a e4 a9 6e b6 70 76 bb 79 12 dd 98 27 2e db 12 cd a3 01 13 b3 dc e7 d2 ca 0d 75 ee 86 11 aa 7b 1d 75 b6 be 8e 53 b0 3b a9 7a 31 f1 1e be 07 f0 57 c3 6a 7a 75 9f b7 97 8c c9 32 b1 78 87 5d 67 9b f1 fe f1 cf 1e 5a 86 d7 4d 7a c1 9b 1a 5a d4 d4 92 8f 7d a2 82 27 05 d8 5e 32 2b f1 88 23 a4 ff 19 d5 7e 0e a0 9b 7c 5f c4 ba d5 70 c1 24 76 a0 91 6e dc db 52 cf bb 1a 9e b5 52 54 c2 11 5d 3e 88 43 7f 11 93 2a Data Ascii: 5S@c9SnF?nwr]6pC3+BS3HgH/mXGVXy{zX$DU+\|O1POr\xSJnpvy'.u{uS;z1Wjzu2x]gZMzZ}'^2+#~\|_p$vnRRT]>C*
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 52 67 87 e5 4d ba f3 da 59 cf a6 a6 6e 97 66 ca f7 51 80 90 a8 bf a4 19 d5 44 d8 32 61 d8 c6 e4 e3 61 62 b1 d7 b0 48 bc 72 d1 b9 de ce 30 91 18 24 be 93 62 b4 93 09 f6 1f 51 4d f3 6d a8 9f bc 84 6c e9 0a fe 8c 71 ef 74 4b c9 49 fc 62 bb c5 ed d2 bd a2 fb 8c 3c cb 3c fc 19 4f 89 2c 76 0e 7a 13 50 8f 01 9d 72 15 8c ab bc 2e d6 32 0a 87 2a fe 1e 0c 6a ae f7 80 fd a7 4f 86 f8 82 33 9f e2 17 74 7d fc c2 ea 10 da 75 1b 5c dd de 96 5d 0f e7 be fb 97 70 da b7 bc 1b ff 8e ee 9a fb 65 5c f8 58 02 a4 c7 16 4d cc ab fc 51 2e b9 22 51 3b c3 7c e3 72 ca ea 7a 22 a9 b0 29 c6 1a 50 4d ca f2 52 0c 4d b5 00 a7 86 45 5b e9 88 e4 19 9f a9 8e f1 fc bc 63 c3 9f 1e df 47 47 24 2f 4d 8e 50 6e ef f7 f6 e7 06 45 73 a3 fd fe 68 18 3d c7 c9 f5 4f c2 f1 49 fe 5c 7c 72 34 1b fe c5 80 Data Ascii: RgMYnfQD2aabHr0$bQMmlqtKIb<<O,vzPr.2*jO3t}u\]pe\XMQ."Q;\|rz")PMRME[cGG$/MPnEsh=OI\\|r4
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 6a a2 29 33 2b 25 81 17 2a 72 1f 4b 88 26 3a 33 95 0e 95 c8 52 ee 3a 12 0a 3e 89 30 a9 71 46 57 17 ad 23 d2 47 7e 60 f3 81 86 4d ac 50 d5 f2 90 ea eb df 41 be dc b1 7f 23 63 de 4d 96 d2 6c 90 2c 98 0f bb 44 a1 23 dd 10 e9 be 15 ae d2 d7 00 e7 b1 37 dd b0 42 aa ce c8 08 ef 10 bc d1 c8 da c8 52 c3 cb 19 af db aa ab 07 59 ae de ce dd 1b 95 ef 3d 3f 6a 5f b1 76 cc a5 8f f1 1d dc 8f 8f 75 42 d7 0f ee 5f e1 fc 30 7e 56 40 f5 12 c8 de 7e e7 95 8b 4b b9 4e 70 1f cc 80 e6 95 a0 72 54 d3 86 e6 cd 13 1e 43 70 71 58 1c da cb 35 ef 31 84 a1 b8 a6 d9 cb cf 61 ee 5e 2c 80 f3 0f cc 0c 71 f9 cf 02 c0 1e 2f 64 c6 c5 d7 e8 f3 eb 66 c7 a2 b1 cc 3c 45 ac d1 d7 83 c5 c1 3c c4 15 21 2d c8 c8 9e 19 14 34 53 e2 3f ee 02 98 1f 0c 4b b1 9d 6a 02 93 5a 74 5c 5b 65 e4 db 80 e6 01 c3 Data Ascii: j)3+%*rK&:3R:>0qFW#G~`MPA#cMl,D#7BRY=?j_vuB_0~V@~KNprTCpqX51a^,q/df<E<!-4S?KjZt\[e
