Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com

Overview

General Information

Sample URL:	https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com
Analysis ID:	1430867
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1984,i,12593039912173914650,15885612422497244575,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match

File source: 1.2.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/

Matcher: Template: postei matched

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/

HTTP Parser: Number of links: 0

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/

HTTP Parser: Title: does not match URL

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/	HTTP Parser: No favicon
Source: https://kmg.zaz.mybluehost.me/south/manage/Canada_fr/	HTTP Parser: No favicon

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/

HTTP Parser: No <meta name="author".. found

Source: https://kmg.zaz.mybluehost.me/south/manage/ene/

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49721 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49715 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49721 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com HTTP/1.1Host: url.za.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/xoWRNKoEAKwPduYMk1dDQh2BNiEd7n2wLpzHtGfntaY0zf4QTgI4Yd-_7zM9sn9YSGmhjE9MvonWTgl37KzHVsgVNdhyq9qICtTMZel6-Gm9DYNGiUZPWWI-zKSjb58E2THL0qSOdFc-kp60XOkO98CHHh24g4cGG2AxG86Wcq1Cn8A4RjTw7wuvsm85nIxnkmsuhCQZ3ok8DKaa9NcEOIYHmiEfrTBY2Je65wT_BoiuXzrp-u0PmvvWsmkys-AqLI60ex-QHHuxFtGL_wMt512T_wuN1dyJrrPVSn7xtAnF1X3scV5rfCv6X6vM7QPvJt0KEP10J3tC3YewFJI4q7ngCwiwYdO1L_2kxZ1Uy7nCU3O-R0qH1N1GvrlMICsH1H9qV7YFpUCO0nChe0iQCIXThqB3olaZVdU8O-P3P78BpUlcFWX9d5dYcRNib9eUYfUEfHwzijO9mfKQhnekH-xO422dVavDE-1A5i4fGuHT9Z_rP-95A9KVWxta6DJmYFX4us-O520tiEwcQw2iQHp66a7BbJRPz-Oj1DF3PVUdAmu0p1HTkCNNUpZj5vyDL8qdU1afvxCcInhC88f-zK8DB7mRoTi1xKCk4e2QDXuJ5pMPMt_zvM3K-ZkT3dgPDj0sSIeZcdV7ywThjKmqPhyWFkoKyRu_tyTYnvYI_hPeCeTkLacLtW8fLr5gk6kZYfXSUIbjzGgscgIrBtt7TXq1g7MZfk3rf0iTepYFC0zCpwJAR55VV1LBfGxnyVc7vBqYqsSslxH-zx5xlDswj_R3xwk_wajnzBlWA3pD3S2PfQyIdLYstm2kqxAiaOZSc9o85AyY4LEd3YiS0PJQ9tlseUxrnzsKJvSAp42tfBhPTF6UnjfIxD2MxXWHz-TwjdI9KAHPMEMb_4r35nM-4-YGiQjcKZFU6ICR4EG8jYyct_YISleIcFkFnO7C-z6crgaNm9XhqfYY2cqL0kaaANbHXO1TOPTHg4zYtxVt1SU8t4man9IrHv_cANXNcjbpX_SfvW0GrqnSyoMnOZ0lW3fYClCx774wImai5sdBfwnE3YKUKkZc3-_ph90ye4QlqWFWrTuOROYas5ilxukGHP1QI_pAkUP7QDJ8lVhsBOu0kVTjYrRKn3TkwsO2M4j3etVZ1GkGu6n0WryA1aG2B3i_VZzMCkqiGJdI634ZliWPiYu3CehwcTqGMF7MbueWrD2jYCZ35dDtSsSJLZXhbJ3qNliFk_knwTuweAE7ccfP8W-A61xgFGpy7SGR8vOSPNTm5i0OTQfQbvm_FPv6oz8gGKPDjatYuk7bCXXS7yRdCggAH-9Y_1AKdEqjKGN_fApYbE_10scUR8s-XwhyaNbcCj0gcgUqcR47bV0pX9KAwswNrgB7dQIpZrDWrrJDYRAjWzR-9x2_MCQrT395YUoFhhhnzfC5EpE3vSX6j7RxfycbvfY3252BIy9F-Oz10s4eQnNQX4FAULPH9rvTQ5a2E8Lfh0xX9HQQ2rMlQLseC9GSINyF-z4Jj3026u5NT1hGtFTG3Ql4-CsaylaxyQ8q6FGZZ39bLvD0EDmYuKHvIB8JCH0SC48wZPpRS5--2OPKUCsyIReERniumaxJ5qeg_rMTMcdY9IXkby2PLqGEiIUGIoqJjIvJPKdj3bb-adreFyFARMkfwI0foVYbz2-zyk-BEVoGr3qsTKnO1ZxdzSAlcFBs9On_fpzlPCAQew4mUX0sWx9vHB4eaPn7TGDPniq6Lu9hFr8Vu_7UgZ4ugKZyMcA1qrZhFqDWq28DwjbqFPqkXFdVa3mjusWnVuvKmWe2Jddm2Bfdt9wwpf27NtPXnN6YzDgP3hWipO4QBsJaWKUNDthAoOTWx5vPJcxprwOQLNu6dZVAGURav7d8NCVKrnVwTePjaHAKUsv3HYWZEmGybM8gaEaFm_LAm-Zwf64xRn2mj58dWRnLwj1QtEVvw7p325QmceezVW9dYlw29zNdp7Rp29Hr4CsBRbKNGIyCBO63eArRXOYOQQKr8OVkO97DlWQVjtb_9RdcyMRD2bBCjZGJ4_Jjc1QyXwohD0lt_INphHaRXuXzdeeBga2R3A5gRLK4mUSIPC4F1MQxmK5nw-mApgGcAT61tLOarkeUCijhwJnJN5in1qbl74CoWQdJrurW160GGfxhYVvqbGL911AKCysg9Nmc9dXytqEFR4p3Mk-cdixXj0Ehv8fh8P6XiNa062lsq0AWL3V0A8gpj2BGLdxi7EmEcUy4LJCFVXVQExC0v9oWgnt225gjrAARCZJOF28AQKUAMAj9ALJ1ncm_2w7AewzU9CYeeK27JS9F_EaAxJBt9qGzvHnp8wSRyzdczdIT7m0hPLo5SRrP9j0qNw4E6wtBgIEXnDt6hdqNeAf2AI9FSGAjs_zPWEQTfJ6bezor6ggADRDgNTpAcfQHTW5Wxmz7MFRgsVwds6WODJOtRTXjbzAbFSoAwawGaciqapPKMD7Ku5NyX3_VvaqfkKFd1E7jjjProixKT7bwyOIf9VDSMx86eXgTAtnUg0ywWwaccjkl1KMjOg6HR-nXiMzbrLnTnFAweFfVByRwQOELEyj55FnZ5ykakgDERU24ZSn-QnryoBm4S4RVP2tqXK5Wm57HkbSho_Eg62VMKHHujTRit8F5iT0Wb8TLaMz6kcQ6zeYpb_Hy-LAqucrH_A65b4t6aVPVBOYd5jbtRyxvt3dPPkvjL4WC-jhV90egK5621NKWaHVccdGFOw-jAglEBQz5Cow-D9y4uscl5nDhYY82Ct2u6tX6hzRuZ-CpmfQzIRMciEsE5gg3ds5k-es7DxLEfOJ3A2f5hYeoa1CJ2SKfXTG81oJLJhYRF7sYtvCDHFyWNXRtupZ1bkKkB8ml7bygTctkq5S62Rfih-MKSu7r76zKlj8IMGw7uCbbQY8jsjUcjQNLjVkt91dRWsNcYd9aXPqfeu4fJFwRCIx52JmzEcq08DwGj
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ttpwp HTTP/1.1Host: security-za.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-za.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-za.mimecast.com/ttpwpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1Host: security-za.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-za.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-za.mimecast.com/ttpwpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-za.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ttp/url/get-page-data HTTP/1.1Host: security-za.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-za.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-za.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319& HTTP/1.1Host: mautic.joseeustasiorivera.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lists/lt.php?tid=KkoBU15SAgQCA0gADFJUGw1VC1sUUVsLUh0BVVpVU1RXUgVWVAFNU1NTA1BWUgcbWARXAhQEBAAAHQEICQdIAAMHAVNTDFUIAFdRGAVVVQIKWAZSFAVTWlwdDAhdAEhbUVAJS1YCVAJUVFdcAQ8HAg HTTP/1.1Host: aduiwui.hosted.phplist.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/ HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/packeges/bootstrap.min.css HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/packeges/jquery.js HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/packeges/index.css HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/icon-viza.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/logo.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/icon-mastercard.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/search.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/menu.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/user.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/packeges/bootstrap.min.js HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/search.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/logo.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/icon-mastercard.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/icon-viza.png HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kmg.zaz.mybluehost.me/south/manage/ene/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/menu.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/ene/images/user.svg HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /south/manage/Canada_fr/ HTTP/1.1Host: kmg.zaz.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
Source: global traffic	HTTP traffic detected: GET /r/nicvwfju-3Jzcl9E28N5HDz4OffXMjteTYpbNvloFT5zMIVLYBasJLP-0m7ysyE6X9Dy1l_06fq1bB1c25OieLNTQiicCeT9qAlE5FVIm2GbShUPegN24SJA3QaKS7IkbP0sFRh_28ML1bxg1DineadwBRdxHJeWPtBs6K3VZo1OWeXOEworxsmcYsO1rvRpdmKxx2IACgstetB73Ui580n5p9St5P6S72giAq1e1it8X4D8EEC4_U7S_POzILJJ4bMxB2kqHQkOppFGIZYZYViw3o4TYQ4ryXH4U6mWU7ZPVCvZw4MD_n0nT9ebvmB_GrYOopN0X3-00gfUDmq1ZN9sFvJRXav9hSRJryGY0HXj_pgs9EQ6yN-ByTB6G3y5pcxUzxY-iKVUjqsfYkAZxNb7S1fe_uDL5IkoEbL6p0UAix0l4qYBllWf_W6pW81jE_R-knBuIBOQhOwok4g3Mtm0RD9G3_xkJc99-mETfyVxl9PxQc3CmAq6AyBd2wwdsTpWtqoACpcJTaUy3RDIk-ncLlFyJ4NrgTNtHGbUuRRCXQteZV0evO9UdNe3E4NWK7i02zgxhXoHAk9hWVrhjPct8mbYxtcNK2F1LEZlNRm53ZO2xIj_5fpfS7EpAwlpU9jpebStefLCkaPTFvf1IDB3QDPUDEBCzljj6J0An4ZhUrYTXEKHwh7Zh7RZDIO32GERZaBKYL__7dIPqM9WI8OH4X8VSOK7-VdgIoCIF3IcQ90Qs1a_WY1F6lp6xX4RnlJZ2_0-Rl4YPjfOizT006_QukLzC1GylhQWWpAw9rDXbVMHQ3JHl4ILWYpeG4hIGxVwq1btd1jsmhixpv4z-UWkGjNIi0BSY9hOi9XS5ZqlS1VMZsUFK6BjJIkStWEQrrx0Gf3c8dbt5I9u6MIxaqHGH_ou1DmIEI_cqynpT_jvDPmCZ9RQOgurC6Jtm1mQBxTGvRRDe--PQGS_BHs1riDbAQRXXEJ89gg_D-w4-5cTSn-U8jUuH4NZP2vRy1x2ifD2OTQS0tthhr3UzgQd9YIdEMKu0jWEKIizmsKpRJAajPXtmOo0Hhzxu1VBvcY5ZgBVyBdasiQUN9JjZhXhOvTkODAEWjdtIWxZXVKwYIOemBNS52AhebH-D9t05peTotiS3J5wUx7UqcB5rWVfsXATUIy90T3noy4j6O9cTDvypSs9Vy5Bya0wDL4bDcCUZW_Wu4Q4C8f7NhTCk7BJTamlkhzktUcjo3u3TFxfj42MI7brz09zFcRSYHnZWFsJ4L7vbJWZfJ-xC-m318kiGTkw3TakZ3EMwcVrWqiY9JiWNEvfKhBjmaht0Gs060RjsEMxVdbKErGGWoQPmVeKgjRqV4bf7pxNWonrMsSjtrBjuICiYhbZdcrTuAFs67wylq5BL-UR2QpQf6Oy7335Z2rO8uC6bqITcgKCCGGU-EdlXCrRt6qWVlCe1pCmqUB71mje-AJWfN9ZmXQNH3JeTBCY-PpZzTU6kKdofWf768mkdZ8RxRpAxj17ArEDncQQWPg0gEeNrbDh4EiUSYt3V6x_42RmuGDQBP8LAf8cNisINdxJ_cduee_RPiO1ikZ_H-hoMuwkww39um6aIfU27yCEuSBD-fSFQORv986Z4xYo-VmS3O2XDnpZwdlJ0rNiK8lukJ0R_agZqoYaFc7HrRLMbOgHkinsqOVNiznwWWv5GgnKyt4UNqH8WLMFSaNxaAc_EJy3z98KIvUcw76qbBX0HV8386v0n2Kg_Q6nl8aXpgJLYh3d5dEr3t-K2qQS8O-_Smby7NLPoQ7x29HwMLCzHRp7TmMPz87JcUzOfRiAs_Qm7hJ0QeAzRTwGiYbZMpxFU6zwfqcFhk-E2bn_1zhPFZ7Xri1ze_rjdjp6fdSRRg6n4PwNq8B9Lw4Z6Msi194JT2U15bkucUB5D8OASew1fOG9k31Iw8F1M32oPkYxV4DiduPsXuZ4UlgV8nf49QyCtClnaWcKa-Wp9BgL-Uy0_5oVGoIQ0jqjyC0aeHpnhp2t2UWF3kC2kjqxAh9vr8zkOX3zSDmXoqNodrk2NVlO62wayWlRnYr3gfE5kSofKsb-gyJ2AKhxtrVm2xAjkBgpT-2YquoqwuDvj7_DfHGg4ph-2oncL7KIbYp90AnZmGZU6hwqYpfOyTA31UQ8Ha-LbhTzU7_Kgb3zCyIL6ETrHSPpwqCwyKfS4-nxChMuVAPWsrKIfuFJlYQs6Ag1vVG2aAyoRjHS-N6ka0axZGNJm1wtCw-Emk_hCkJKDbNV7LamEsRlBnkhFZ5WplGrdAexpfoGe1hCb9cLMiTF3VF5UcwgrCiXRHkGfuQaiDHpLYCfz9BxQIAzhM5LpJvKkkaUo6BrHOJYPJ6rsRcKQqmkfigrVIZNkNF3Qks441GdDGP7nUwYoBCtnqYKZPt6aDzkpAaW2SfsVdggzMz8Bi6SxgFRhXFXLCLZ9C-5yxdH3lNqRTdKX67iLfucbjc6oqNyctnOjCMex8GYEvszWMc8DnGdlzosPMlSFZt_axqpJSqml9dbMhFazIWPpCusoax0RfMIHt92ct2uzo1f4cZRuU5ZUXdfVx6WxIVtVE0S_om-hkkcS6rq1o58FKs_GqoyW72OO9Mm4UPg6qfnVZiBI6AiZD5T7ubriCjBhplUGMkiSyLJSZJa2PWKKWYUhHZoXprBYbHNebMJqiLj5C3DU3UqsxfIs_8ZpWB3Da3oa3ypajCse2Mis1VJVvtBe6acYJCPEWoiRbHSpfBj4Mt_6tuchXwLs3p7s-fuwMXdeTdqZjtENkn8bmT6pCy-v_SYQ7FQP8dkLbFczA6g4-_eUy-EKvlp0FSM72a8_uR0__MkykVeBQKDtVO4n6KWqy91EjjeTg_Q9bPfjAUudYbO02xEzyaOB-RTo1aPFelvEuFMfmdD5Tvo3_TihIt8y1S8dZ94R8LRUah_TaYPXPBxn8KFe9YFNsWH_J53GagJKpJpD
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.WslTG9wNI9ZTr6hKRVV4HPL04rhPXNVA1qLeJRxlii5SsjSbNqhqy2WBF-2FXfAgx8QNdllbadoE4fVWjuZ-2B5UQ3G-2FlBvMbs5CBdX3YeYWOK-2F6q3iBRBBf6qXJxTT5lbFLe3Z4RjDqO-2BB57yfMFmy9YkiMdUd8WgrfAKeLTaXE21KhJJAshw67B0pZXnPJRm-2B8sgY0FPSPpFZpf-2BVxZJkRMTtx5UnOIWpHD-2BYDpIwbxry5M5LqYoQsmtSj9V9OHjLgxp2vW9Joe7JwCr4lezO6ar-2FkWn2L59g5abavealh7vSXHePJ4FFKKtEgz3SI6kNBkMzOmxrXVnRT0TMpsE1N9nU6yBUwjXsIs3IN5smI4J50m7iMblfiC57CPCP3qVYcpIr7AjW-2F9DozTZjyE9gqSg-3D-3DP9Kw_-2F6Nc-2Br04KTzJB7Zv6oU-2FxaH4pgk-2FOwAvvyHvoZunJLB98VVOJ7B9y1YRsavABbjaQ45TkFOzf4hWBNjl2HWyE4LUZXMNjHsifR-2BcDacpEWzBesgqKBmzfjorjKYZA-2FWPKjemOluG0buUOehztc5-2FP9UluQ0wqdkSUURDJgE9SbEJ-2BiFL8sNHMAbupoJprnU4ZPYDaADU0s1LnwlFYBmQJNk8k0q1AApLpokpmvmiTBE-3D HTTP/1.1Host: url3687.joseeustasiorivera.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: url.za.m.mimecastprotect.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713946600033&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/html; charset=utf-8Content-Length: 180ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-EncodingDate: Wed, 24 Apr 2024 08:17:28 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 08:17:51 GMTServer: nginx/1.21.6Content-Type: text/html; charset=iso-8859-1Content-Length: 315host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 08:18:01 GMTServer: nginx/1.21.6Content-Type: text/html; charset=iso-8859-1Content-Length: 315host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==