2024-10-02 15:13:30 UTC	6519	IN	Data Raw: e4 c4 03 48 1e bf ea 31 f2 fe 38 48 f5 29 00 bd 8a e3 0d 8a d9 e1 40 97 92 dd 9c 15 0e b5 1b 6f 44 60 77 29 6e 51 16 34 b3 5e 38 d1 f3 ef 50 35 40 32 63 52 d1 27 62 e7 5d 1f e4 86 13 19 f3 d5 b7 b8 ae b0 da a1 8b d1 7c a3 66 17 a4 e4 e8 f0 50 2d 39 23 87 3b d5 08 3b 65 ff 1f 89 99 99 7b 22 11 6f a0 e6 a6 98 12 fe 9d 6e 8d 6a f1 0d 39 de 04 db 4e d0 38 5b ff 83 e8 be 4a 3d 8d e6 68 23 77 85 14 dd 05 06 ce 58 28 e9 35 86 9d b7 eb fe b8 25 8d 99 5b 3c 46 1f 69 30 82 4d 78 a0 33 08 54 5d b3 5b f2 45 04 82 16 91 6b 6f d0 9c a7 63 84 19 35 8b 35 5e 76 ab 50 37 7e 16 2a 6f c5 bf 6d 95 a9 c0 a5 d1 70 a4 a9 f8 72 68 84 8a fb 02 2a 73 aa 42 e4 4f 65 79 51 d8 52 a7 83 27 b5 2b fc 75 40 e0 3b 6e f1 07 c1 17 89 b7 4c 43 06 d5 b2 48 c0 84 92 12 84 f6 42 7e 89 7b 8b ca Data Ascii: H18H)@oD`w)nQ4^8P5@2cR'b]\|fP-9#;;e{"onj9N8[J=h#wX(5%[<Fi0Mx3T][Ekoc55^vP7~omprhsBOeyQR'+u@;nLCHB~{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49729	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:29 UTC	404	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:29 UTC	533	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:29 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49727	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:29 UTC	406	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	536	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:30 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-10-02 15:13:30 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49730	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	403	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	537	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:30 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49728	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	401	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:30 UTC	15846	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5c 75 30 34 34 Data Ascii: 4f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043f\u044
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 69 73 46 6f 72 6d 61 74 3a 2f 44 5b 6f 44 5d Data Ascii: \xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("_"),isFormat:/D[oD]
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 36 33 5f 5c 75 32 64 35 36 Data Ascii: fineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62\u2d53\u2d63_\u2d56
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 Data Ascii: updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}function L(e,t){var n=!0;r
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 6f 29 7c 7c 64 74 2e 65 78 65 63 28 6f 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 3d 3d 66 74 5b 74 5d 5b 32 5d 3b 62 72 65 61 6b 7d 69 66 Data Ascii: T:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,s,o=e._i,u=ct.exec(o)\|\|dt.exec(o),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!==ft[t][2];break}if
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 28 7b 74 6f 3a 74 68 69 73 2c 66 72 6f 6d 3a 65 7d 29 2e Data Ascii: set(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt({to:this,from:e}).