Source: chromecache_81.2.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_81.2.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49715 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@20/62@26/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1984,i,12593039912173914650,15885612422497244575,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1984,i,12593039912173914650,15885612422497244575,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://mautic.joseeustasiorivera.com/r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319&	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
aspen.phplist.com	45.33.29.14	true	false		high
security-za.mimecast.com	41.74.196.11	true	false		high
mautic.joseeustasiorivera.com	161.35.102.60	true	false		unknown
kmg.zaz.mybluehost.me	50.116.65.227	true	false		high
sendgrid.net	167.89.123.204	true	false		high
www.google.com	142.250.141.147	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
url.za.m.mimecastprotect.com	41.74.196.103	true	false		unknown
url3687.joseeustasiorivera.com	unknown	unknown	false		unknown
aduiwui.hosted.phplist.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://security-za.mimecast.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false		high
https://security-za.mimecast.com/ttpwp/resources/styles.5257ca6e429949972959.js	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/icon-mastercard.png	false		high
https://mautic.joseeustasiorivera.com/r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319&	false	Avira URL Cloud: safe	unknown
https://security-za.mimecast.com/ttpwp/resources/images/mimecast-logo.png	false		high
https://security-za.mimecast.com/ttpwp/resources/main.5257ca6e429949972959.js	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/logo.png	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/menu.svg	false		high
https://aduiwui.hosted.phplist.com/lists/lt.php?tid=KkoBU15SAgQCA0gADFJUGw1VC1sUUVsLUh0BVVpVU1RXUgVWVAFNU1NTA1BWUgcbWARXAhQEBAAAHQEICQdIAAMHAVNTDFUIAFdRGAVVVQIKWAZSFAVTWlwdDAhdAEhbUVAJS1YCVAJUVFdcAQ8HAg	false		high
https://security-za.mimecast.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false		high
https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com	false		unknown
https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/bootstrap.min.css	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/search.svg	false		high
https://security-za.mimecast.com/ttpwp	false		high
https://security-za.mimecast.com/api/ttp/url/get-page-data	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/jquery.js	false		high
https://security-za.mimecast.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/user.svg	false		high
https://kmg.zaz.mybluehost.me/favicon.ico	false		high
https://security-za.mimecast.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/bootstrap.min.js	false		high
https://security-za.mimecast.com/ttpwp/resources/images/favicon.ico	false		high
https://security-za.mimecast.com/ttpwp/resources/languages/en.json	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/index.css	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/images/icon-viza.png	false		high
https://kmg.zaz.mybluehost.me/south/manage/ene/	false		high
https://kmg.zaz.mybluehost.me/south/manage/Canada_fr/	false		high
https://security-za.mimecast.com/ttpwp/#/warn?key=UMMXfKARRP4MY8Zq3un416WIvD7PnDenWK6JwQXoannhc8NfEW5pwBF8Z9yCBamAX1GkAwjAb0kWFObzmyuka5uk9sZCP4TyjtHRKni4ByDoQrOb_BtseaWv7m1jziv3	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_81.2.dr	false		high
https://community.mimecast.com/docs/DOC-241	chromecache_81.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
50.116.65.227	kmg.zaz.mybluehost.me	United States		46606	UNIFIEDLAYER-AS-1US	false
161.35.102.60	mautic.joseeustasiorivera.com	United States		14061	DIGITALOCEAN-ASNUS	false
45.33.29.14	aspen.phplist.com	United States		63949	LINODE-APLinodeLLCUS	false
41.74.196.103	url.za.m.mimecastprotect.com	South Africa		37235	MimecastSAZA	false
167.89.123.204	sendgrid.net	United States		11377	SENDGRIDUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
41.74.192.103	unknown	South Africa		37235	MimecastSAZA	false
41.74.196.11	security-za.mimecast.com	South Africa		37235	MimecastSAZA	false
142.250.141.147	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430867
Start date and time:	2024-04-24 10:16:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@20/62@26/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://url.za.m.mimecastprotect.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 Browse: https://kmg.zaz.mybluehost.me/south/manage/Canada_fr/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.100, 142.251.2.101, 142.251.2.113, 142.251.2.139, 142.251.2.138, 142.251.2.102, 142.251.2.84, 34.104.35.123, 20.12.23.50, 23.1.234.24, 23.1.234.57, 192.229.211.108, 13.85.23.206, 142.251.2.95, 142.250.141.95, 74.125.137.95, 142.250.101.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 07:16:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981560536902043
Encrypted:	false
SSDEEP:	48:8edrTzn/H40idAKZdA19ehwiZUklqeh0y+3:8CngSry
MD5:	B9B274BAF802F34B7ACD67DE716B6D15
SHA1:	B22880863E409BCA2C3AC2E640332D0553EA0B8A
SHA-256:	411AA1C566F7FFB7B06D37A93204D14CAC2B0E44122C6E8001BBB49CAB81B2AD
SHA-512:	2B6E0635C6ECC6A82CD153A62035E4B1C415ED8D84FAA1131926D124ED6F6D0ED5325B267F87D1BE9A7D53176B2D398AF78E9C07C03BE6774E8AD4CE76A64DF0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=#H.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.B...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 07:16:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996408804100058
Encrypted:	false
SSDEEP:	48:8OdrTzn/H40idAKZdA1weh/iZUkAQkqehby+2:8SngI9QKy
MD5:	A040B3628F3A5DB6D00FED70704D15EF
SHA1:	C361DBDCCE5FCDC7D6E76049BB195F6442EA3FBF
SHA-256:	A3C6E4B3E3E65B682C4DC0B8A0B0C6F71F42CA6976A19CDBDDE32D1415EBB831
SHA-512:	89004CF382B7BDA754D56A636204D91B9042CAE33CA1329530D80CCAEED4322E45DAA9D5C98C76B01DBB3F36ACFFD52DCA7F8592DFE90FACEB5ED2B3B1361E1B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......:.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.B...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006688740484983
Encrypted:	false
SSDEEP:	48:8xIdrTznsH40idAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8x8nXgn/y
MD5:	C24EF4EA818A2AB459F1C2BB34D4FA65
SHA1:	2822B2788F5A1C480A0A14C93697684DD9169401
SHA-256:	84DB30ECC585E1957B007D9AD368AB296D427DD60216BA5ABE5CCC380DE14D9F
SHA-512:	675D00E3A4B6F565A897E6BC9F0C39AAEFC61CD0BBC39625B9961CC33C051EDEFF9EA05F19D663CBB69369A0B2696E80B033ED917E296E698D7CE673D993B70A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 07:16:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9956093798582932
Encrypted:	false
SSDEEP:	48:87drTzn/H40idAKZdA1vehDiZUkwqehny+R:8pngTpy
MD5:	57996CD980AD27BF18E24BF78463730D
SHA1:	5638CA937AEF4D14E6EF7AF89D4750D80C0059D9
SHA-256:	4669DAC20A4AFD06F3A22711DBC48946C57B85083CC9D277D5E946AD20E7ACC3
SHA-512:	49A6E147619E9036EF33D3DE724AAE345483B16835715DD4E1F30719724D20402A82503BDA521615F7F24E17BF4EEBBA70A27605C2D8D544CC10AA7E581EDF09
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....y.3.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.B...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 07:16:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983619758672917
Encrypted:	false
SSDEEP:	48:8KdrTzn/H40idAKZdA1hehBiZUk1W1qehVy+C:8engD91y
MD5:	D607B734272851D177A7B425B7F97334
SHA1:	0EBB11A14425C6A1C8CBE19503EF950BD359C514
SHA-256:	886C40C2CCC094E1A12F12EEE55D2C4E610CA326C73A4C8E512BF4CCC8EE49F5
SHA-512:	23C1234CEACA114F0BCE000581E3E140BB02B105C4DE27D73E8D7815F2F3897625337C7EA684806E3ADD25DD98CC4C048BE4619D17F91F03C0D0148FFF73BD15
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....,?A.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.B...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 07:16:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9957013342886167
Encrypted:	false
SSDEEP:	48:8gdrTzn/H40idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb/y+yT+:8UngzT/TbxWOvTb/y7T
MD5:	F4F32FFA461975A64DD86DE65E9A47E8
SHA1:	59323F113485F9D2BC78DA64550156F9E3948F48
SHA-256:	4E569539A47EAECD36F6573843236AE58CD034FC502CFD38851A41213D36943F
SHA-512:	A51AB530890E2CA3F320BBD961A35DB5EA56BB8D2C08C54080071B8F632450502BCCB5DA586359F43DCE6A8DFD7B0E542F04B659A1CAB15BCF65E4854B3B960C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.B....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.B....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.B....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.B..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.B...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........5.-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 733 x 325, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5727
Entropy (8bit):	7.852249529917035
Encrypted:	false
SSDEEP:	96:bRJPLv/zw2J87DNFAXqWP7pWufPkeJPavD47Q1mja9:9xLv7nJ8NeXqw7MufPmvkVU
MD5:	22709B636915A8E12A81E5DE9E8A3C7E
SHA1:	02431BD4D847D6F53B700C344847977FFEF04E3A
SHA-256:	3DBC551A5FA5C9437B97D632D86A3D9D46AFD13DF0247D9FEE74C9FE472292FB
SHA-512:	2BE24008863F04A7A7DD855522D5AA928093D8370803B15492B08A5336AC6021926731710B02A246C61F0538D181660758797C3453650985498EA0ADA3367F54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......E......4.s...iPLTE.......w..w..w..w..w..w..w.................w..w..w..w.......................w........w..w.....w..w........E=(... tRNS.. @....P0@p.P.`.`... ..0.p...RP.....IDATx...........................................................................;..FU&._.v...." ...\|./y.....h....;.?..j5.%.....A..A..A..A..A..A..A..A..A........?.x......W.a-.c@.W......#.......B....f.i.,.?.......[.u{#.s...9].<C..-....b~s....?.%..4.....9..>].~x\|.H..s.n...c.uP8W.[...r..y.y...?N.....J........v..g...7}...Gf.>.M&.....6v.S..$.o......t..M&...0~...Gz..d.m...l.&..Sl.....s....AtR..L.3...}.5.._.{y..h.....#z.I~.......%=q;5>dg49......P#....n..>m7..$S.; G.y.....7.{kz.T.[...3tj[0..:.f.n.c G.g...5..1.q.s.rg..6@\..W.M...f.e..Gd...c....sT.O.a.p...`......p..\|"p.l....;}>..X;.Cc.....iX....R=.}\........F..^m.....T.g.J8rq.>...>ow.n...!VDv._.8.1........H`.. Oc}.TevK........M..v~iw.\|..@.v7.Al..Y.\|~.U].;@..J?....Xb........d...'...c.O.....(...t.F...E....#2}..}.j....

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 93, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9618
Entropy (8bit):	7.869384615134323
Encrypted:	false
SSDEEP:	192:LVknKAYi29rLrmmVVuJ8KAfvZqfyOMjBVUwn0eEJKGXOSEVKsuhFnOW4F:Lmn+d9rHZuuKAZmmwwAJlXwDuDO1F
MD5:	5D1100CF5CF58B6830FE686A793CA786
SHA1:	A415BB3D90E88BD48AFC1897CDC5622022DF71E0
SHA-256:	3CCF9B38C48E021DE2191C3AF9E8BBA6F3EB8CBDF8763E85920D7F7248EB8577
SHA-512:	3F404E5439FCB29481112DAA2799162B7945974AA5B4EBDF8120008B61D6AA3FAC9B550B36703CC70633632FCB9DB4582357BA73D2071EFF65190059BA27A6AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......]......L......pHYs...#...#.x.?v...~iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-03-16T01:20:36+01:00" xmp:MetadataDate="2021-03-16T01:20:36+01:00" xmp:ModifyDate="2021-03-16T01:20:36+01:00" xmpMM:InstanceID="xmp.iid:bbf9366b-0ef5-9f4c-9bb3-14396f82b1d1" xmpMM:DocumentID="adobe:docid:photoshop:5f1c75d1-d1c1-ee41-ad23-26950c86dc4c" xmpMM:OriginalDocumentID="xmp.did:c693ef4b-da29-464d-9836-0b72e599d376" photoshop:Color

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 155758
Category:	downloaded
Size (bytes):	35138
Entropy (8bit):	7.989142499108958
Encrypted:	false
SSDEEP:	768:ISDt+TKfJd4eLAEPcklb5d8xGL1WNnGygejgj7+Be1VmS:ISDt++fJdrAEPcklb6bGygeS7+A1F
MD5:	8D439940F8C3625AF6AE3EB114868F72
SHA1:	7575057374C2DDA5728D7BD38E2F43F837DD4003
SHA-256:	38DECC3E8ED16EE63395D27C577D5B6BA7F8830185B4D626BC072FBBD39AD585
SHA-512:	01E184CE7397815CA115B0883EFEF0EC47B46FB07A0DA0933D61D2842A7ECEC6E7AB3BFE472CB363B66463B4BCCDDC3716D508E4A2054215DC7937FDDA2209EA
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/bootstrap.min.css
Preview:	...........ko.H.-.}..'......#..p".5....k>..,P7.p....t^.."...o_.+...P(+kz6.......s.../...'...Z.\./+.].!.....S.2....O.M._x.h.K.s\.R.....a..;.sQ_L.S)A......$..&P.@.]I@.......@e....r..O...b.............[3....hY1....8a...e.......T;Q1..NW^.6.Z>...a.....>...V..q..Le.$.w......@..N....(.go..B.f..$.m.b...7..l...2._. I....Z..5.....i.....u.P../I.;U.$...MA...bQ.2..M...hS...6.6.m.d.X.~.8-.u..,R.(...a.-...y.eh.....C..8m8...W..e.V.4E...pV.../.?3%.8.[{.wUb~..d....?>....\r.......&..O..'._............d......i...0..........^...O=.j.C.K^W8.....U.....aa..%.....e....O..1.,)/.&]u.....B-..d....d".S.B}cH..c..VM.5Z.\......`..H.u.x.+.V}.v....?S..\|...X..}W.W.;....UQk.+i.GR(...(....v.&.).3.Y..f....y3x..4.L.]e...f._Le.&.Hh]1..b....c.EFK...>.?.F;vC+r...u..r...A.1..s...F.&Xq^"...b.<7....s..o.I.....'.....<..G...8r......+.r1vL.fQ.5........H...Z..[.g...<0.u/.%y.....X...Z.......X.F....T=bfI.\|5..\|l.'.p..{ .7.f..iu..Q.D.&$;Q+"s`U.s.^.A.K]...V.........&D@]..

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/languages/en.json
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 93, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	12223
Entropy (8bit):	7.9202109808609595
Encrypted:	false
SSDEEP:	192:FVknrti/9SAS/du2D/cA0CIb0kiJYZovrCegi9NXbuz5MlWJ39TBOnBT+c/KD/Ct:Fmnrtw9HQdnD/rCZdZ2IovlWJ39ABT9V
MD5:	40A3EA6D4694396B3B7D5BE0AD2C900E
SHA1:	F7F58FC72AFBF5907D9FEBCB782A476C737EFC6A
SHA-256:	6798395B760CC84EE69EEB14D0D23E49D334033D05F7C6CD20E2A358BFA5D0E2
SHA-512:	A89C1F3AD2BB39D5FBCF7B416F504071B0F4CBFBF9628F521A59A8221956B0551966682363142965ADE8387EA093BF91B8EA16EA5906E90F8963D97D2594C657
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/icon-viza.png
Preview:	.PNG........IHDR.......]......L......pHYs...#...#.x.?v...LiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-03-16T01:19:05+01:00" xmp:MetadataDate="2021-03-16T01:19:05+01:00" xmp:ModifyDate="2021-03-16T01:19:05+01:00" xmpMM:InstanceID="xmp.iid:667031d2-4d0a-6c42-87de-ae0b94bd39b8" xmpMM:DocumentID="adobe:docid:photoshop:3fccdc7e-cabf-3b43-a9d6-74098cd948f7" xmpMM:OriginalDocumentID="xmp.did:f15cc536-5683-734e-b462-b5e9c66b30ee" photoshop:Color

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	722
Entropy (8bit):	5.121624852495706
Encrypted:	false
SSDEEP:	12:tBijo5JZ1d+gEl0c2P41QMVCogEZdgfQTxCO5IQQpi4HmCO5dXGQQpi4HmCO5dXr:tjF7U2P41ZoHUgfQkOIQQpiNCOAQQpi1
MD5:	6C1D1E2234738284B3AF018C4279B4BA
SHA1:	15BA5072C8687601DDCF4145FD492537B2B3D1FE
SHA-256:	B8D34DE8DE0E7CFDC8B1AB414AAC93C814A47A0EB264761A10EBFE0AD12A5FF8
SHA-512:	FDBE9C54480F9C196EF702B23A3CA668878638D7CFE7F1C2E11D5FB4A4433F2D30B4891D8B1EDA000A02DA92E371921943C84F79B8BEFA6C8B0AF6D8618FF2F0
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/menu.svg
Preview:	<svg class="svg-inline--fa fa-bars fa-w-14 hw-navbar__bars fa-stack-2x" title="NOT_TRANSLATED" aria-labelledby="svg-inline--fa-title-dHMG9sS027ba" data-prefix="far" data-icon="bars" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-dHMG9sS027ba">NOT_TRANSLATED</title><path fill="currentColor" d="M436 124H12c-6.627 0-12-5.373-12-12V80c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12z"></path></svg>

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	802
Entropy (8bit):	5.004520657161039
Encrypted:	false
SSDEEP:	12:tBSHX4Xhj+g32CvU0eP41QMVCog32CvLRkfS5eXvhURwoHwYvZL2ydtWChS9:tgSJmC2P41ZoHmCTRkfAahCf5Zyck9
MD5:	722C894FA6307BEEB05607BDBAC95A37
SHA1:	3284782B3AA1B00BCD24EE3F379328F22422DAF2
SHA-256:	22566385067E3B9D672EEEEFE4AE56AF11389B988404F36B3ADAAC86D4A31788
SHA-512:	FC8DFFAA7FE6C161369F6890DE3F43733EABC6BFB07DCCEED84FFCA45E11CEE27BC8C1CF3707ADF04DA7F6A9FE88416FB25DF7C8940EE7A288850F4FA01EF18D
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/user.svg
Preview:	<svg class="svg-inline--fa fa-user fa-w-14 hw-navbar__icon fa-2x" title="Min side" aria-labelledby="svg-inline--fa-title-I5ubRcgkbPW2" data-prefix="far" data-icon="user" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-I5ubRcgkbPW2">Min side</title><path fill="currentColor" d="M313.6 304c-28.7 0-42.5 16-89.6 16-47.1 0-60.8-16-89.6-16C60.2 304 0 364.2 0 438.4V464c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48v-25.6c0-74.2-60.2-134.4-134.4-134.4zM400 464H48v-25.6c0-47.6 38.8-86.4 86.4-86.4 14.6 0 38.3 16 89.6 16 51.7 0 74.9-16 89.6-16 47.6 0 86.4 38.8 86.4 86.4V464zM224 288c79.5 0 144-64.5 144-144S303.5 0 224 0 80 64.5 80 144s64.5 144 144 144zm0-240c52.9 0 96 43.1 96 96s-43.1 96-96 96-96-43.1-96-96 43.1-96 96-96z"></path></svg>

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4228
Entropy (8bit):	7.468692581181979
Encrypted:	false
SSDEEP:	96:vSn6knmWIrIlW/QHCZhHF4HVywjjjWm3QsVA56VBT1CvWrBLjjjjQ:vSn6knDiZhCIwjjjH31VAgBTm0RjjjjQ
MD5:	EB9048F8FBF87B993E77B0AB95DAAA60
SHA1:	38B9F52981F1E3E7C0AA3F9C0773D971D28218BC
SHA-256:	35175BBAB647CEC8479F295A98978D170CD7B62E5FD3F7B64DEFAE81B517B16A
SHA-512:	4C4E50D85B3A1F21674CF080DBD3227FBEECA50B1C6B113E1767E8D6AECF666BE65CBC7A86E17C8E9A72A24AFE335C3EB70C392278E31171D90603AD42FC7E3C
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/images/mimecast-logo.png
Preview:	.PNG........IHDR.......x.......O.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-10-29T15:56:24+01:00" xmp:ModifyDate="2021-11-02T15:28:31Z" xmp:MetadataDate="2021-11-02T15:28:31Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:e59b0272-9f84-d042-b610-49114ee72bcc" xmpMM:DocumentID="xmp.did:0289126f-2158-4f47-aeef-18573cdfc66d" xmpMM:OriginalDocumentID

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 93, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9618
Entropy (8bit):	7.869384615134323
Encrypted:	false
SSDEEP:	192:LVknKAYi29rLrmmVVuJ8KAfvZqfyOMjBVUwn0eEJKGXOSEVKsuhFnOW4F:Lmn+d9rHZuuKAZmmwwAJlXwDuDO1F
MD5:	5D1100CF5CF58B6830FE686A793CA786
SHA1:	A415BB3D90E88BD48AFC1897CDC5622022DF71E0
SHA-256:	3CCF9B38C48E021DE2191C3AF9E8BBA6F3EB8CBDF8763E85920D7F7248EB8577
SHA-512:	3F404E5439FCB29481112DAA2799162B7945974AA5B4EBDF8120008B61D6AA3FAC9B550B36703CC70633632FCB9DB4582357BA73D2071EFF65190059BA27A6AB
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/icon-mastercard.png
Preview:	.PNG........IHDR.......]......L......pHYs...#...#.x.?v...~iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-03-16T01:20:36+01:00" xmp:MetadataDate="2021-03-16T01:20:36+01:00" xmp:ModifyDate="2021-03-16T01:20:36+01:00" xmpMM:InstanceID="xmp.iid:bbf9366b-0ef5-9f4c-9bb3-14396f82b1d1" xmpMM:DocumentID="adobe:docid:photoshop:5f1c75d1-d1c1-ee41-ad23-26950c86dc4c" xmpMM:OriginalDocumentID="xmp.did:c693ef4b-da29-464d-9836-0b72e599d376" photoshop:Color

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	5.136600613175129
Encrypted:	false
SSDEEP:	12:tBZQj+gmh0l3P41hNsMVCogmSkRfyHgFWxuLLJIemzUiGkRdrprtuRRcFqn6:tr6XP41hNtoHVkRfxFeQIesUkRdrru3k
MD5:	F76EBEC217D1677449EF5BFC0863C378
SHA1:	C2ACB9BB4041B1995C0F5080A522CA1142798940
SHA-256:	C73D5355AAEA905C2A68ECF3B76F689954BFCCE031E733F4B70DD12114C4C8A8
SHA-512:	76078B342E1ABE1ED5394A371AF2FB332A4B18E99E7D98A51AC950AC08B1582DDD24E42AE9578F84DC008F0E4A5957BF0843DE7F8DDB1E3F52515FE697350CD3
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/search.svg
Preview:	<svg class="svg-inline--fa fa-search fa-w-16 hw-navbar__icon fa-2x" title="S.k" aria-labelledby="svg-inline--fa-title-mbLGChaTPO4n" data-prefix="far" data-icon="search" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg=""><title id="svg-inline--fa-title-mbLGChaTPO4n">S.k</title><path fill="currentColor" d="M508.5 468.9L387.1 347.5c-2.3-2.3-5.3-3.5-8.5-3.5h-13.2c31.5-36.5 50.6-84 50.6-136C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c52 0 99.5-19.1 136-50.6v13.2c0 3.2 1.3 6.2 3.5 8.5l121.4 121.4c4.7 4.7 12.3 4.7 17 0l22.6-22.6c4.7-4.7 4.7-12.3 0-17zM208 368c-88.4 0-160-71.6-160-160S119.6 48 208 48s160 71.6 160 160-71.6 160-160 160z"></path></svg>

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 93, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	12223
Entropy (8bit):	7.9202109808609595
Encrypted:	false
SSDEEP:	192:FVknrti/9SAS/du2D/cA0CIb0kiJYZovrCegi9NXbuz5MlWJ39TBOnBT+c/KD/Ct:Fmnrtw9HQdnD/rCZdZ2IovlWJ39ABT9V
MD5:	40A3EA6D4694396B3B7D5BE0AD2C900E
SHA1:	F7F58FC72AFBF5907D9FEBCB782A476C737EFC6A
SHA-256:	6798395B760CC84EE69EEB14D0D23E49D334033D05F7C6CD20E2A358BFA5D0E2
SHA-512:	A89C1F3AD2BB39D5FBCF7B416F504071B0F4CBFBF9628F521A59A8221956B0551966682363142965ADE8387EA093BF91B8EA16EA5906E90F8963D97D2594C657
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......]......L......pHYs...#...#.x.?v...LiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-03-16T01:19:05+01:00" xmp:MetadataDate="2021-03-16T01:19:05+01:00" xmp:ModifyDate="2021-03-16T01:19:05+01:00" xmpMM:InstanceID="xmp.iid:667031d2-4d0a-6c42-87de-ae0b94bd39b8" xmpMM:DocumentID="adobe:docid:photoshop:3fccdc7e-cabf-3b43-a9d6-74098cd948f7" xmpMM:OriginalDocumentID="xmp.did:f15cc536-5683-734e-b462-b5e9c66b30ee" photoshop:Color

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.643155551344263
Encrypted:	false
SSDEEP:	3:7KhnyPCTinunVry9yoSoLInnSGDr9hgC:mnyPtnoBykPsInnS27gC
MD5:	0D021B2233681B4A3DEB7478B41FECC2
SHA1:	33DDA840E3CE73EFD7F3C7A2A21BAD97A68F57EA
SHA-256:	98CC641659C770F6A0B19F1618EF66666977F315A9867AD1AA69C27D12FCB32E
SHA-512:	82DE6CA58D1B4348AC5C5E8A267884F372E49ADD34241937AFE1AA882911BF5B97D62DD3819D6AF833FF55372F0FD6EBAC991D4216659EAF26515E803329A133
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgll0q_oWJd6VhIFDaqYN6ASBQ276hYmEgUNvTVvGRIFDVOKhsISBQ3dEcAGEgUNpxsCMRIFDWr9q30=?alt=proto
Preview:	Cj8KBw2qmDegGgAKBw276hYmGgAKBw29NW8ZGgAKBw1TiobCGgAKBw3dEcAGGgAKBw2nGwIxGgAKBw1q/at9GgA=

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	694
Entropy (8bit):	5.136600613175129
Encrypted:	false
SSDEEP:	12:tBZQj+gmh0l3P41hNsMVCogmSkRfyHgFWxuLLJIemzUiGkRdrprtuRRcFqn6:tr6XP41hNtoHVkRfxFeQIesUkRdrru3k
MD5:	F76EBEC217D1677449EF5BFC0863C378
SHA1:	C2ACB9BB4041B1995C0F5080A522CA1142798940
SHA-256:	C73D5355AAEA905C2A68ECF3B76F689954BFCCE031E733F4B70DD12114C4C8A8
SHA-512:	76078B342E1ABE1ED5394A371AF2FB332A4B18E99E7D98A51AC950AC08B1582DDD24E42AE9578F84DC008F0E4A5957BF0843DE7F8DDB1E3F52515FE697350CD3
Malicious:	false
Reputation:	low
Preview:	<svg class="svg-inline--fa fa-search fa-w-16 hw-navbar__icon fa-2x" title="S.k" aria-labelledby="svg-inline--fa-title-mbLGChaTPO4n" data-prefix="far" data-icon="search" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg=""><title id="svg-inline--fa-title-mbLGChaTPO4n">S.k</title><path fill="currentColor" d="M508.5 468.9L387.1 347.5c-2.3-2.3-5.3-3.5-8.5-3.5h-13.2c31.5-36.5 50.6-84 50.6-136C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c52 0 99.5-19.1 136-50.6v13.2c0 3.2 1.3 6.2 3.5 8.5l121.4 121.4c4.7 4.7 12.3 4.7 17 0l22.6-22.6c4.7-4.7 4.7-12.3 0-17zM208 368c-88.4 0-160-71.6-160-160S119.6 48 208 48s160 71.6 160 160-71.6 160-160 160z"></path></svg>

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2088)
Category:	downloaded
Size (bytes):	3447
Entropy (8bit):	5.385539600942633
Encrypted:	false
SSDEEP:	48:08kjiKt+nPnlS2yYXyPXyBlt+nPnlS2yYXyPXybWIiMjLA:0t+nvlmYCK3t+nvlmYCKblQ
MD5:	C286C6FD6BFE7C3FAF59157B7AA0FD39
SHA1:	25D2FF78EB12EF3DB2A3907E8D2CE39C1C5505D9
SHA-256:	1062224668A272A46FF501E338702C675FF7EF413009FF3FA8E5D42BA37A90C4
SHA-512:	55F60ECBE7A0CDC251D8291F9EA40E55CE8B5C0845D1A49476926E1C711882CEF897414C860E95DE43E27282232CC57727203C8F6E5F029D4163BECACD81BB4F
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <script>window.mimecast = {"branding":{"defaultBranding":{"defaultConfiguration":{"knowledgeBase":{"href":"https://community.mimecast.com/docs/DOC-241","label":"LOGIN_HOME_LNK"},"home":{"href":"http://www.mimec

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/Canada_fr/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 58072
Category:	downloaded
Size (bytes):	23349
Entropy (8bit):	7.985404270099124
Encrypted:	false
SSDEEP:	384:SpAYIfUeQD9AU94vTeVCAnxjLqfNgmwrlGzZhdoHI1egew0V16j93K9Qj7GGkeog:S2YZeq9P4LefxjLqfMlUxoHMegemj93j
MD5:	8717CB3B96FFFC269F1B7C43530B6B84
SHA1:	784CA14BF4D79218797363EDF7EE22895BCBD906
SHA-256:	4EBC6DE1B88DA2FDC17BCEA772D10A1387A7E1762488483525200A5A389C108B
SHA-512:	EE565314746A8503575CEDF34A752147B0204456B50284606B3ACD510B1A9193AEA4F919BD799EE19AB9ED110E3A2FAE6826E609AE0FE5FC1BCA1B2786F436B6
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/bootstrap.min.js
Preview:	...........ks.9.-...../.. X.y....I..,.L...j....L.J.i.).-......2.PU..{#n.KL...k...<._...[o.v.......?.7-2w.....p.:.#.xM....F&s.....7g..?[.94.].n..mL.n.O...ij_o.N.....rFNs.m.+.....r..i}....i.....:0......hP.{..Nf....8..9.... ..2.=k..L.g.../.I.qpR'.:.S..RU1..ri.._..`...F2.e`.W.P....E..v...b._..............w..q.[.,.3.7...k...}.~..MtM.\Z.<a9.[ha....u.%Kbf.GaZ<.....7..S...2.;u..T..#.)...ju.I.F.d....s.<.4.@.v.H.d..r...Z.[...["...`.$].7(.G..}6.r.ZH$...N{.......1.mL.....7]..0..V..G..H..<MO.M...h>:.7..n.i...#bW....'U_6Z..:E....3..G~....L..d....}......s.!.R.#....w...\&..j&Cs.Bw.P3$..J.....#.vK.5oz..k..{.NF..rM...z..I....CH..E...^$........8.....0pF(+..........e<y.`%.(..2..O...xxs=.\..<..=x....r.:w..\.&...$`.......k....k.`.>....S...0T...i......&o....Q.9.X/....p... ...v9...K.;....A..k...EU.9pHX..tx.4w...'.0..hW....V...a.B..z..fX..j...$....!.N...Y.......Y......<M.p.d.W5...-s}...}.2...j.y......Z..Y\M.(..x..b.i.f.Xx.j......P/W+}A .n.T:.....

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 733 x 325, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5727
Entropy (8bit):	7.852249529917035
Encrypted:	false
SSDEEP:	96:bRJPLv/zw2J87DNFAXqWP7pWufPkeJPavD47Q1mja9:9xLv7nJ8NeXqw7MufPmvkVU
MD5:	22709B636915A8E12A81E5DE9E8A3C7E
SHA1:	02431BD4D847D6F53B700C344847977FFEF04E3A
SHA-256:	3DBC551A5FA5C9437B97D632D86A3D9D46AFD13DF0247D9FEE74C9FE472292FB
SHA-512:	2BE24008863F04A7A7DD855522D5AA928093D8370803B15492B08A5336AC6021926731710B02A246C61F0538D181660758797C3453650985498EA0ADA3367F54
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/images/logo.png
Preview:	.PNG........IHDR.......E......4.s...iPLTE.......w..w..w..w..w..w..w.................w..w..w..w.......................w........w..w.....w..w........E=(... tRNS.. @....P0@p.P.`.`... ..0.p...RP.....IDATx...........................................................................;..FU&._.v...." ...\|./y.....h....;.?..j5.%.....A..A..A..A..A..A..A..A..A........?.x......W.a-.c@.W......#.......B....f.i.,.?.......[.u{#.s...9].<C..-....b~s....?.%..4.....9..>].~x\|.H..s.n...c.uP8W.[...r..y.y...?N.....J........v..g...7}...Gf.>.M&.....6v.S..$.o......t..M&...0~...Gz..d.m...l.&..Sl.....s....AtR..L.3...}.5.._.{y..h.....#z.I~.......%=q;5>dg49......P#....n..>m7..$S.; G.y.....7.{kz.T.[...3tj[0..:.f.n.c G.g...5..1.q.s.rg..6@\..W.M...f.e..Gd...c....sT.O.a.p...`......p..\|"p.l....;}>..X;.Cc.....iX....R=.}\........F..^m.....T.g.J8rq.>...>ow.n...!VDv._.8.1........H`.. Oc}.TevK........M..v~iw.\|..@.v7.Al..Y.\|~.U].;@..J?....Xb........d...'...c.O.....(...t.F...E....#2}..}.j....

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	7.9930739048349935
Encrypted:	true
SSDEEP:	768:NzA1kfxARdebgMmiX+c2BERO9/ufrv7KkffWz6tw2O7i:NzA1k5aebgMmYWH9mfpfSmPOe
MD5:	E5231978386520AFD0019A8F5D007882
SHA1:	5E06725A18323ED9372E3E488D4F6DF1A56B3091
SHA-256:	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
SHA-512:	D5EEE91E55BFE7FB220705545D6E767C1A969F4E313F1991C220F4EAA05A7ABC83EE9E6B804D1DF90C1779591F587E1FD58230E120CDA529F8C98BC337E4D3D3
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
Preview:	wOF2............../..............................T.V..N...x..S..~..6.$..x. ..2..U.C..T'.a..!...{.1...l.$......\|...(.U...=A.1...PkY..N....t.+P`..Kp.:n......p......~.......-....`;D.vu.p.N.t......]u....m....Hln..a.x..N.gl...'[`..V..L{.....f.9.l..sw7....M.....B..n.M.6.....z..(...)..}>...... .A.KG}.Q...Z.....G.w\K........a..,.F...3....Z.i)-..<l.eEu.eY.e6..66].VY.5.n.....\_..W....J.ARC.{....u...r.H-...x.A-j.z........?...0..K..EU...v...YC..y.?J.{.._..L60.R..%...X...j..B]E..U.w.?.....J....dD..9.'.r....o.....X.l.^@>...wj?w.7S<G3ch..%..2Hr....&.....K..Q..l;.......f..O2$..}H K......s...~.m..t\|..+.........'..,S...H{@.X.S.E....p.g..\|.{E....Vi7...u.:K...r.3s~.....d..........(tC.......D....f....higI..9.q...Y.....J.F.....X...2c./......dM.K........1....&.. L.A,I....gL....2.i.Rd.8.h.0w....=.@.b.Q..@AP.}K?.$.....k..."...D..5....#...3r.eY@(p.........&....\...@..q..1......F k<....=....9G.f*..........y..N..[..._5.....U.@..\|}..u.k2..7...).#y.................d..B

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/main.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:	3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2721
Entropy (8bit):	4.957939437045397
Encrypted:	false
SSDEEP:	48:gFW0t0EVh/VfFkwT44JwjhbZCcRRgh0aF1CwReZu3FYSwF/9748kb8RqZw:gFMEbZFfMdchNReZAFZw/6db8Rx
MD5:	041FB09535468AB471F9E3978B3C4D12
SHA1:	DF664B86B53FD1499E35DC174159D83DF8E36D12
SHA-256:	006A54B007E1D10BC3250A653FEA2DC2BC044B251411AAAA83B8CAA142D5DB31
SHA-512:	5B481DCB01C3A7BC4B944DF27B63DF586D8EE9ED2B4F3EED5A0C0854F3969D2C509394BF0E6DB83C075CFFFD76ED3897C7E881339A092F45359690CE6A9ADEDA
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/index.css
Preview:	.navigation{.. width: 100%;.. position: fixed;.. top: 0;.. left: 0;.. padding: 11px 7%;.. justify-content: space-between;.. display: flex;.. background-color: #fff;.. z-index: 10;.. text-align: center;.. align-items: center;..}...iCoViza-Master{.. width: 50px;.. margin-right: 7px;..}...logo{.. height: 90px;..}...borderBottom {.. border-bottom: 2px solid #000;..}../* Extra small devices (phones, 600px and down) /..@media only screen and (max-width: 600px) {.. .topSpase {.. margin-top: 120px;.. }..}..../ Small devices (portrait tablets and large phones, 600px and up) /..@media only screen and (min-width: 600px) {.. .topSpase {.. margin-top: 120px;.. }..}..../ Medium devices (landscape tablets, 768px and up) */..@media only screen and (min-width: 768px) {.. .topSpase {.....datInp select {.. margin-bottom: 10px;.. border: 1px solid #3b3b3b;.. padding: 10px;..}...error {.. color: red;..}.. margin-top: 120px;.. }..}

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.755948041571961
Encrypted:	false
SSDEEP:	3:PouV7uJLzLcvzSAEtvxLzUbSodX7JH4vrLUe9ubygGjxcM16SWXxVWRaecKBc4NM:hxuJLzLcbzEdxqXLorwe9UygqxcMUSWp
MD5:	B574A8D3BC4C6A4FE57E89008E9645A3
SHA1:	471EBF49ADD18D605FD24F188DD460F165DDEF45
SHA-256:	3237A8FE51F94BBF3E3E38E4A8E0DC1A643F5DFB5C49D265A8B456CD646D6FCC
SHA-512:	011CB4A90C3B5A4D467B8765A51121CC2AAE9F5C1B570DC82D73D3B12B32F63928F6BD9BE96C5410212392A13DA287154D729A1E0D21AF3E13CCB07F2DD11224
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>.</head>.<body>.<h1>Error 404</h1>.<h2>Sorry, page not found.</h2>.<p>We could not find the page you requested.</p>.</body>.</html>