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 72 73 65 45 78 61 63 74 3f 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 6f 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 7d 2c 79 6e 2e 69 73 50 Data Ascii: rseExact?(o(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(o(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex)},yn.isP
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 Data Ascii: 35\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u0432\u0435\u
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 38 5c Data Ascii: 0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u0443_\u0448\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49731	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	668	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	485	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:30 GMT Content-Type: font/woff2 Content-Length: 37608 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"92e8-18d89b1f630"
2024-10-02 15:13:30 UTC	15899	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2024-10-02 15:13:30 UTC	16384	IN	Data Raw: 30 ff 97 55 a3 dd 4a 98 74 fc 1d 83 f0 9e ff fc 77 93 f0 07 4c c4 e3 ba a4 82 18 61 e5 f4 8a e3 d4 f8 ff 6c 4b 8a 92 a2 a0 cc e5 a8 30 d2 08 4c 00 9b 9b 95 da d4 30 64 74 f0 d2 a0 cb 76 ee 3e 11 83 e3 6a ad 5b 0e 85 17 bb 23 bb 40 81 27 f3 97 b7 2c 40 a1 3c f7 32 13 ed f0 02 da 35 87 bd 38 c0 0f 39 3d b4 aa 24 b4 ae c3 56 ec df 36 36 59 5a 77 c4 2d 65 d8 ee bb 1d 03 24 fc a3 73 36 eb 6e 1c 69 dd 7a 75 f5 de e1 6c e8 1a 8a 49 59 09 83 71 90 44 08 46 54 f8 ab 50 28 2f 84 22 a8 40 a4 ab 55 0a db b9 a7 a6 5c 31 13 8d dd fd 30 47 21 e4 f8 52 e2 28 c1 30 18 09 2e 22 18 30 ee 2e 68 13 08 6a 1e 38 77 a9 17 da 19 ad ec 02 1c e2 97 92 f5 ce 4d f6 55 ef 29 de 3d fe 05 7d 95 bf 17 80 30 ad 4b 65 a3 ad ef 83 31 6f 52 df 48 6f 58 d8 f1 bc 80 7e 75 3f 93 17 c7 c5 f1 71 Data Ascii: 0UJtwLalK0L0dtv>j[#@',@<2589=$V66YZw-e$s6nizulIYqDFTP(/"@U\10G!R(0."0.hj8wMU)=}0Ke1oRHoX~u?q
2024-10-02 15:13:30 UTC	5325	IN	Data Raw: 05 e0 1d 01 df a5 f3 b4 96 e6 75 df 45 19 80 a8 d0 ad ff 46 55 eb 3f b6 9e d6 a6 66 06 05 dd 07 11 f4 9f 2f da 16 52 b3 0b af 46 23 d1 d4 20 51 c1 85 31 3b d4 26 f3 c8 bb 09 79 39 76 76 e6 a9 24 e7 46 43 53 55 07 39 68 b4 be 94 95 d7 d1 ca e9 cd ac 1e ff c5 a4 7d 51 a9 8a 13 7f 34 74 c9 ba 12 ba 14 aa ae 33 6a 18 5e c9 4d 1f eb db 36 f1 b5 b1 03 34 1c 93 31 66 aa 3b 36 e9 27 87 2b 2b 0e 85 7f 6e f1 2d 59 b5 49 d7 26 d1 d6 dc 00 39 70 ed 30 bb 9b 61 c9 3c 28 6a a0 25 a0 6a 67 d0 27 f8 98 ab 5b 86 cb 52 e3 e8 92 ec 68 7f 34 6a 30 34 c9 69 95 22 3e 1d eb 2f b9 0d b8 8b 2f 25 4a 7e 40 35 b8 c8 9b d1 d4 cf 3f 15 7c a8 f1 40 b6 e7 aa 3a 3d 3c d9 9a e4 10 90 c2 c7 23 54 58 ab 29 51 93 7b c8 a0 b5 e0 1c ed 7f da 53 da 24 8d 90 c6 4c 7b cc 94 b0 d3 a7 e7 9f e6 8c Data Ascii: uEFU?f/RF# Q1;&y9vv$FCSU9h}Q4t3j^M641f;6'++n-YI&9p0a<(j%jg'[Rh4j04i">//%J~@5?\|@:=<#TX)Q{S$L{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49732	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	613	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	529	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:30 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:30 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-10-02 15:13:30 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49733	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	678	OUT	POST /api/ttp/url/get-page-data HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Content-Length: 173 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://security-uk.m.mimecastprotect.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	173	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 4f 41 50 61 4a 6c 4f 57 51 63 76 67 73 72 54 5f 69 58 47 62 67 6a 71 6a 6d 62 45 42 46 2d 71 2d 32 37 6b 6c 74 67 34 78 38 64 43 79 50 2d 36 42 31 5f 56 53 32 36 78 5f 62 2d 33 5f 49 4b 4c 51 71 6a 68 2d 4c 68 35 4d 42 65 37 42 7a 4d 68 55 52 66 66 4c 56 48 43 74 6e 68 6c 5f 46 56 61 6b 4f 73 34 6b 76 72 52 37 4a 65 48 54 5a 53 4a 32 70 47 58 78 33 6f 44 50 6b 35 44 64 48 5f 50 5f 22 2c 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"OAPaJlOWQcvgsrT_iXGbgjqjmbEBF-q-27kltg4x8dCyP-6B1_VS26x_b-3_IKLQqjh-Lh5MBe7BzMhURffLVHCtnhl_FVakOs4kvrR7JeHTZSJ2pGXx3oDPk5DdH_P_","pageType":"block"}]}