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4228
Entropy (8bit):	7.468692581181979
Encrypted:	false
SSDEEP:	96:vSn6knmWIrIlW/QHCZhHF4HVywjjjWm3QsVA56VBT1CvWrBLjjjjQ:vSn6knDiZhCIwjjjH31VAgBTm0RjjjjQ
MD5:	EB9048F8FBF87B993E77B0AB95DAAA60
SHA1:	38B9F52981F1E3E7C0AA3F9C0773D971D28218BC
SHA-256:	35175BBAB647CEC8479F295A98978D170CD7B62E5FD3F7B64DEFAE81B517B16A
SHA-512:	4C4E50D85B3A1F21674CF080DBD3227FBEECA50B1C6B113E1767E8D6AECF666BE65CBC7A86E17C8E9A72A24AFE335C3EB70C392278E31171D90603AD42FC7E3C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x.......O.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2021-10-29T15:56:24+01:00" xmp:ModifyDate="2021-11-02T15:28:31Z" xmp:MetadataDate="2021-11-02T15:28:31Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:e59b0272-9f84-d042-b610-49114ee72bcc" xmpMM:DocumentID="xmp.did:0289126f-2158-4f47-aeef-18573cdfc66d" xmpMM:OriginalDocumentID

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.121624852495706
Encrypted:	false
SSDEEP:	12:tBijo5JZ1d+gEl0c2P41QMVCogEZdgfQTxCO5IQQpi4HmCO5dXGQQpi4HmCO5dXr:tjF7U2P41ZoHUgfQkOIQQpiNCOAQQpi1
MD5:	6C1D1E2234738284B3AF018C4279B4BA
SHA1:	15BA5072C8687601DDCF4145FD492537B2B3D1FE
SHA-256:	B8D34DE8DE0E7CFDC8B1AB414AAC93C814A47A0EB264761A10EBFE0AD12A5FF8
SHA-512:	FDBE9C54480F9C196EF702B23A3CA668878638D7CFE7F1C2E11D5FB4A4433F2D30B4891D8B1EDA000A02DA92E371921943C84F79B8BEFA6C8B0AF6D8618FF2F0
Malicious:	false
Reputation:	low
Preview:	<svg class="svg-inline--fa fa-bars fa-w-14 hw-navbar__bars fa-stack-2x" title="NOT_TRANSLATED" aria-labelledby="svg-inline--fa-title-dHMG9sS027ba" data-prefix="far" data-icon="bars" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-dHMG9sS027ba">NOT_TRANSLATED</title><path fill="currentColor" d="M436 124H12c-6.627 0-12-5.373-12-12V80c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12z"></path></svg>

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.2911289347181425
Encrypted:	false
SSDEEP:	1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc
MD5:	2F772FED444D5489079F275BD01E26CC
SHA1:	A8927AC2830B2FDD4A729EB0EB7F80923539CEB9
SHA-256:	2B381363DDA049F2D49A59037B228BC865D51FFB977C8F5C3547D5C28DE48E3A
SHA-512:	81F3B4D35AAA98AF19A4D31EE5399D49E0F70CE52AADEFFFBF42C6C4489D9D50A49450EEC8E9139A009DA82B57BF677665A926D5AE913DFC4C74BAEEC186C422
Malicious:	false
Reputation:	low
URL:	https://kmg.zaz.mybluehost.me/south/manage/ene/packeges/jquery.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}va

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	802
Entropy (8bit):	5.004520657161039
Encrypted:	false
SSDEEP:	12:tBSHX4Xhj+g32CvU0eP41QMVCog32CvLRkfS5eXvhURwoHwYvZL2ydtWChS9:tgSJmC2P41ZoHmCTRkfAahCf5Zyck9
MD5:	722C894FA6307BEEB05607BDBAC95A37
SHA1:	3284782B3AA1B00BCD24EE3F379328F22422DAF2
SHA-256:	22566385067E3B9D672EEEEFE4AE56AF11389B988404F36B3ADAAC86D4A31788
SHA-512:	FC8DFFAA7FE6C161369F6890DE3F43733EABC6BFB07DCCEED84FFCA45E11CEE27BC8C1CF3707ADF04DA7F6A9FE88416FB25DF7C8940EE7A288850F4FA01EF18D
Malicious:	false
Reputation:	low
Preview:	<svg class="svg-inline--fa fa-user fa-w-14 hw-navbar__icon fa-2x" title="Min side" aria-labelledby="svg-inline--fa-title-I5ubRcgkbPW2" data-prefix="far" data-icon="user" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-I5ubRcgkbPW2">Min side</title><path fill="currentColor" d="M313.6 304c-28.7 0-42.5 16-89.6 16-47.1 0-60.8-16-89.6-16C60.2 304 0 364.2 0 438.4V464c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48v-25.6c0-74.2-60.2-134.4-134.4-134.4zM400 464H48v-25.6c0-47.6 38.8-86.4 86.4-86.4 14.6 0 38.3 16 89.6 16 51.7 0 74.9-16 89.6-16 47.6 0 86.4 38.8 86.4 86.4V464zM224 288c79.5 0 144-64.5 144-144S303.5 0 224 0 80 64.5 80 144s64.5 144 144 144zm0-240c52.9 0 96 43.1 96 96s-43.1 96-96 96-96-43.1-96-96 43.1-96 96-96z"></path></svg>

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
URL:	https://security-za.mimecast.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 10:16:50.362937927 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:16:50.362937927 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:16:50.472282887 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:16:57.024684906 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.024727106 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.024790049 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.025223017 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.025232077 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.025284052 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.025496960 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.025511980 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.025788069 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.025796890 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.911581039 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.913486004 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.948842049 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.948859930 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.951471090 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.951478958 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.951977968 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.952064991 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.955291033 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.955365896 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.994193077 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.994462967 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.995068073 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.995291948 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:57.995295048 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:57.995311022 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:58.039518118 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:58.039529085 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:58.041551113 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:58.093024015 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:58.749676943 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:58.749742985 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:58.749811888 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:58.750442982 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:58.750459909 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:58.930026054 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:58.930063963 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:58.930176973 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:58.930234909 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:58.930310965 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:59.131896973 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:59.132217884 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:59.132257938 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:59.133678913 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:59.133747101 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:59.306524992 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.306579113 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.306647062 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.308993101 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.309014082 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.349309921 CEST	49712	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:59.349342108 CEST	443	49712	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:59.352394104 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:59.352806091 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:59.352859020 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:16:59.352957010 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:16:59.397984982 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:59.398010969 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:16:59.444955111 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:16:59.658082962 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.658155918 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.668200970 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.668221951 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.668978930 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.712568045 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.798657894 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:16:59.844116926 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.965503931 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:16:59.965634108 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:16:59.989506960 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.989681005 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:16:59.989830017 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.006268978 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.006294012 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.006309032 CEST	49714	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.006315947 CEST	443	49714	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.050663948 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.050713062 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.050810099 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.051177979 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.051192045 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.086014032 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:00.392661095 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.392729044 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.427620888 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.427651882 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.427926064 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.432796001 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.476126909 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.734380960 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.734450102 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.734519005 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.735368013 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.735388994 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:00.735409975 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 10:17:00.735418081 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 10:17:01.456892014 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:01.456996918 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:09.155570030 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:09.155711889 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:09.156047106 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:11.045130014 CEST	49713	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:11.045156956 CEST	443	49713	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:12.548683882 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:12.548783064 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:12.549382925 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:12.549418926 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:12.549616098 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:12.549966097 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:12.549983025 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:12.708375931 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:12.708455086 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:12.883724928 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:12.884111881 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.229913950 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.229940891 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.230459929 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.230585098 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.231283903 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.231321096 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.232229948 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.232239962 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.630520105 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.630688906 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.631047010 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.631114006 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:13.631149054 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.631160975 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.783840895 CEST	49721	443	192.168.2.5	23.1.237.91
Apr 24, 2024 10:17:13.783873081 CEST	443	49721	23.1.237.91	192.168.2.5
Apr 24, 2024 10:17:17.849550962 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:17:17.849642992 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:17:17.849920034 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:17:17.852541924 CEST	49711	443	192.168.2.5	41.74.196.103
Apr 24, 2024 10:17:17.852565050 CEST	443	49711	41.74.196.103	192.168.2.5
Apr 24, 2024 10:17:18.144208908 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:18.144258022 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:18.144331932 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:18.144577026 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:18.144588947 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.465341091 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.465993881 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.466010094 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.467031956 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.467092037 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.474955082 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.475013971 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.475131989 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.475138903 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.524576902 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.914516926 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.914551973 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.914618969 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.914632082 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.914665937 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.914707899 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.914764881 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:19.914803028 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.915957928 CEST	49724	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:19.915966034 CEST	443	49724	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.319310904 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.319344044 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.319403887 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.322650909 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.322676897 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.322726965 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.323973894 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.323995113 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.324048042 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.327321053 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.327349901 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.327395916 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.327847958 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.327861071 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.328478098 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.328490019 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.329057932 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.329068899 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:20.329921007 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:20.329937935 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.638094902 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.638452053 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.638464928 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.639462948 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.639614105 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.640146017 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.640146017 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.640198946 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.647279978 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.647372961 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.647598028 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.647610903 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.647682905 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.647713900 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.647965908 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.648025990 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.648464918 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.648530006 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.648650885 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.648663044 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.648809910 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.648982048 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.649195910 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.649259090 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.649301052 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.649353981 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.649648905 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.649736881 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.649838924 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.649956942 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.649966955 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.683604956 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.683621883 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.692111969 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.694314003 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:21.696110010 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:21.726660013 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.075805902 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.075850964 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.075913906 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.075959921 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.075959921 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.087085009 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.088025093 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.088643074 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.137216091 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.137221098 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.138519049 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.232887983 CEST	49727	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.232917070 CEST	443	49727	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526442051 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526458979 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526523113 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526542902 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526555061 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526561022 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526622057 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526626110 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526657104 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526786089 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526808977 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526817083 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526839972 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526840925 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526850939 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526865959 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526874065 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526891947 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.526906013 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.526942968 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.527767897 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.527792931 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.527827024 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.527832031 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.527889013 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.527889013 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.528096914 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529057026 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529087067 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529117107 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.529125929 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529162884 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.529604912 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529617071 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529644012 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529664040 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529676914 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.529695988 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529710054 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.529738903 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.529886007 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.529931068 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.532747030 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.532767057 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.532839060 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.532857895 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.570214987 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.573925972 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.962979078 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.962996960 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.963054895 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.963068962 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.963694096 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.963715076 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.963763952 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.963769913 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.963807106 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.964076996 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964093924 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964140892 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.964145899 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964342117 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964363098 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964380980 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964427948 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.964464903 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.964482069 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.964508057 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965096951 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965122938 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965189934 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965199947 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965218067 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965238094 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965830088 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965842962 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965867043 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965909958 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965924978 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.965945959 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.965965986 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.966212034 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.966228962 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.966276884 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.966284037 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.966332912 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.968580008 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.968596935 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.968632936 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:22.968642950 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:22.968683004 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.005290985 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.005326033 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.005374908 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.005410910 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.005431890 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.005466938 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.008665085 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.401618958 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401638031 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401710987 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401726007 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.401740074 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401784897 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.401793957 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401844025 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.401889086 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401906967 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401926041 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401954889 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.401984930 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.401998043 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.402035952 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.403213024 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.403234959 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.403280973 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.403294086 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.403312922 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.403337002 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.404508114 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.404531002 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.404560089 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.404567003 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.404601097 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.404741049 CEST	49725	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.404762030 CEST	443	49725	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.406471968 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.406497002 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.406547070 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.406553030 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.406593084 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.407711029 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.407737970 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.407782078 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.407788992 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.407836914 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.407855034 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.409835100 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.409847021 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.409873009 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.409909010 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.409926891 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.409945011 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.409966946 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.410641909 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.410657883 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.410712004 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.410723925 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.410743952 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.410768032 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.411823034 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.411840916 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.411910057 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.411923885 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.412024021 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.412719011 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.412734985 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.412808895 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.412817955 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.412879944 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.415133953 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.415149927 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.415231943 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.415247917 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.415338039 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.415992975 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.416008949 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.416062117 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.416073084 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.416091919 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.416121006 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.441262960 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.441286087 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.441344023 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.441354990 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.441415071 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.469238043 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.833946943 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.833962917 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.833992004 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.834042072 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.834072113 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.834100962 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.834120989 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.837157011 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.837177992 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.837270021 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.837280035 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.837317944 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.838052988 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838072062 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838119984 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.838125944 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838160992 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.838470936 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838490009 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838527918 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.838545084 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.838579893 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.838598013 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.839390993 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839410067 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839462042 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.839468956 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839498997 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.839843035 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839859962 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839895010 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.839901924 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.839932919 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.841470957 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.841500998 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.841555119 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.841563940 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.841593027 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.842895985 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.842916012 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.842955112 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.842961073 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843003988 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.843271971 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843287945 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843331099 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.843337059 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843379974 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.843626022 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843641996 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843682051 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.843688965 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.843718052 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.844039917 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.844055891 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.844095945 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.844106913 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.844139099 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845185995 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845196962 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845237970 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845257998 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845273972 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845288992 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845318079 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845549107 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845566988 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845598936 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845607042 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.845632076 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845644951 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.845990896 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846007109 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846052885 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.846060991 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846096039 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.846714973 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846729994 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846779108 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.846786022 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.846820116 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.846999884 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847038031 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847052097 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.847057104 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847084999 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.847096920 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.847630024 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847645998 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847711086 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.847718000 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.847755909 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.848054886 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.848069906 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.848113060 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.848119974 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.848171949 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851516962 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851533890 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851583958 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851591110 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851619959 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851646900 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851691961 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851711035 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851743937 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851749897 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.851774931 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.851799011 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852001905 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852015972 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852056026 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852063894 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852097034 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852132082 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852147102 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852180958 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852188110 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852207899 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852221966 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852225065 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852235079 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852267027 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852272034 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852298021 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852302074 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.852324963 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.852351904 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.877583981 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.877609968 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.877670050 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:23.877680063 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:23.877737999 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.269411087 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269426107 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269443989 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269485950 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.269525051 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269543886 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.269562006 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.269939899 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269957066 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.269996881 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.270005941 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.270030975 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.270049095 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.273149967 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.273175955 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.273233891 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.273241997 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.273283005 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.274139881 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.274161100 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.274197102 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.274203062 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.274245977 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.275819063 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.275839090 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.275897980 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.275906086 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.275937080 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.276894093 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.276916981 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.276972055 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.276978970 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.277012110 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.278235912 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.278254986 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.278309107 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.278316975 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.278350115 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.281949997 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.281974077 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.282051086 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.282059908 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.282097101 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.282603979 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.282623053 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.282674074 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.282680988 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.282713890 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.284044981 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284064054 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284126043 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.284133911 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284168005 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.284615993 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284632921 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284678936 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.284687042 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.284712076 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.286215067 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.286231995 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.286288977 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.286297083 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.286328077 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.287003994 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287024021 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287060022 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.287066936 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287087917 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.287107944 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.287861109 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287883043 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287935972 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.287942886 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.287974119 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.288393974 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.288413048 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.288449049 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.288460016 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.288480043 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.288492918 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.290688992 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.290714979 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.290755033 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.290762901 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.290792942 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.290808916 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.291230917 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291248083 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291290998 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.291299105 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291327953 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.291745901 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291763067 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291791916 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.291798115 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.291830063 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.291843891 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292165995 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292184114 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292216063 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292222977 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292253017 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292269945 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292588949 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292607069 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292659998 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292666912 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.292690992 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.292706966 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293144941 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293162107 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293198109 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293204069 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293231010 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293251038 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293431997 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293448925 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293493986 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293500900 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293533087 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293698072 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293709040 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293742895 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293776035 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293818951 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.293852091 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293910980 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.293967962 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.294034004 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.294039965 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.294097900 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.294166088 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.296024084 CEST	49726	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.296061993 CEST	443	49726	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.312803984 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.312827110 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.312879086 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.312886000 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.312925100 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.313282013 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.313297987 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.313350916 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.313359022 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.313390017 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.364306927 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.364334106 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.364387989 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.364398003 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.364434958 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.705142021 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705154896 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705173016 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705236912 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.705275059 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705323935 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.705914974 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705934048 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.705971003 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.705979109 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.706008911 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.706024885 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.706288099 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.706306934 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.706347942 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.706353903 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.706379890 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.706398964 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.707664967 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.707684040 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.707750082 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.707756996 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.707787991 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.708627939 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.708647013 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.708709002 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.708717108 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.708776951 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.709068060 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709083080 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709137917 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.709146976 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709184885 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.709640026 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709656954 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709714890 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.709726095 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.709819078 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.710051060 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.710067034 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.710102081 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.710112095 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.710135937 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.710149050 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.711100101 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.711118937 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.711153984 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.711170912 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.711195946 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.711214066 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.711901903 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.711920023 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.711997032 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.712009907 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.712047100 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.713586092 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.713606119 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.713682890 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.713696003 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.713733912 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.714093924 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714109898 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714171886 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.714179993 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714281082 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.714737892 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714776039 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714809895 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.714816093 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.714843988 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.714860916 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.715104103 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.715120077 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.715167999 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.715173960 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.715193033 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.715253115 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718070030 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718089104 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718136072 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718143940 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718187094 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718267918 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718327999 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718334913 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718344927 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.718384027 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718697071 CEST	49728	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.718715906 CEST	443	49728	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.776258945 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.776303053 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.776421070 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.777086020 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.777100086 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.802422047 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.802500963 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.802607059 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.803684950 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.803720951 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.813855886 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.813913107 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.814026117 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.816009998 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.816028118 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.843400002 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.843509912 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:24.843592882 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.843799114 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:24.843835115 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.118449926 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.122637033 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.123296022 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.123322010 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.123588085 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.123606920 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.123863935 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.124018908 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.124953032 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.125029087 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.126415968 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.126528978 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.126959085 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.127300024 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.135198116 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.135639906 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.135673046 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.136750937 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.136842012 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.138021946 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.138098955 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.138262033 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.138272047 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.153140068 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.153376102 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.153399944 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.154403925 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.154472113 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.155014038 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.155071974 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.155220032 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.155226946 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.168118000 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.168134928 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.180536032 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.196507931 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.562988997 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.563035965 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.563122034 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.563153028 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.566610098 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.592281103 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.592452049 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.592524052 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.592566967 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.592606068 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.592669010 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.593249083 CEST	49732	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.593283892 CEST	443	49732	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.618182898 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.618299007 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.618326902 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.664738894 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.752681971 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.752712965 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.752778053 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.753010988 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.753024101 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997240067 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997260094 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997314930 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.997328043 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997386932 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997417927 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997431040 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:26.997440100 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.997440100 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:26.997463942 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004252911 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004292011 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004309893 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004328012 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004357100 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004374027 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004375935 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004394054 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004398108 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004416943 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004420996 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004573107 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.004584074 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004684925 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.004738092 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.005091906 CEST	49729	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.005108118 CEST	443	49729	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.023262978 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.023366928 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.023463011 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.023791075 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.023828030 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.034605980 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.034641027 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.034698009 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.034929037 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.034950018 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137300968 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137453079 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137475967 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137515068 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137554884 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.137588024 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137645960 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.137737036 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.137785912 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.139460087 CEST	49731	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.139481068 CEST	443	49731	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.162085056 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.162121058 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.162197113 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.162678957 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.162698030 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.432811975 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.432848930 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.432902098 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.432903051 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.432931900 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.432966948 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.432987928 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.433020115 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.433381081 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.433429003 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.433454037 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.433465958 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.433485985 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.433505058 