2024-10-02 15:13:31 UTC	510	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:31 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 205 Connection: close cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow x-mc-req-id: c41fec58-557c-4a5a-b3a8-7821746aa951 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"cd-dWFZ9SBXJx3LlIfYvzaHUlB7Me8"
2024-10-02 15:13:31 UTC	205	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 2c 22 73 61 66 65 22 3a 66 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 42 6c 6f 63 6b 65 64 20 55 52 4c 20 43 61 74 65 67 6f 72 79 22 2c 22 63 75 73 74 6f 6d 65 72 43 6f 64 65 22 3a 22 43 37 31 41 31 37 33 22 2c 22 66 69 6c 65 44 6f 77 6e 6c 6f 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 48 65 75 72 69 73 74 69 63 73 4d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 61 63 74 69 6f 6e 45 6e 66 6f 72 63 65 6d 65 6e 74 22 3a 22 22 7d 5d 2c 22 66 61 69 6c 22 3a 5b 5d 7d Data Ascii: {"meta":{"status":200},"data":[{"pageType":"block","safe":false,"category":"Blocked URL Category","customerCode":"C71A173","fileDownload":false,"isHeuristicsMatch":false,"actionEnforcement":""}],"fail":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49735	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:30 UTC	598	OUT	GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:30 UTC	483	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:30 GMT Content-Type: image/png Content-Length: 4228 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1084-18d89b1f630"
2024-10-02 15:13:30 UTC	4228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 78 08 06 00 00 00 d2 7f 4f 94 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRxOpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49737	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:31 UTC	397	OUT	GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:31 UTC	483	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:31 GMT Content-Type: image/png Content-Length: 4228 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1084-18d89b1f630"
2024-10-02 15:13:31 UTC	4228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 78 08 06 00 00 00 d2 7f 4f 94 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRxOpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49739	91.220.42.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:31 UTC	592	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:31 UTC	508	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:31 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:31 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49738	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:31 UTC	390	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:31 UTC	529	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:31 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:31 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-10-02 15:13:31 UTC	1297	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49740	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:32 UTC	382	OUT	GET /api/ttp/url/get-page-data HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:32 UTC	439	IN	HTTP/1.1 404 Not Found Date: Wed, 02 Oct 2024 15:13:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 180 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding
2024-10-02 15:13:32 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49741	195.130.217.89	443	3464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:13:32 UTC	391	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:13:32 UTC	508	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 15:13:32 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-10-02 15:13:32 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Target ID:	4