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.434166908 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.434214115 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.434228897 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.434242964 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.434303045 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.867027044 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.867043018 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.867094994 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.867127895 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.867186069 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.867201090 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.867201090 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.867207050 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.867273092 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.869214058 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.869235992 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.869349003 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.869364023 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.869404078 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.870196104 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.870219946 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.870305061 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.870315075 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.870356083 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.871014118 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.871032953 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.871058941 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.871102095 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.871113062 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.871135950 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.871143103 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:27.871228933 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.871968031 CEST	49730	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:27.871989012 CEST	443	49730	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.073879957 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.075018883 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.075047016 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.075952053 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.076020956 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.076320887 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.076379061 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.076481104 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.076488972 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.118307114 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.347203016 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.347596884 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.347637892 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.348016024 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.348351002 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.348421097 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.348526001 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.355098009 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.355341911 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.355366945 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.356870890 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.356950045 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.357263088 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.357336998 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.357398987 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.357409000 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.396119118 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.401345015 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.473223925 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.473495007 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.473520994 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.474545002 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.474607944 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.474957943 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.475023031 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.475106955 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.512562990 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.512626886 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.512685061 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.512696028 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.512747049 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.514199972 CEST	49733	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.514210939 CEST	443	49733	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.520118952 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.525783062 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.525799990 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.572726965 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.788933039 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.796375990 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.836324930 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.836332083 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.911717892 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.913522959 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:28.913616896 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.914710999 CEST	49736	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:28.914740086 CEST	443	49736	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226321936 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226336002 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226377010 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226404905 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226413012 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226453066 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226474047 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226484060 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226510048 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226522923 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226661921 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226684093 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226721048 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226732016 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226748943 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.226766109 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.226768970 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.227006912 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.227968931 CEST	49734	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.227993965 CEST	443	49734	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230731964 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230756044 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230781078 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230797052 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230807066 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230849981 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.230921030 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230957031 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.230978012 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.230978012 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.231010914 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.231556892 CEST	49735	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.231587887 CEST	443	49735	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.237397909 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.237446070 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:29.237664938 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.237962961 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:29.237977982 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.552665949 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.553073883 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:30.553102970 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.554297924 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.554877996 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:30.555049896 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.555162907 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:30.600112915 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.991995096 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.992120028 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:30.992194891 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:30.993195057 CEST	49737	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:30.993213892 CEST	443	49737	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:31.000345945 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:31.000387907 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:31.000477076 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:31.000885010 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:31.000895977 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.307426929 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.307796001 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.307826996 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.308964968 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.309355974 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.309531927 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.309536934 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.350447893 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.350476980 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.746670961 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.746783972 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:32.746917963 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.747500896 CEST	49738	443	192.168.2.5	41.74.196.11
Apr 24, 2024 10:17:32.747525930 CEST	443	49738	41.74.196.11	192.168.2.5
Apr 24, 2024 10:17:40.501307011 CEST	49739	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:40.502193928 CEST	49740	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:40.717874050 CEST	49741	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:40.943984985 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:40.944075108 CEST	49740	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:40.944387913 CEST	49740	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:40.945035934 CEST	80	49739	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:40.945113897 CEST	49739	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:41.165185928 CEST	80	49741	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.165296078 CEST	49741	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:41.383574963 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.383642912 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.383662939 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.383708954 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.383721113 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.450210094 CEST	80	49740	41.74.192.103	192.168.2.5
Apr 24, 2024 10:17:41.555319071 CEST	49740	80	192.168.2.5	41.74.192.103
Apr 24, 2024 10:17:41.856381893 CEST	49742	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.057931900 CEST	49743	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.058789968 CEST	80	49742	167.89.123.204	192.168.2.5
Apr 24, 2024 10:17:42.058877945 CEST	49742	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.059089899 CEST	49742	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.260339975 CEST	80	49743	167.89.123.204	192.168.2.5
Apr 24, 2024 10:17:42.260472059 CEST	49743	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.261583090 CEST	80	49742	167.89.123.204	192.168.2.5
Apr 24, 2024 10:17:42.263258934 CEST	80	49742	167.89.123.204	192.168.2.5
Apr 24, 2024 10:17:42.354881048 CEST	49742	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:17:42.456387043 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.456420898 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.456494093 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.456715107 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.456728935 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.918934107 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.919222116 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.919236898 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.920984030 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.921052933 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.922308922 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.922419071 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:42.922492981 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.963417053 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:42.963432074 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:43.008538961 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:43.726051092 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:43.726162910 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:43.726345062 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:43.726948977 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:43.726968050 CEST	443	49744	161.35.102.60	192.168.2.5
Apr 24, 2024 10:17:43.727010012 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:43.727113962 CEST	49744	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:17:44.045628071 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.045659065 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.045965910 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.045965910 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.045998096 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.439836979 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.440252066 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.440274000 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.441961050 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.442152977 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.443409920 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.443495989 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.443648100 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.443658113 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.493855953 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.870214939 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.870320082 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:44.870388985 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.875503063 CEST	49745	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:17:44.875518084 CEST	443	49745	45.33.29.14	192.168.2.5
Apr 24, 2024 10:17:45.102317095 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.102371931 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.102503061 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.102680922 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.102696896 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.486366034 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.486659050 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.486691952 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.488168001 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.488255024 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.489726067 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.489814043 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.489916086 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:45.489933014 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:45.531632900 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.134104013 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.134144068 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.134182930 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.134196997 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.134213924 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.134239912 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.298418999 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.299779892 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.299844980 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.299915075 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.300328016 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.300342083 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.300991058 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.301033974 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.301085949 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.301584959 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.301600933 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.302927971 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.302954912 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.303070068 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.303235054 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.303245068 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.303901911 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.303935051 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.304012060 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.307447910 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.307456970 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.308713913 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.308759928 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.308861971 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.309727907 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.309741020 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.344118118 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.491202116 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.491223097 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.491277933 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.491297960 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.538294077 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.538337946 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.585968971 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.673392057 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.674781084 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.674803019 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.674846888 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.674880981 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.674896002 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.674958944 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.674979925 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.675095081 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.675178051 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.675189972 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.675241947 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.675251007 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.675895929 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.676870108 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.679277897 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.679290056 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.679780960 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.679939985 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.679964066 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680179119 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680197954 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.680223942 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680234909 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.680254936 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680515051 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680633068 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.680663109 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.680814028 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.680835962 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681071997 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681088924 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681159019 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.681173086 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681653976 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.681691885 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681696892 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.681751013 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.682265043 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.682338953 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.682735920 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.682792902 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.683341026 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.683420897 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.684122086 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.684215069 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.685101032 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.685251951 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.685662985 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.685678959 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.685966015 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.686188936 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.686260939 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.686281919 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.686481953 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.686487913 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.725528002 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.725541115 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.728118896 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.728120089 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.729557991 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.729568005 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.729581118 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.774208069 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.780682087 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.780692101 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.970740080 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:49.975001097 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:49.975037098 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.059664011 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.059742928 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.059827089 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.059859991 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.061362028 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.061425924 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.061490059 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.061530113 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.061986923 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.062009096 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.062102079 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.062181950 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.063024998 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.063097000 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.063137054 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.063158989 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.063173056 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.063186884 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.066915035 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.066955090 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073456049 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073482037 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073488951 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073524952 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073544025 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.073559046 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.073679924 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.083328009 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.083420038 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.083440065 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.083477974 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.102663040 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.102886915 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151514053 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151556015 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.151654005 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151665926 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151690006 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.151731968 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151866913 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.151899099 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.151942015 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152105093 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152127981 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.152189016 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152338982 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152359009 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.152487993 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152501106 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.152719021 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152733088 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.152875900 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.152911901 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.163330078 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.213644981 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.243717909 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.243732929 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.243767023 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.243788958 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.243830919 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.243890047 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.243897915 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.243942976 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.244175911 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.244184971 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.244234085 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.256083965 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.258656025 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.258682966 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.267776966 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.267788887 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.267849922 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.427500963 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.427519083 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.427583933 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.427711964 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.427771091 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.428035021 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.428097963 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.428608894 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.428680897 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.429018974 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.429078102 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.449040890 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.449115992 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.449131966 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.454945087 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.454961061 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.455024958 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.455059052 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.500646114 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.500677109 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.500675917 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.521457911 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.522525072 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.522555113 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.524288893 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.524353981 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.524718046 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.524852991 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.524940968 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.524949074 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.525331974 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.526251078 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.526268005 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.527472973 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.527532101 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.527951956 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.528054953 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.528142929 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.528290033 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.528297901 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.528606892 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.528637886 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.529036999 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.529715061 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.529797077 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.534198999 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.534279108 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.534601927 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.534630060 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.534692049 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.534708023 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.535834074 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.535904884 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.536185980 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.536257982 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.536302090 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.547940016 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.566617966 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.576822996 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.576967955 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.576987028 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.582612038 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.617882967 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.640479088 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.640495062 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.640526056 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.640568972 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.640628099 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.640645981 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.641005993 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.641033888 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.641069889 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.641087055 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.641135931 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.851754904 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.851803064 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.889595985 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895020008 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895080090 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895102024 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895154953 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.895188093 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895220041 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.895222902 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.895628929 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.895643950 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900610924 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900686979 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900712013 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900731087 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900751114 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.900805950 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.900837898 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.901243925 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.901268005 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.901343107 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.901357889 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.929677963 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.929702044 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.936291933 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.936367035 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.936388969 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:50.936568975 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.944844007 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.944850922 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:50.976119041 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:51.109064102 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:51.120774031 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:51.123342037 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:51.163117886 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:51.168118000 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:51.168128967 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:51.310075045 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:51.310365915 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:51.350577116 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:51.350720882 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.041074038 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.041156054 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.041305065 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.046370983 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.046448946 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.046595097 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.053844929 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.053898096 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.054091930 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.164843082 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.164941072 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.167660952 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.428760052 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.428838015 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.428911924 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.898741007 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.898935080 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.898993015 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:55.904136896 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.904242992 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:55.904295921 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.110632896 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.110716105 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.110785007 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.310942888 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.311073065 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.311105967 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.311153889 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.311161041 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.311216116 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868486881 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868486881 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868545055 CEST	443	49752	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.868669987 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868700981 CEST	443	49755	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.868701935 CEST	49752	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868743896 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868743896 CEST	49755	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868752003 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868752003 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868783951 CEST	443	49754	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.868838072 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868839025 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868906021 CEST	443	49753	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.868917942 CEST	49754	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868947983 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868947983 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.868993998 CEST	443	49751	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869038105 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869041920 CEST	49753	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869043112 CEST	49751	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869074106 CEST	443	49750	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869088888 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869137049 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869149923 CEST	49750	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869160891 CEST	443	49747	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869187117 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869199038 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869199038 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869224072 CEST	443	49746	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869246960 CEST	49747	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869259119 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869259119 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869283915 CEST	443	49749	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869290113 CEST	49746	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869297981 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869381905 CEST	443	49748	50.116.65.227	192.168.2.5
Apr 24, 2024 10:17:56.869420052 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869446993 CEST	49749	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:56.869987011 CEST	49748	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:17:58.642030954 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:58.642072916 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:58.642317057 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:58.643449068 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:58.643465996 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:59.002301931 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:59.002917051 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:59.002943039 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:59.006608963 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:59.010410070 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:17:59.016180992 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:17:59.056421041 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:18:00.919236898 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.919281006 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:00.919411898 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.919437885 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:00.919516087 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.919626951 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.921483994 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.921497107 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:00.922779083 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:00.922805071 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.298259974 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.298819065 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.298913956 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.298968077 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.299088001 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.299102068 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.299660921 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.299742937 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.300446033 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.300512075 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.300920010 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.301012993 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.301155090 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.345215082 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.348124027 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.372345924 CEST	49767	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:18:01.373305082 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.373389006 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.373769045 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.373809099 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.373821020 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.374100924 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.374183893 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.374222040 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.374483109 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.374519110 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.576240063 CEST	80	49767	167.89.123.204	192.168.2.5
Apr 24, 2024 10:18:01.576334000 CEST	49767	80	192.168.2.5	167.89.123.204
Apr 24, 2024 10:18:01.760468960 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.763483047 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.764717102 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.764748096 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.765697956 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.765779018 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.768739939 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.768848896 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.805176973 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.805196047 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:01.819765091 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.819787025 CEST	443	49768	45.33.29.14	192.168.2.5
Apr 24, 2024 10:18:01.830693007 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.831022024 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.831049919 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.834784031 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.834877968 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.835323095 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.835498095 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.857722044 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:01.864110947 CEST	49768	443	192.168.2.5	45.33.29.14
Apr 24, 2024 10:18:01.876512051 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:01.876550913 CEST	443	49769	161.35.102.60	192.168.2.5
Apr 24, 2024 10:18:01.928956032 CEST	49769	443	192.168.2.5	161.35.102.60
Apr 24, 2024 10:18:06.760756016 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:06.760941029 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:06.760996103 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:06.869330883 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:06.869359016 CEST	443	49765	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:06.869369030 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:06.869452953 CEST	49765	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:09.009236097 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:18:09.009310007 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:18:09.009391069 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:18:11.075859070 CEST	49764	443	192.168.2.5	142.250.141.147
Apr 24, 2024 10:18:11.075898886 CEST	443	49764	142.250.141.147	192.168.2.5
Apr 24, 2024 10:18:11.488714933 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:11.488795996 CEST	443	49766	50.116.65.227	192.168.2.5
Apr 24, 2024 10:18:11.488857985 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:12.869127989 CEST	49766	443	192.168.2.5	50.116.65.227
Apr 24, 2024 10:18:12.869164944 CEST	443	49766	50.116.65.227	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 10:16:54.791038990 CEST	53	57087	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:54.796257973 CEST	53	64707	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:55.892271996 CEST	53	64540	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:56.606487036 CEST	55070	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:16:56.606667995 CEST	60088	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:16:56.960479021 CEST	53	55070	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:57.028301001 CEST	53	60088	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:58.591368914 CEST	58275	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:16:58.592026949 CEST	57031	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:16:58.746473074 CEST	53	58275	1.1.1.1	192.168.2.5
Apr 24, 2024 10:16:58.746495962 CEST	53	57031	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:13.362258911 CEST	53	64127	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:17.854335070 CEST	52434	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:17.854648113 CEST	52093	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:18.074433088 CEST	53	52093	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:18.143450975 CEST	53	52434	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:26.597727060 CEST	64969	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:26.597879887 CEST	49461	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:26.751727104 CEST	53	64969	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:26.752095938 CEST	53	49461	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:32.367768049 CEST	53	49163	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:37.381679058 CEST	28753	26166	192.168.2.5	192.168.2.1
Apr 24, 2024 10:17:37.381728888 CEST	21877	25689	192.168.2.5	192.168.2.1
Apr 24, 2024 10:17:37.381728888 CEST	18794	21326	192.168.2.5	192.168.2.1
Apr 24, 2024 10:17:37.381728888 CEST	29030	29548	192.168.2.5	192.168.2.1
Apr 24, 2024 10:17:37.381728888 CEST	14381	28229	192.168.2.5	192.168.2.1
Apr 24, 2024 10:17:40.337512016 CEST	55469	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:40.337923050 CEST	63462	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:40.491633892 CEST	53	55469	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:40.491951942 CEST	53	63462	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:41.475239038 CEST	59317	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:41.476232052 CEST	60653	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:41.853949070 CEST	53	60653	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:41.854125023 CEST	53	59317	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:42.266160011 CEST	55606	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:42.266295910 CEST	53520	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:42.455383062 CEST	53	55606	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:42.455832005 CEST	53	53520	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:43.729085922 CEST	62651	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:43.729085922 CEST	55096	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:44.044759035 CEST	53	62651	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:44.044833899 CEST	53	55096	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:44.877083063 CEST	62372	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:44.877423048 CEST	59432	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:45.074238062 CEST	53	62372	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:45.095454931 CEST	53	59432	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:49.996870041 CEST	59454	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:49.997376919 CEST	54087	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:17:50.150738001 CEST	53	59454	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:50.150816917 CEST	53	54087	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:51.005341053 CEST	53	65132	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:54.433130026 CEST	53	64405	1.1.1.1	192.168.2.5
Apr 24, 2024 10:17:55.039405107 CEST	53	49224	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:00.904778004 CEST	57235	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:00.911607981 CEST	64709	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:00.912379026 CEST	61951	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:00.912580967 CEST	50851	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:00.922122955 CEST	51570	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:00.922533035 CEST	59834	53	192.168.2.5	1.1.1.1
Apr 24, 2024 10:18:01.060437918 CEST	53	57235	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:01.066487074 CEST	53	64709	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:01.066721916 CEST	53	61951	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:01.066886902 CEST	53	50851	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:01.076870918 CEST	53	51570	1.1.1.1	192.168.2.5
Apr 24, 2024 10:18:01.077030897 CEST	53	59834	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 24, 2024 10:16:57.028387070 CEST	192.168.2.5	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 10:16:56.606487036 CEST	192.168.2.5	1.1.1.1	0x4d70	Standard query (0)	url.za.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:56.606667995 CEST	192.168.2.5	1.1.1.1	0x799f	Standard query (0)	url.za.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 24, 2024 10:16:58.591368914 CEST	192.168.2.5	1.1.1.1	0xcbaf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.592026949 CEST	192.168.2.5	1.1.1.1	0x5f4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:17.854335070 CEST	192.168.2.5	1.1.1.1	0xfff6	Standard query (0)	security-za.mimecast.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:17.854648113 CEST	192.168.2.5	1.1.1.1	0x20e1	Standard query (0)	security-za.mimecast.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:26.597727060 CEST	192.168.2.5	1.1.1.1	0x76d4	Standard query (0)	security-za.mimecast.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:26.597879887 CEST	192.168.2.5	1.1.1.1	0x9962	Standard query (0)	security-za.mimecast.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:40.337512016 CEST	192.168.2.5	1.1.1.1	0xeb31	Standard query (0)	url.za.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:40.337923050 CEST	192.168.2.5	1.1.1.1	0x8070	Standard query (0)	url.za.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:41.475239038 CEST	192.168.2.5	1.1.1.1	0x7afd	Standard query (0)	url3687.joseeustasiorivera.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.476232052 CEST	192.168.2.5	1.1.1.1	0x965f	Standard query (0)	url3687.joseeustasiorivera.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:42.266160011 CEST	192.168.2.5	1.1.1.1	0xb842	Standard query (0)	mautic.joseeustasiorivera.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:42.266295910 CEST	192.168.2.5	1.1.1.1	0x9ceb	Standard query (0)	mautic.joseeustasiorivera.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:43.729085922 CEST	192.168.2.5	1.1.1.1	0xc48d	Standard query (0)	aduiwui.hosted.phplist.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:43.729085922 CEST	192.168.2.5	1.1.1.1	0x264f	Standard query (0)	aduiwui.hosted.phplist.com	65	IN (0x0001)	false
Apr 24, 2024 10:17:44.877083063 CEST	192.168.2.5	1.1.1.1	0x43f9	Standard query (0)	kmg.zaz.mybluehost.me	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:44.877423048 CEST	192.168.2.5	1.1.1.1	0x6a39	Standard query (0)	kmg.zaz.mybluehost.me	65	IN (0x0001)	false
Apr 24, 2024 10:17:49.996870041 CEST	192.168.2.5	1.1.1.1	0x157c	Standard query (0)	kmg.zaz.mybluehost.me	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:49.997376919 CEST	192.168.2.5	1.1.1.1	0xe45e	Standard query (0)	kmg.zaz.mybluehost.me	65	IN (0x0001)	false
Apr 24, 2024 10:18:00.904778004 CEST	192.168.2.5	1.1.1.1	0xcd8e	Standard query (0)	url3687.joseeustasiorivera.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:00.911607981 CEST	192.168.2.5	1.1.1.1	0xc5db	Standard query (0)	url3687.joseeustasiorivera.com	65	IN (0x0001)	false
Apr 24, 2024 10:18:00.912379026 CEST	192.168.2.5	1.1.1.1	0x2085	Standard query (0)	aduiwui.hosted.phplist.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:00.912580967 CEST	192.168.2.5	1.1.1.1	0x7c69	Standard query (0)	aduiwui.hosted.phplist.com	65	IN (0x0001)	false
Apr 24, 2024 10:18:00.922122955 CEST	192.168.2.5	1.1.1.1	0x4275	Standard query (0)	mautic.joseeustasiorivera.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:00.922533035 CEST	192.168.2.5	1.1.1.1	0x2e52	Standard query (0)	mautic.joseeustasiorivera.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 10:16:56.960479021 CEST	1.1.1.1	192.168.2.5	0x4d70	No error (0)	url.za.m.mimecastprotect.com		41.74.196.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:56.960479021 CEST	1.1.1.1	192.168.2.5	0x4d70	No error (0)	url.za.m.mimecastprotect.com		41.74.192.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746473074 CEST	1.1.1.1	192.168.2.5	0xcbaf	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:16:58.746495962 CEST	1.1.1.1	192.168.2.5	0x5f4f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 10:17:12.072608948 CEST	1.1.1.1	192.168.2.5	0xd406	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:12.072608948 CEST	1.1.1.1	192.168.2.5	0xd406	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:18.143450975 CEST	1.1.1.1	192.168.2.5	0xfff6	No error (0)	security-za.mimecast.com		41.74.196.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:18.143450975 CEST	1.1.1.1	192.168.2.5	0xfff6	No error (0)	security-za.mimecast.com		41.74.192.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:26.055424929 CEST	1.1.1.1	192.168.2.5	0x470b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:26.055424929 CEST	1.1.1.1	192.168.2.5	0x470b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:26.751727104 CEST	1.1.1.1	192.168.2.5	0x76d4	No error (0)	security-za.mimecast.com		41.74.196.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:26.751727104 CEST	1.1.1.1	192.168.2.5	0x76d4	No error (0)	security-za.mimecast.com		41.74.192.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:40.491633892 CEST	1.1.1.1	192.168.2.5	0xeb31	No error (0)	url.za.m.mimecastprotect.com		41.74.192.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:40.491633892 CEST	1.1.1.1	192.168.2.5	0xeb31	No error (0)	url.za.m.mimecastprotect.com		41.74.196.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.853949070 CEST	1.1.1.1	192.168.2.5	0x965f	No error (0)	url3687.joseeustasiorivera.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	url3687.joseeustasiorivera.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.115.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.115.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.115.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:41.854125023 CEST	1.1.1.1	192.168.2.5	0x7afd	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:42.455383062 CEST	1.1.1.1	192.168.2.5	0xb842	No error (0)	mautic.joseeustasiorivera.com		161.35.102.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:44.044759035 CEST	1.1.1.1	192.168.2.5	0xc48d	No error (0)	aduiwui.hosted.phplist.com	aspen.phplist.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:44.044759035 CEST	1.1.1.1	192.168.2.5	0xc48d	No error (0)	aspen.phplist.com		45.33.29.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:44.044833899 CEST	1.1.1.1	192.168.2.5	0x264f	No error (0)	aduiwui.hosted.phplist.com	aspen.phplist.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:45.074238062 CEST	1.1.1.1	192.168.2.5	0x43f9	No error (0)	kmg.zaz.mybluehost.me		50.116.65.227	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:47.723844051 CEST	1.1.1.1	192.168.2.5	0x116c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:17:47.723844051 CEST	1.1.1.1	192.168.2.5	0x116c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:17:50.150738001 CEST	1.1.1.1	192.168.2.5	0x157c	No error (0)	kmg.zaz.mybluehost.me		50.116.65.227	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	url3687.joseeustasiorivera.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.123.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.115.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.123.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.115.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.115.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.060437918 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	sendgrid.net		167.89.123.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.066487074 CEST	1.1.1.1	192.168.2.5	0xc5db	No error (0)	url3687.joseeustasiorivera.com	sendgrid.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:18:01.066721916 CEST	1.1.1.1	192.168.2.5	0x2085	No error (0)	aduiwui.hosted.phplist.com	aspen.phplist.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:18:01.066721916 CEST	1.1.1.1	192.168.2.5	0x2085	No error (0)	aspen.phplist.com		45.33.29.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:01.066886902 CEST	1.1.1.1	192.168.2.5	0x7c69	No error (0)	aduiwui.hosted.phplist.com	aspen.phplist.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:18:01.076870918 CEST	1.1.1.1	192.168.2.5	0x4275	No error (0)	mautic.joseeustasiorivera.com		161.35.102.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 10:18:07.478543997 CEST	1.1.1.1	192.168.2.5	0x5798	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 10:18:07.478543997 CEST	1.1.1.1	192.168.2.5	0x5798	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.za.m.mimecastprotect.com

fs.microsoft.com

https:

www.bing.com

security-za.mimecast.com

kmg.zaz.mybluehost.me

mautic.joseeustasiorivera.com

aduiwui.hosted.phplist.com

url3687.joseeustasiorivera.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49740	41.74.192.103	80	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 10:17:40.944387913 CEST	9107	OUT	GET /r/nicvwfju-3Jzcl9E28N5HDz4OffXMjteTYpbNvloFT5zMIVLYBasJLP-0m7ysyE6X9Dy1l_06fq1bB1c25OieLNTQiicCeT9qAlE5FVIm2GbShUPegN24SJA3QaKS7IkbP0sFRh_28ML1bxg1DineadwBRdxHJeWPtBs6K3VZo1OWeXOEworxsmcYsO1rvRpdmKxx2IACgstetB73Ui580n5p9St5P6S72giAq1e1it8X4D8EEC4_U7S_POzILJJ4bMxB2kqHQkOppFGIZYZYViw3o4TYQ4ryXH4U6mWU7ZPVCvZw4MD_n0nT9ebvmB_GrYOopN0X3-00gfUDmq1ZN9sFvJRXav9hSRJryGY0HXj_pgs9EQ6yN-ByTB6G3y5pcxUzxY-iKVUjqsfYkAZxNb7S1fe_uDL5IkoEbL6p0UAix0l4qYBllWf_W6pW81jE_R-knBuIBOQhOwok4g3Mtm0RD9G3_xkJc99-mETfyVxl9PxQc3CmAq6AyBd2wwdsTpWtqoACpcJTaUy3RDIk-ncLlFyJ4NrgTNtHGbUuRRCXQteZV0evO9UdNe3E4NWK7i02zgxhXoHAk9hWVrhjPct8mbYxtcNK2F1LEZlNRm53ZO2xIj_5fpfS7EpAwlpU9jpebStefLCkaPTFvf1IDB3QDPUDEBCzljj6J0An4ZhUrYTXEKHwh7Zh7RZDIO32GERZaBKYL__7dIPqM9WI8OH4X8VSOK7-VdgIoCIF3IcQ90Qs1a_WY1F6lp6xX4RnlJZ2_0-Rl4YPjfOizT006_QukLzC1GylhQWWpAw9rDXbVMHQ3JHl4ILWYpeG4hIGxVwq1btd1jsmhixpv4z-UWkGjNIi0BSY9hOi9XS5ZqlS1VMZsUFK6BjJIkStWEQrrx0Gf3c8dbt5I9u6MIxaqHGH_ou1DmIEI_cqynpT_jvDPmCZ9RQOgurC6Jtm1mQBxTGvRRDe--PQGS_BHs1riDbAQRXXEJ89gg_D-w4-5cTSn-U8jUuH4NZP2vRy1x2ifD2OTQS0tthhr3UzgQd9YIdEMKu0jWEKIizmsKpRJAajPXtmOo0Hhzxu1VBvcY5ZgBVyBdasiQUN9JjZhXhOvTkODAEWjdtIWxZXVKwYIOemBNS52AhebH-D9t05peTotiS3J5wUx7UqcB5rWVfsXATUIy90T3noy4j6O9cTDvypSs9Vy5Bya0wDL4bDcCUZW_Wu4Q4C8f7NhTCk7BJTamlkhzktUcjo3u3TFxfj42MI7brz09zFcRSYHnZWFsJ4L7vbJWZfJ-xC-m318kiGTkw3TakZ3EMwcVrWqiY9JiWNEvfKhBjmaht0Gs060RjsEMxVdbKErGGWoQPmVeKgjRqV4bf7pxNWonrMsSjtrBjuICiYhbZdcrTuAFs67wylq5BL-UR2QpQf6Oy7335Z2rO8uC6bqITcgKCCGGU-EdlXCrRt6qWVlCe1pCmqUB71mje-AJWfN9ZmXQNH3JeTBCY-PpZzTU6kKdofWf768mkdZ8RxRpAxj17ArEDncQQWPg0gEeNrbDh4EiUSYt3V6x_42RmuGDQBP8LAf8cNisINdxJ_cduee_RPiO1ikZ_H-hoMuwkww39um6aIfU27yCEuSBD-fSFQORv986Z4xYo-VmS3O2XDnpZwdlJ0rNiK8lukJ0R_agZqoYaFc7HrRLMbOgHkinsqOVNiznwWWv5GgnKyt4UNqH8WLMFSaNxaAc_EJy3z98KIvUcw76qbBX0HV8386v0n2Kg_Q6nl8aXpgJLYh3d5dEr3t-K2qQS8O-_Smby7NLPoQ7x29HwMLCzHRp7TmMPz87JcUzOfRiAs_Qm7hJ0QeAzRTwGiYbZMpxFU6zwfqcFhk-E2bn_1zhPFZ7Xri1ze_rjdjp6fdSRRg6n4PwNq8B9Lw4Z6Msi194JT2U15bkucUB5D8OASew1fOG9k31Iw8F1M32oPkYxV4DiduPsXuZ4UlgV8nf49QyCtClnaWcKa-Wp9BgL-Uy0_5oVGoIQ0jqjyC0aeHpnhp2t2UWF3kC2kjqxAh9vr8zkOX3zSDmXoqNodrk2NVlO62wayWlRnYr3gfE5kSofKsb-gyJ2AKhxtrVm2xAjkBgpT-2YquoqwuDvj7_DfHGg4ph-2oncL7KIbYp90AnZmGZU6hwqYpfOyTA31UQ8Ha-LbhTzU7_Kgb3zCyIL6ETrHSPpwqCwyKfS4-nxChMuVAPWsrKIfuFJlYQs6Ag1vVG2aAyoRjHS-N6ka0axZGNJm1wtCw-Emk_hCkJKDbNV7LamEsRlBnkhFZ5WplGrdAexpfoGe1hCb9cLMiTF3VF5UcwgrCiXRHkGfuQaiDHpLYCfz9BxQIAzhM5LpJvKkkaUo6BrHOJYPJ6rsRcKQqmkfigrVIZNkNF3Qks441GdDGP7nUwYoBCtnqYKZPt6aDzkpAaW2SfsVdggzMz8Bi6SxgFRhXFXLCLZ9C-5yxdH3lNqRTdKX67iLfucbjc6oqNyctnOjCMex8GYEvszWMc8DnGdlzosPMlSFZt_axqpJSqml9dbMhFazIWPpCusoax0RfMIHt92ct2uzo1f4cZRuU5ZUXdfVx6WxIVtVE0S_om-hkkcS6rq1o58FKs_GqoyW72OO9Mm4UPg6qfnVZiBI6AiZD5T7ubriCjBhplUGMkiSyLJSZJa2PWKKWYUhHZoXprBYbHNebMJqiLj5C3DU3UqsxfIs_8ZpWB3Da3oa3ypajCse2Mis1VJVvtBe6acYJCPEWoiRbHSpfBj4Mt_6tuchXwLs3p7s-fuwMXdeTdqZjtENkn8bmT6pCy-v_SYQ7FQP8dkLbFczA6g4-_eUy-EKvlp0FSM72a8_uR0__MkykVeBQKDtVO4n6KWqy91EjjeTg_Q9bPfjAUudYbO02xEzyaOB-RTo1aPFelvEuFMfmdD5Tvo3_TihIt8y1S8dZ94R8LRUah_TaYPXPBxn8KFe9YFNsWH_J53GagJKpJpDL_tllm8TRXMcyDzpoWDgw4JENzsHWL-m5hnFGM2lT7N5nH8b6HoaRiOxT04s1wmFpM2uBjniygakZXGIhyQYDjRxj4x7tVO2EnnbovIZkvjqlfvLz5TzlTyAUAf5x1hFZMsXtvcDegGvTJgnkrQakqxtUoJwXJ4lJhLZ3JGKqR6F6JmQPWMB3MaDWxluFEVRgKofNQ7GuLGcMwg5lTMUrOtQMXAIpXQKFyb_1LCKSGxh4mm0gC9_D6FiuSkPwus65Gtwd8OXuR0_02_UtjdzJUPlh9rZ9_MSwXXLFRXZssetlhje1FCNg2odXFDXjfpL_qg9EUxB2z6fXlcYgNU78D_O3O7SD014l1dmR66bB50sV4Q9oJaj_pqZ1rNg41TK7hJMCXK_MiMKBOJoSXehBt_q3xdDiT5kDQ3CX8XGcyD41kSZ6A2qqX2wpMYbi19QJkrsm-xGZRyoCT1_hWOMLmRbScutl01mdrrmx9IEuEv-SSBDEjm_LENIj6iqJULvH3oKGYZ6vF4yDCJKcuCibyhiEj3IZ9H-CCLrLNtCjGBR8NFpg-FSZCSmO_eeG8TAHBTv86kUOAxx_Gusx6oTpIlcWDW3zVLjvbjikx4EVY7-dSXYgOEYOO5a2d6bJgTKhwho7m56Y8hH2vvFcbISYyBhkvSwScIeEwXQFa5tw0py5rQ_QXBSkGOt6eU7hO129SVRWE4AlWrbcitv-O4HdQrPVW-S2QO5eeIgwNiAjh2ZYH8KlGsA-tc9U44FZBcOPjEPOx8uvniVXmItcwhg1qQZP2vKXQrwX9K3U316sWYj2_-dvhokxts9NnWYr80jnzsjcnHVzjqBanOSQyC1RprznSGwSwsPxTBi9Dg3txMQBUoKehgo2B0fW08JMS-nWmtpGpPb-pO4aURM3FJ93WWu83bsBrmGZpUZjvylTkTx-M7g8dOegJitM8EdUGTY5VqBvtoIayxS3tJN74EFhQY7YTCtJ2dqWR5MC_KU_Jz0AIMaaSfh0klxtodYW8EQDxRd4odtWFbfzKcoO2gKLMlKSqOrh5kPy0vR7r3xC2arfvCm_DJ0w3VVLp-Icwun-wS0q8Gnsz Host: url.za.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 24, 2024 10:17:41.450210094 CEST	1023	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 24 Apr 2024 08:17:41 GMT Content-Length: 0 Connection: keep-alive Location: http://url3687.joseeustasiorivera.com/ls/click?upn=u001.WslTG9wNI9ZTr6hKRVV4HPL04rhPXNVA1qLeJRxlii5SsjSbNqhqy2WBF-2FXfAgx8QNdllbadoE4fVWjuZ-2B5UQ3G-2FlBvMbs5CBdX3YeYWOK-2F6q3iBRBBf6qXJxTT5lbFLe3Z4RjDqO-2BB57yfMFmy9YkiMdUd8WgrfAKeLTaXE21KhJJAshw67B0pZXnPJRm-2B8sgY0FPSPpFZpf-2BVxZJkRMTtx5UnOIWpHD-2BYDpIwbxry5M5LqYoQsmtSj9V9OHjLgxp2vW9Joe7JwCr4lezO6ar-2FkWn2L59g5abavealh7vSXHePJ4FFKKtEgz3SI6kNBkMzOmxrXVnRT0TMpsE1N9nU6yBUwjXsIs3IN5smI4J50m7iMblfiC57CPCP3qVYcpIr7AjW-2F9DozTZjyE9gqSg-3D-3DP9Kw_-2F6Nc-2Br04KTzJB7Zv6oU-2FxaH4pgk-2FOwAvvyHvoZunJLB98VVOJ7B9y1YRsavABbjaQ45TkFOzf4hWBNjl2HWyE4LUZXMNjHsifR-2BcDacpEWzBesgqKBmzfjorjKYZA-2FWPKjemOluG0buUOehztc5-2FP9UluQ0wqdkSUURDJgE9SbEJ-2BiFL8sNHMAbupoJprnU4ZPYDaADU0s1LnwlFYBmQJNk8k0q1AApLpokpmvmiTBE-3D Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49742	167.89.123.204	80	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 10:17:42.059089899 CEST	1154	OUT	GET /ls/click?upn=u001.WslTG9wNI9ZTr6hKRVV4HPL04rhPXNVA1qLeJRxlii5SsjSbNqhqy2WBF-2FXfAgx8QNdllbadoE4fVWjuZ-2B5UQ3G-2FlBvMbs5CBdX3YeYWOK-2F6q3iBRBBf6qXJxTT5lbFLe3Z4RjDqO-2BB57yfMFmy9YkiMdUd8WgrfAKeLTaXE21KhJJAshw67B0pZXnPJRm-2B8sgY0FPSPpFZpf-2BVxZJkRMTtx5UnOIWpHD-2BYDpIwbxry5M5LqYoQsmtSj9V9OHjLgxp2vW9Joe7JwCr4lezO6ar-2FkWn2L59g5abavealh7vSXHePJ4FFKKtEgz3SI6kNBkMzOmxrXVnRT0TMpsE1N9nU6yBUwjXsIs3IN5smI4J50m7iMblfiC57CPCP3qVYcpIr7AjW-2F9DozTZjyE9gqSg-3D-3DP9Kw_-2F6Nc-2Br04KTzJB7Zv6oU-2FxaH4pgk-2FOwAvvyHvoZunJLB98VVOJ7B9y1YRsavABbjaQ45TkFOzf4hWBNjl2HWyE4LUZXMNjHsifR-2BcDacpEWzBesgqKBmzfjorjKYZA-2FWPKjemOluG0buUOehztc5-2FP9UluQ0wqdkSUURDJgE9SbEJ-2BiFL8sNHMAbupoJprnU4ZPYDaADU0s1LnwlFYBmQJNk8k0q1AApLpokpmvmiTBE-3D HTTP/1.1 Host: url3687.joseeustasiorivera.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 24, 2024 10:17:42.263258934 CEST	819	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 24 Apr 2024 08:17:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 321 Connection: keep-alive Location: https://mautic.joseeustasiorivera.com/r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319& X-Robots-Tag: noindex, nofollow Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 75 74 69 63 2e 6a 6f 73 65 65 75 73 74 61 73 69 6f 72 69 76 65 72 61 2e 63 6f 6d 2f 72 2f 33 30 34 32 64 62 39 37 61 38 62 31 36 65 35 31 35 66 33 64 37 65 66 65 63 3f 63 74 3d 59 54 6f 31 4f 6e 74 7a 4f 6a 59 36 49 6e 4e 76 64 58 4a 6a 5a 53 49 37 59 54 6f 79 4f 6e 74 70 4f 6a 41 37 63 7a 6f 31 4f 69 4a 6c 62 57 46 70 62 43 49 37 61 54 6f 78 4f 32 6b 36 4d 54 6b 37 66 58 4d 36 4e 54 6f 69 5a 57 31 68 61 57 77 69 4f 32 6b 36 4d 54 6b 37 63 7a 6f 30 4f 69 4a 7a 64 47 46 30 49 6a 74 7a 4f 6a 49 79 4f 69 49 32 4e 6a 49 33 5a 44 41 78 5a 6a 4e 69 4e 6d 46 69 4e 7a 51 31 4e 7a 4d 31 4e 44 45 77 49 6a 74 7a 4f 6a 51 36 49 6d 78 6c 59 57 51 69 4f 33 4d 36 4e 54 6f 69 4d 7a 4d 30 4e 6a 67 69 4f 33 4d 36 4e 7a 6f 69 59 32 68 68 62 6d 35 6c 62 43 49 37 59 54 6f 78 4f 6e 74 7a 4f 6a 55 36 49 6d 56 74 59 57 6c 73 49 6a 74 70 4f 6a 45 35 4f 33 31 39 26 61 6d 70 3b 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://mautic.joseeustasiorivera.com/r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319&">Found</a>.