Start time:	11:13:07
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	11:13:09
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2024,i,14144066786699680077,1103834911799437713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	11:13:12
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com HTTP/1.1Host: url.uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/oVmfKtrMaWNW0Ws36O78X_OkOKFuIHUHD3fz7q0tusMdFQdR7TDnm8aybopRegBVFa0fun8jf60zlrCHjmFXWf-EV8YvX6Bxir0QElT0x5MDaJByV7iaxvirocNzwSqJ2_U4_91FKjKJ3R0d1LDPRs9iW641qXHX8EKq7oXNKFj_z_fUC2u9OSaKRXsoNLxOOqa4qArDFFSZpfDji2tw5bTqPI9bmNaG-xY0B9eOHhNSKQxj3uA01up_ounuskoro3uNrT2YyHg1H26ZfccCjXX8-1EHdXSftewHVQ6eR_Q2IOEA1Z_eugsw83gWILgscBIINGDyyzZ8KI6evR2S_uVYYv0IdRr56rVAyHZqemWQq_wzideYC6YczzLiuCssUbZmO43algTCfZ9xqvIgB64EmsxoiXKfCLMM64Vro51Paj3iJVWQqAv67bhu3cPmpd59yNFLkjWnn92djaZBucUagc4Md-kkA2h4mqkaofSa2HpcZRAv6wN206tKwz0pATikgQNqqXyE3GbFYM_ke0ANq6EvzG_C3R96tkIaTtKzON326KECzqRhtPe-QGuUI6eMbVCeVx4ozeO3pPUNPagKvQLmE0XiptLj2FekJFc6h2pwYiZJdOwXaalB72j4vC7mrzv6YM9M8lufek_wNMbNN3IsdK7xsix3OyX9mUAVjjuntwm8WIxJNpa87gSploLQKqMLmCaqW-GaFLzEuEZh9hIK-KMpW_KVktsMubY7A7LSSWu9Za7BdypkYhiBh0dYsQ2YLIMnXESgfdDHRW6_dHpckgUlpBpwb_cmAJ79OPqRtdzJztdM-i7BUYj3B_ZR5S6vI-HgVbklaoZMPGE5qDVDPdrOLzsISyBdKou5yEIC4iHH-rjpgZERSX9LHE7GsC4xtwSrLHYpHgBK_jFJPHOzjjlAf6tJWOgIpeKVYys0GoItilz2M7_vbcPdb1uazFO3rmtVp5o8tgx_9mBxLDY9W8WP3DHTKo2ZJgkg00HhX_VWbYRFsHJdhVV6_Irj3SspM9_Q2XUDvpI8h1FUM5GzIS69AVxE3_bSwp8PJodBXLxn906Zc8C-ibz4S7cRURhLiW6tFoETjNveNxYqQsHu5udAGp_K51_7RHKwiqXSxuhEWPnecamZeNR3YggvAqWhh0YxLdQm4l3FTklzQjV02JxlG6822Nuf_zbvVdQ5PEO-n7MRceplYDHHWzche4ECZC8KTsJFu3oTvDWQSzR8QkVm6FmhG8z7aRkA5YSEbO9pPA-5rSQiPwiQD0iMEcUA5j8qFN54WDsTso11R-9wL3yGI2flRDfAnx3BFwLE0_3MYbtEf7jbKQfQF3pixC1A8YdbpOQUmBGyiUP1fRDwgnN8RLqjkN8lK29q6ivr_zpKdZXzc4PVieD7jpopgRxNRYFqL4_4bzwdd6o47cIpHqhvkt_StBV0H-0KUmkwOzjPPL5cXw1G4e5y8_StIqNUKURjFgNzS0KUbkYrL0Lv8Ckgex7ZVd3AcK5JTpoMRWOweXdMzeBlPHqfeVkE7t95EbxsWpCsjHBEUia0CSST6aa8_ganUaww5UO9tVCOzY3rCZMQ7xqOOg-S8ce5_Ifq1ycZe-nJX6scNQviiKpxgZ3cT_WiV0aNaPoa__c9HlEk8EbpJqg05pahsxhuBWL8nzE9czVQ87Vu5Uano3Ld4hvlYPCaCLzFQ3Qw9xfgmzjAlFPVIdzDf_pd9P9IxGLaFYEUFyL4_UghPfCMmwOz4LFDW8mBWW77g7hHr7Vs8i-UruyYBciy8ojtAd3D0cfN3_5VWjdoK5NTR4HjQkLcj_9FDeGzjDJMvf3T_ZdpwQLKmny7iAPP1sYjk1g_yjltNBPy7dsoG86blE25qbucr9abaJ9rSr72q_1X1d_tng8DEj8ibc-2CF_kKII4zLQb6imx7-qGAxfHrE01WrtwZycla_dz1Hu6jIQw1gVMVPpPJg9uVl_OjKn33h41xWzm586BZTyNwaqqNAgU_GxNZvzxoMtuRmovetcfNaAy7sjn9CazPODtNmhXLARicvA1ftQicqpLmQNXnODws0lP8aEXsl5HnwmMsxeFfy0tmuYvj00Aakgd8wrDkcERxTgWTvw4-GP4TfQEPFjZeXM68HwToqDB25l6F6voQ8AzA8vHsP9dJvAW0P6zXpaUStPxjZoRAuz1uVHtW50Fm5f5X-1u2NiQXG2-7QuVQyqxNgd3bDkRIjK0Z9NuUkVg_8Oqpnf0fJlDNH-R0puMgTVBEbrvC5uTDpdQrWuxODk08MW7yKud1cBw_l9GFYgjwiDpIbv_UKvrpSA83j9yUErNkIubuwBUsbJ0c49_Q67qT4G0ASvJg70VQcO0ORzqcyBXP2BMfgphTqDjhuvcj-bQcWhukLaVX9m3Kigx3qkSklNjTP5cZLtH-x5QS7SmXZMRnSeHuhciF7kKhE2rEuC4m93GAA8FhU9QmXf4-wO3pgbj-P3rppopcK4RQkUlN4hWXYR6xZ1rqlZVjweTZ8DT9qpFFzopZwVxEAnugK3brf6f1SNfboIG4FPuCdhlly73ZslQXALyNCJ1EMgc3gSF918PvmK2oqZXbZjTcW1CzX06UW2_iUTp2iWXx8VmMaK9ONIjYl9wGpdVhA HTTP/1.1Host: url.uk.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/sign
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ttpwp HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-uk.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-uk.m.mimecastprotect.com/ttpwpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-uk.m.mimecastprotect.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-uk.m.mimecastprotect.com/ttpwpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ttp/url/get-page-data HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: url.uk.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: security-uk.m.mimecastprotect.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/QizLC2vk6UDrKEinf6F5M4b3?domain=tqaun.us12.list-manage.com