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	41.74.196.103	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:16:57 UTC	733	OUT	GET /s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com HTTP/1.1 Host: url.za.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:16:58 UTC	3309	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 24 Apr 2024 08:16:58 GMT Content-Length: 0 Connection: close Location: https://url.za.m.mimecastprotect.com/r/xoWRNKoEAKwPduYMk1dDQh2BNiEd7n2wLpzHtGfntaY0zf4QTgI4Yd-_7zM9sn9YSGmhjE9MvonWTgl37KzHVsgVNdhyq9qICtTMZel6-Gm9DYNGiUZPWWI-zKSjb58E2THL0qSOdFc-kp60XOkO98CHHh24g4cGG2AxG86Wcq1Cn8A4RjTw7wuvsm85nIxnkmsuhCQZ3ok8DKaa9NcEOIYHmiEfrTBY2Je65wT_BoiuXzrp-u0PmvvWsmkys-AqLI60ex-QHHuxFtGL_wMt512T_wuN1dyJrrPVSn7xtAnF1X3scV5rfCv6X6vM7QPvJt0KEP10J3tC3YewFJI4q7ngCwiwYdO1L_2kxZ1Uy7nCU3O-R0qH1N1GvrlMICsH1H9qV7YFpUCO0nChe0iQCIXThqB3olaZVdU8O-P3P78BpUlcFWX9d5dYcRNib9eUYfUEfHwzijO9mfKQhnekH-xO422dVavDE-1A5i4fGuHT9Z_rP-95A9KVWxta6DJmYFX4us-O520tiEwcQw2iQHp66a7BbJRPz-Oj1DF3PVUdAmu0p1HTkCNNUpZj5vyDL8qdU1afvxCcInhC88f-zK8DB7mRoTi1xKCk4e2QDXuJ5pMPMt_zvM3K-ZkT3dgPDj0sSIeZcdV7ywThjKmqPhyWFkoKyRu_tyTYnvYI_hPeCeTkLacLtW8fLr5gk6kZYfXSUIbjzGgscgIrBtt7TXq1g7MZfk3rf0iTepYFC0zCpwJAR55VV1LBfGxnyVc7vBqYqsSslxH-zx5xlDswj_R3xwk_wajnzBlWA3pD3S2PfQyIdLYstm2kqxAiaOZSc9o85AyY4LEd3YiS0PJQ9tlseUxrnzsKJvSAp42tfBhPTF6UnjfIxD2MxXWHz-TwjdI9KAHPMEMb_4r35nM-4-YGiQjcKZFU6ICR4EG8jYyct_YISleIcFkFnO7C-z6crgaNm9XhqfYY2cqL0kaaANbHXO1TOPTHg4zYtxVt1SU8t4man9IrHv_cANXNcjbpX_SfvW0GrqnSyoMnOZ0lW3fYClCx774wImai5sdBfwnE3YKUKkZc3-_ph90ye4QlqWFWrTuOROYas5ilxukGHP1QI_pAkUP7QDJ8lVhsBOu0kVTjYrRKn3TkwsO2M4j3etVZ1GkGu6n0WryA1aG2B3i_VZzMCkqiGJdI634ZliWPiYu3CehwcTqGMF7MbueWrD2jYCZ35dDtSsSJLZXhbJ3qNliFk_knwTuweAE7ccfP8W-A61xgFGpy7SGR8vOSPNTm5i0OTQfQbvm_FPv6oz8gGKPDjatYuk7bCXXS7yRdCggAH-9Y_1AKdEqjKGN_fApYbE_10scUR8s-XwhyaNbcCj0gcgUqcR47bV0pX9KAwswNrgB7dQIpZrDWrrJDYRAjWzR-9x2_MCQrT395YUoFhhhnzfC5EpE3vSX6j7RxfycbvfY3252BIy9F-Oz10s4eQnNQX4FAULPH9rvTQ5a2E8Lfh0xX9HQQ2rMlQLseC9GSINyF-z4Jj3026u5NT1hGtFTG3Ql4-CsaylaxyQ8q6FGZZ39bLvD0EDmYuKHvIB8JCH0SC48wZPpRS5--2OPKUCsyIReERniumaxJ5qeg_rMTMcdY9IXkby2PLqGEiIUGIoqJjIvJPKdj3bb-adreFyFARMkfwI0foVYbz2-zyk-BEVoGr3qsTKnO1ZxdzSAlcFBs9On_fpzlPCAQew4mUX0sWx9vHB4eaPn7TGDPniq6Lu9hFr8Vu_7UgZ4ugKZyMcA1qrZhFqDWq28DwjbqFPqkXFdVa3mjusWnVuvKmWe2Jddm2Bfdt9wwpf27NtPXnN6YzDgP3hWipO4QBsJaWKUNDthAoOTWx5vPJcxprwOQLNu6dZVAGURav7d8NCVKrnVwTePjaHAKUsv3HYWZEmGybM8gaEaFm_LAm-Zwf64xRn2mj58dWRnLwj1QtEVvw7p325QmceezVW9dYlw29zNdp7Rp29Hr4CsBRbKNGIyCBO63eArRXOYOQQKr8OVkO97DlWQVjtb_9RdcyMRD2bBCjZGJ4_Jjc1QyXwohD0lt_INphHaRXuXzdeeBga2R3A5gRLK4mUSIPC4F1MQxmK5nw-mApgGcAT61tLOarkeUCijhwJnJN5in1qbl74CoWQdJrurW160GGfxhYVvqbGL911AKCysg9Nmc9dXytqEFR4p3Mk-cdixXj0Ehv8fh8P6XiNa062lsq0AWL3V0A8gpj2BGLdxi7EmEcUy4LJCFVXVQExC0v9oWgnt225gjrAARCZJOF28AQKUAMAj9ALJ1ncm_2w7AewzU9CYeeK27JS9F_EaAxJBt9qGzvHnp8wSRyzdczdIT7m0hPLo5SRrP9j0qNw4E6wtBgIEXnDt6hdqNeAf2AI9FSGAjs_zPWEQTfJ6bezor6ggADRDgNTpAcfQHTW5Wxmz7MFRgsVwds6WODJOtRTXjbzAbFSoAwawGaciqapPKMD7Ku5NyX3_VvaqfkKFd1E7jjjProixKT7bwyOIf9VDSMx86eXgTAtnUg0ywWwaccjkl1KMjOg6HR-nXiMzbrLnTnFAweFfVByRwQOELEyj55FnZ5ykakgDERU24ZSn-QnryoBm4S4RVP2tqXK5Wm57HkbSho_Eg62VMKHHujTRit8F5iT0Wb8TLaMz6kcQ6zeYpb_Hy-LAqucrH_A65b4t6aVPVBOYd5jbtRyxvt3dPPkvjL4WC-jhV90egK5621NKWaHVccdGFOw-jAglEBQz5Cow-D9y4uscl5nDhYY82Ct2u6tX6hzRuZ-CpmfQzIRMciEsE5gg3ds5k-es7DxLEfOJ3A2f5hYeoa1CJ2SKfXTG81oJLJhYRF7sYtvCDHFyWNXRtupZ1bkKkB8ml7bygTctkq5S62Rfih-MKSu7r76zKlj8IMGw7uCbbQY8jsjUcjQNLjVkt91dRWsNcYd9aXPqfeu4fJFwRCIx52JmzEcq08DwGj1_xA3MJLOKXxa1MNRkCik4-HOlJi0Hsg0tgqDnM-ZP4kyeM92-VSYeX6olRaxOE0x9IT9PFiD1mEL4W Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	41.74.196.103	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:16:59 UTC	3745	OUT	GET /r/xoWRNKoEAKwPduYMk1dDQh2BNiEd7n2wLpzHtGfntaY0zf4QTgI4Yd-_7zM9sn9YSGmhjE9MvonWTgl37KzHVsgVNdhyq9qICtTMZel6-Gm9DYNGiUZPWWI-zKSjb58E2THL0qSOdFc-kp60XOkO98CHHh24g4cGG2AxG86Wcq1Cn8A4RjTw7wuvsm85nIxnkmsuhCQZ3ok8DKaa9NcEOIYHmiEfrTBY2Je65wT_BoiuXzrp-u0PmvvWsmkys-AqLI60ex-QHHuxFtGL_wMt512T_wuN1dyJrrPVSn7xtAnF1X3scV5rfCv6X6vM7QPvJt0KEP10J3tC3YewFJI4q7ngCwiwYdO1L_2kxZ1Uy7nCU3O-R0qH1N1GvrlMICsH1H9qV7YFpUCO0nChe0iQCIXThqB3olaZVdU8O-P3P78BpUlcFWX9d5dYcRNib9eUYfUEfHwzijO9mfKQhnekH-xO422dVavDE-1A5i4fGuHT9Z_rP-95A9KVWxta6DJmYFX4us-O520tiEwcQw2iQHp66a7BbJRPz-Oj1DF3PVUdAmu0p1HTkCNNUpZj5vyDL8qdU1afvxCcInhC88f-zK8DB7mRoTi1xKCk4e2QDXuJ5pMPMt_zvM3K-ZkT3dgPDj0sSIeZcdV7ywThjKmqPhyWFkoKyRu_tyTYnvYI_hPeCeTkLacLtW8fLr5gk6kZYfXSUIbjzGgscgIrBtt7TXq1g7MZfk3rf0iTepYFC0zCpwJAR55VV1LBfGxnyVc7vBqYqsSslxH-zx5xlDswj_R3xwk_wajnzBlWA3pD3S2PfQyIdLYstm2kqxAiaOZSc9o85AyY4LEd3YiS0PJQ9tlseUxrnzsKJvSAp42tfBhPTF6UnjfIxD2MxXWHz-TwjdI9KAHPMEMb_4r35nM-4-YGiQjcKZFU6ICR4EG8jYyct_YISleIcFkFnO7C-z6crgaNm9XhqfYY2cqL0kaaANbHXO1TOPTHg4zYtxVt1SU8t4man9IrHv_cANXNcjbpX_SfvW0GrqnSyoMnOZ0lW3fYClCx774wImai5sdBfwnE3YKUKkZc3-_ph90ye4QlqWFWrTuOROYas5ilxukGHP1QI_pAkUP7QDJ8lVhsBOu0kVTjYrRKn3TkwsO2M4j3etVZ1GkGu6n0WryA1aG2B3i_VZzMCkqiGJdI634ZliWPiYu3CehwcTqGMF7MbueWrD2jYCZ35dDtSsSJLZXhbJ3qNliFk_knwTuweAE7ccfP8W-A61xgFGpy7SGR8vOSPNTm5i0OTQfQbvm_FPv6oz8gGKPDjatYuk7bCXXS7yRdCggAH-9Y_1AKdEqjKGN_fApYbE_10scUR8s-XwhyaNbcCj0gcgUqcR47bV0pX9KAwswNrgB7dQIpZrDWrrJDYRAjWzR-9x2_MCQrT395YUoFhhhnzfC5EpE3vSX6j7RxfycbvfY3252BIy9F-Oz10s4eQnNQX4FAULPH9rvTQ5a2E8Lfh0xX9HQQ2rMlQLseC9GSINyF-z4Jj3026u5NT1hGtFTG3Ql4-CsaylaxyQ8q6FGZZ39bLvD0EDmYuKHvIB8JCH0SC48wZPpRS5--2OPKUCsyIReERniumaxJ5qeg_rMTMcdY9IXkby2PLqGEiIUGIoqJjIvJPKdj3bb-adreFyFARMkfwI0foVYbz2-zyk-BEVoGr3qsTKnO1ZxdzSAlcFBs9On_fpzlPCAQew4mUX0sWx9vHB4eaPn7TGDPniq6Lu9hFr8Vu_7UgZ4ugKZyMcA1qrZhFqDWq28DwjbqFPqkXFdVa3mjusWnVuvKmWe2Jddm2Bfdt9wwpf27NtPXnN6YzDgP3hWipO4QBsJaWKUNDthAoOTWx5vPJcxprwOQLNu6dZVAGURav7d8NCVKrnVwTePjaHAKUsv3HYWZEmGybM8gaEaFm_LAm-Zwf64xRn2mj58dWRnLwj1QtEVvw7p325QmceezVW9dYlw29zNdp7Rp29Hr4CsBRbKNGIyCBO63eArRXOYOQQKr8OVkO97DlWQVjtb_9RdcyMRD2bBCjZGJ4_Jjc1QyXwohD0lt_INphHaRXuXzdeeBga2R3A5gRLK4mUSIPC4F1MQxmK5nw-mApgGcAT61tLOarkeUCijhwJnJN5in1qbl74CoWQdJrurW160GGfxhYVvqbGL911AKCysg9Nmc9dXytqEFR4p3Mk-cdixXj0Ehv8fh8P6XiNa062lsq0AWL3V0A8gpj2BGLdxi7EmEcUy4LJCFVXVQExC0v9oWgnt225gjrAARCZJOF28AQKUAMAj9ALJ1ncm_2w7AewzU9CYeeK27JS9F_EaAxJBt9qGzvHnp8wSRyzdczdIT7m0hPLo5SRrP9j0qNw4E6wtBgIEXnDt6hdqNeAf2AI9FSGAjs_zPWEQTfJ6bezor6ggADRDgNTpAcfQHTW5Wxmz7MFRgsVwds6WODJOtRTXjbzAbFSoAwawGaciqapPKMD7Ku5NyX3_VvaqfkKFd1E7jjjProixKT7bwyOIf9VDSMx86eXgTAtnUg0ywWwaccjkl1KMjOg6HR-nXiMzbrLnTnFAweFfVByRwQOELEyj55FnZ5ykakgDERU24ZSn-QnryoBm4S4RVP2tqXK5Wm57HkbSho_Eg62VMKHHujTRit8F5iT0Wb8TLaMz6kcQ6zeYpb_Hy-LAqucrH_A65b4t6aVPVBOYd5jbtRyxvt3dPPkvjL4WC-jhV90egK5621NKWaHVccdGFOw-jAglEBQz5Cow-D9y4uscl5nDhYY82Ct2u6tX6hzRuZ-CpmfQzIRMciEsE5gg3ds5k-es7DxLEfOJ3A2f5hYeoa1CJ2SKfXTG81oJLJhYRF7sYtvCDHFyWNXRtupZ1bkKkB8ml7bygTctkq5S62Rfih-MKSu7r76zKlj8IMGw7uCbbQY8jsjUcjQNLjVkt91dRWsNcYd9aXPqfeu4fJFwRCIx52JmzEcq08DwGj1_xA3MJLOKXxa1MNRkCik4-HOlJi0Hsg0tgqDnM-ZP4kyeM92-VSYeX6olRaxOE0x9IT9PFiD1mEL4W HTTP/1.1 Host: url.za.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:17 UTC	448	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 24 Apr 2024 08:17:17 GMT Content-Length: 0 Connection: close Location: https://security-za.mimecast.com/ttpwp#/warn?key=UMMXfKARRP4MY8Zq3un416WIvD7PnDenWK6JwQXoannhc8NfEW5pwBF8Z9yCBamAX1GkAwjAb0kWFObzmyuka5uk9sZCP4TyjtHRKni4ByDoQrOb_BtseaWv7m1jziv3 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:16:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 08:16:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=254809 Date: Wed, 24 Apr 2024 08:16:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 08:17:00 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=254801 Date: Wed, 24 Apr 2024 08:17:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 08:17:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49721	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:13 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713946600033&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-24 08:17:13 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-24 08:17:13 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-24 08:17:13 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 7DE68D5EC03941ACB9E8DE33EEE27DD1 Ref B: LAX311000108049 Ref C: 2024-04-24T08:17:13Z Date: Wed, 24 Apr 2024 08:17:13 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713946633.2fb2cdc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:19 UTC	672	OUT	GET /ttpwp HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:19 UTC	434	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/html; charset=utf-8 Content-Length: 3447 ETag: W/"d77-JdL/eOsS7z2yo5B+jSzjnBxVBdk" Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:19 GMT Connection: close
2024-04-24 08:17:19 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49727	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:21 UTC	536	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:22 UTC	533	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:21 GMT Connection: close
2024-04-24 08:17:22 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:21 UTC	538	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:22 UTC	536	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:21 GMT Connection: close
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 68 65 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 72 65 74 75 72 6e 20 44 2e 72 65 6a 65 63 74 28 65 29 7d 76 61 72 20 64 3d 6f 28 22 73 74 61 74 65 22 29 2c 6d 3d 6f 28 22 76 61 6c 75 65 22 29 2c 67 3d 6f 28 22 66 69 6e 61 6c 6c 79 22 29 2c 76 3d 6f 28 22 70 61 72 65 6e 74 50 72 6f 6d 69 73 65 56 61 6c 75 65 22 29 2c 5f 3d 6f 28 22 70 61 72 65 6e 74 50 72 6f 6d 69 73 65 53 74 61 74 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6b 28 65 2c 74 2c 6e 29 7d 63 61 74 63 68 28 72 29 7b 6b 28 65 2c 21 31 2c 72 29 7d Data Ascii: r");function f(e){return e&&e.then}function h(e){return e}function p(e){return D.reject(e)}var d=o("state"),m=o("value"),g=o("finally"),v=o("parentPromiseValue"),_=o("parentPromiseState");function y(e,t){return function(n){try{k(e,t,n)}catch(r){k(e,!1,r)}
2024-04-24 08:17:22 UTC	9013	IN	Data Raw: 72 4c 65 61 76 65 3a 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 4d 53 50 6f 69 6e 74 65 72 4d 6f 76 65 3a 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 2c 4d 53 50 6f 69 6e 74 65 72 4f 75 74 3a 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 4d 53 50 6f 69 6e 74 65 72 4f 76 65 72 3a 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 4d 53 50 6f 69 6e 74 65 72 55 70 3a 22 70 6f 69 6e 74 65 72 75 70 22 7d 2c 5f 3d 30 3b 5f 3c 72 2e 6c 65 6e 67 74 68 3b 5f 2b 2b 29 7b 76 61 72 20 79 3d 63 2b 28 28 45 3d 72 5b 5f 5d 29 2b 73 29 2c 62 3d 63 2b 28 45 2b 61 29 3b 6f 5b 45 5d 3d 7b 7d 2c 6f 5b 45 5d 5b 73 5d 3d 79 2c 6f 5b 45 5d 5b 61 5d 3d 62 7d 66 6f 72 28 5f 3d 30 3b 5f 3c 68 2e 6c 65 6e 67 74 68 3b 5f 2b 2b 29 66 6f 72 28 76 61 72 20 54 3d 68 5b 5f 5d 2c 6b 3d 69 5b 54 5d 3d 7b 7d Data Ascii: rLeave:"pointerleave",MSPointerMove:"pointermove",MSPointerOut:"pointerout",MSPointerOver:"pointerover",MSPointerUp:"pointerup"},_=0;_<r.length;_++){var y=c+((E=r[_])+s),b=c+(E+a);o[E]={},o[E][s]=y,o[E][a]=b}for(_=0;_<h.length;_++)for(var T=h[_],k=i[T]={}
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 2e 65 76 65 6e 74 4e 61 6d 65 73 2c 69 3d 6e 2e 7a 6f 6e 65 53 79 6d 62 6f 6c 45 76 65 6e 74 4e 61 6d 65 73 2c 6f 3d 6e 2e 54 52 55 45 5f 53 54 52 2c 61 3d 6e 2e 46 41 4c 53 45 5f 53 54 52 2c 73 3d 6e 2e 5a 4f 4e 45 5f 53 59 4d 42 4f 4c 5f 50 52 45 46 49 58 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 75 3d 72 5b 63 5d 2c 6c 3d 73 2b 28 75 2b 61 29 2c 66 3d 73 2b 28 75 2b 6f 29 3b 69 5b 75 5d 3d 7b 7d 2c 69 5b 75 5d 5b 61 5d 3d 6c 2c 69 5b 75 5d 5b 6f 5d 3d 66 7d 76 61 72 20 68 3d 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3b 69 66 28 68 26 26 68 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 28 65 2c 74 2c 5b 68 26 26 68 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2c 21 30 7d Data Ascii: .eventNames,i=n.zoneSymbolEventNames,o=n.TRUE_STR,a=n.FALSE_STR,s=n.ZONE_SYMBOL_PREFIX,c=0;c<r.length;c++){var u=r[c],l=s+(u+a),f=s+(u+o);i[u]={},i[u][a]=l,i[u][o]=f}var h=e.EventTarget;if(h&&h.prototype)return t.patchEventTarget(e,t,[h&&h.prototype]),!0}
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 65 61 73 69 6e 67 2c 76 61 6c 75 65 3a 65 5b 6e 5d 5b 72 5d 7d 3b 74 5b 72 5d 3d 74 5b 72 5d 7c 7c 5b 5d 2c 74 5b 72 5d 2e 70 75 73 68 28 69 29 7d 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 7b 76 61 72 20 61 3d 74 5b 6f 5d 3b 69 66 28 30 21 3d 61 5b 30 5d 2e 6f 66 66 73 65 74 7c 7c 31 21 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 66 66 73 65 74 29 74 68 72 6f 77 7b 74 79 70 65 3a 44 4f 4d 45 78 63 65 70 74 69 6f 6e 2e 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 5f 45 52 52 2c 6e 61 6d 65 3a 22 4e 6f 74 53 75 70 70 6f 72 74 65 64 45 72 72 6f 72 22 2c 6d 65 73 73 61 67 65 3a 22 50 61 72 74 69 61 6c 20 6b 65 79 66 72 61 6d 65 73 20 61 72 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 7d 72 65 74 75 72 6e 20 74 7d 28 65 2e 6e 6f 72 6d 61 6c 69 7a 65 4b Data Ascii: easing,value:e[n][r]};t[r]=t[r]\|\|[],t[r].push(i)}for(var o in t){var a=t[o];if(0!=a[0].offset\|\|1!=a[a.length-1].offset)throw{type:DOMException.NOT_SUPPORTED_ERR,name:"NotSupportedError",message:"Partial keyframes are not supported"}}return t}(e.normalizeK
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 22 73 63 61 6c 65 78 22 3a 72 65 74 75 72 6e 5b 65 2e 64 5b 30 5d 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 63 61 6c 65 79 22 3a 72 65 74 75 72 6e 5b 31 2c 30 2c 30 2c 30 2c 30 2c 65 2e 64 5b 30 5d 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 63 61 6c 65 7a 22 3a 72 65 74 75 72 6e 5b 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 65 2e 64 5b 30 5d 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 63 61 6c 65 33 64 22 3a 72 65 74 75 72 6e 5b 65 2e 64 5b 30 5d 2c 30 2c 30 2c 30 2c 30 2c 65 2e 64 5b 31 5d 2c 30 2c 30 2c 30 2c 30 2c 65 2e 64 5b 32 5d 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 6b 65 77 22 3a 76 61 72 20 66 Data Ascii: "scalex":return[e.d[0],0,0,0,0,1,0,0,0,0,1,0,0,0,0,1];case"scaley":return[1,0,0,0,0,e.d[0],0,0,0,0,1,0,0,0,0,1];case"scalez":return[1,0,0,0,0,1,0,0,0,0,e.d[0],0,0,0,0,1];case"scale3d":return[e.d[0],0,0,0,0,e.d[1],0,0,0,0,e.d[2],0,0,0,0,1];case"skew":var f
2024-04-24 08:17:23 UTC	4359	IN	Data Raw: 75 6d 65 52 65 70 65 61 74 65 64 28 6e 2c 2f 5e 2f 2c 72 29 3b 69 66 28 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 69 5b 30 5d 2c 73 3d 5b 7b 22 25 22 3a 35 30 7d 2c 7b 22 25 22 3a 35 30 7d 5d 2c 63 3d 30 2c 75 3d 21 31 2c 6c 3d 30 3b 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 66 3d 61 5b 6c 5d 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 3f 28 75 3d 2f 62 6f 74 74 6f 6d 7c 72 69 67 68 74 2f 2e 74 65 73 74 28 66 29 2c 73 5b 63 3d 7b 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 63 65 6e 74 65 72 3a 63 2c 74 6f 70 3a 31 2c 62 6f 74 74 6f 6d 3a 31 7d 5b 66 5d 5d 3d 6f 5b 66 5d 2c 22 63 65 6e 74 65 72 22 3d 3d 66 26 26 63 2b 2b 29 3a 28 75 26 26 28 28 66 3d 74 28 66 29 29 5b 22 25 22 5d 3d 28 66 5b 22 25 22 5d 7c 7c 30 29 2b 31 30 30 Data Ascii: umeRepeated(n,/^/,r);if(i){for(var a=i[0],s=[{"%":50},{"%":50}],c=0,u=!1,l=0;l<a.length;l++){var f=a[l];"string"==typeof f?(u=/bottom\|right/.test(f),s[c={left:0,right:0,center:c,top:1,bottom:1}[f]]=o[f],"center"==f&&c++):(u&&((f=t(f))["%"]=(f["%"]\|\|0)+100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:21 UTC	535	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:22 UTC	537	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:21 GMT Connection: close
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-04-24 08:17:22 UTC	3593	IN	Data Raw: 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 5c 6e 7d 5c 6e 62 2c 5c 6e 73 74 72 6f 6e 67 20 7b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 6e 7d 5c 6e 64 66 6e 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 5c 6e 7d 5c 6e 68 31 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 2e 36 37 65 6d 20 30 3b 5c 6e 7d 5c 6e 6d 61 72 6b 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 30 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 7d 5c 6e 73 6d 61 6c 6c 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 5c 6e 7d 5c 6e 73 75 62 2c 5c 6e 73 75 Data Ascii: text-decoration: underline dotted;\n}\nb,\nstrong {\n font-weight: bold;\n}\ndfn {\n font-style: italic;\n}\nh1 {\n font-size: 2em;\n margin: 0.67em 0;\n}\nmark {\n background: #ff0;\n color: #000;\n}\nsmall {\n font-size: 80%;\n}\nsub,\nsu
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 20 7b 5c 6e 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 5c 6e 7d 5c 6e 61 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 5c 6e 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 61 3a 68 6f 76 65 72 2c 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 30 64 30 64 30 64 3b 5c 6e 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 Data Ascii: {\n font-family: inherit;\n font-size: inherit;\n line-height: inherit;\n}\na {\n color: #333333;\n text-decoration: none;\n}\na:hover, a:focus {\n color: #0d0d0d;\n text-decoration: underline;\n}\na:focus {\n outline: 5px auto -webkit-focus-ring
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 34 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 35 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 36 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 37 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 38 20 7b 5c 6e 20 20 20 20 6d 61 Data Ascii: .col-md-offset-4 {\n margin-left: 33.33333333%;\n }\n .col-md-offset-5 {\n margin-left: 41.66666667%;\n }\n .col-md-offset-6 {\n margin-left: 50%;\n }\n .col-md-offset-7 {\n margin-left: 58.33333333%;\n }\n .col-md-offset-8 {\n ma
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 3b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 5c 6e 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 6e 7d 5c 6e 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2e 64 69 73 61 62 6c 65 64 2c 5c 6e 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 5c 6e 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2e 64 69 73 61 62 6c 65 64 2c 5c 6e 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 5c 6e 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 7b 5c 6e 20 20 63 75 72 73 6f 72 3a 20 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 5c 6e 7d 5c 6e 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 2b 20 2e 72 61 64 69 6f 2d 69 6e 6c Data Ascii: ;\n font-weight: 400;\n vertical-align: middle;\n cursor: pointer;\n}\n.radio-inline.disabled,\nfieldset[disabled] .radio-inline,\n.checkbox-inline.disabled,\nfieldset[disabled]\n.checkbox-inline {\n cursor: not-allowed;\n}\n.radio-inline + .radio-inl
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 6e 2d 77 61 72 6e 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 5b 64 69 73 61 62 6c 65 64 5d 2e 66 6f 63 75 73 2c 5c 6e 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 2c 5c 6e 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 2c 5c 6e 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 35 42 37 30 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 63 61 33 30 30 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 20 2e 62 61 64 Data Ascii: n-warning[disabled]:focus, .btn-warning[disabled].focus,\nfieldset[disabled] .btn-warning:hover,\nfieldset[disabled] .btn-warning:focus,\nfieldset[disabled] .btn-warning.focus {\n background-color: #E5B700;\n border-color: #cca300;\n}\n.btn-warning .bad
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 20 3e 20 6c 69 20 3e 20 61 2c 20 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 6c 69 20 3e 20 61 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 2c 20 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 7d 5c 6e 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 6c 69 20 3e 20 61 2c 20 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 6c 69 20 3e 20 61 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 Data Ascii: > li > a, .nav-tabs.nav-justified > li > a {\n margin-bottom: 0;\n }\n}\n.nav-tabs-justified, .nav-tabs.nav-justified {\n border-bottom: 0;\n}\n.nav-tabs-justified > li > a, .nav-tabs.nav-justified > li > a {\n margin-right: 0;\n border-radius: 4p
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 5c 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 67 20 3e 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 73 70 61 6e 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 67 20 3e 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 61 2c 5c 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 67 20 3e 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 73 70 61 6e 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 Data Ascii: \n.pagination-lg > li:first-child > span {\n border-top-left-radius: 6px;\n border-bottom-left-radius: 6px;\n}\n.pagination-lg > li:last-child > a,\n.pagination-lg > li:last-child > span {\n border-top-right-radius: 6px;\n border-bottom-right-radius:
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 70 61 6e 65 6c 20 3e 20 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 5c 6e 7d 5c 6e 2e 70 61 6e 65 6c 20 3e 20 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 20 2b 20 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 Data Ascii: panel > .panel-collapse > .list-group:last-child .list-group-item:last-child {\n border-bottom: 0;\n border-bottom-right-radius: 5px;\n border-bottom-left-radius: 5px;\n}\n.panel > .panel-heading + .panel-collapse > .list-group .list-group-item:first-c
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 70 2e 74 6f 70 2d 72 69 67 68 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 5c 6e 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 6c 65 66 74 3a 20 35 70 78 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 35 70 78 20 35 70 78 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2e 72 69 67 68 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 5c 6e 20 20 74 6f 70 3a 20 35 30 25 3b 5c 6e 20 20 6c 65 66 74 3a 20 30 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 35 70 78 20 35 70 78 20 35 70 78 20 30 3b 5c 6e 20 20 62 6f Data Ascii: p.top-right .tooltip-arrow {\n bottom: 0;\n left: 5px;\n margin-bottom: -5px;\n border-width: 5px 5px 0;\n border-top-color: #000;\n}\n.tooltip.right .tooltip-arrow {\n top: 50%;\n left: 0;\n margin-top: -5px;\n border-width: 5px 5px 5px 0;\n bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:21 UTC	533	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:22 UTC	538	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:21 GMT Connection: close
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-04-24 08:17:22 UTC	1172	IN	Data Raw: 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5f 5c 75 30 34 33 65 5c 75 30 34 33 61 5c 75 30 34 34 32 5f 5c 75 30 34 33 64 5c 75 30 34 33 65 5c 75 30 34 33 35 5f 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 66 5f 5c 75 30 34 33 66 5c 75 30 34 33 65 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 64 5c 75 30 34 33 Data Ascii: 430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433_\u0441\u0435\u043f_\u043e\u043a\u0442_\u043d\u043e\u0435_\u0434\u0435\u043a".split("_"),weekdays:"\u043d\u0435\u0434\u0435\u043b\u044f_\u043f\u043e\u043d\u0435\u0434\u0435\u043b\u043d\u043
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 33 30 5d 20 64 64 64 64 20 5b 5c 75 30 34 33 32 5d 20 4c 54 22 3b 63 61 73 65 20 31 3a 63 61 73 65 20 32 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 3a 72 65 74 75 72 6e 22 5b 5c 75 30 34 31 63 5c 75 30 34 33 38 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 33 62 5c 75 30 34 33 38 5c 75 30 34 34 66 5d 20 64 64 64 64 20 5b 5c 75 30 34 33 32 5d 20 4c 54 22 7d 7d 2c 73 61 6d 65 45 6c 73 65 3a 22 4c 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 22 5c 75 30 34 34 31 5c 75 30 34 33 62 5c 75 30 34 33 35 5c 75 30 34 33 34 20 25 73 22 2c 70 61 73 74 3a 22 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 38 20 25 73 22 2c 73 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 61 5c 75 30 34 33 65 Data Ascii: 30] dddd [\u0432] LT";case 1:case 2:case 4:case 5:return"[\u041c\u0438\u043d\u0430\u043b\u0438\u044f] dddd [\u0432] LT"}},sameElse:"L"},relativeTime:{future:"\u0441\u043b\u0435\u0434 %s",past:"\u043f\u0440\u0435\u0434\u0438 %s",s:"\u043d\u044f\u043a\u043e
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 66 64 61 62 72 5f 4e 6f 5c 78 66 64 61 62 72 5f 44 65 6b 61 62 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 78 64 64 61 6e 5f 46 65 77 5f 4d 61 72 5f 41 70 72 5f 4d 61 5c 78 66 64 5f 49 5c 78 66 64 6e 5f 49 5c 78 66 64 6c 5f 41 77 67 5f 53 65 6e 5f 4f 6b 74 5f 4e 6f 5c 78 66 64 5f 44 65 6b 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 5c 78 64 64 65 6b 5c 75 30 31 35 66 65 6e 62 65 5f 44 75 5c 75 30 31 35 66 65 6e 62 65 5f 53 69 5c 75 30 31 35 66 65 6e 62 65 5f 5c 78 63 37 61 72 5c 75 30 31 35 66 65 6e 62 65 5f 50 65 6e 5c 75 30 31 35 66 65 6e 62 65 5f 41 6e 6e 61 5f 5c 75 30 31 35 65 65 6e 62 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 5c 78 64 64 65 Data Ascii: fdabr_No\xfdabr_Dekabr".split("_"),monthsShort:"\xddan_Few_Mar_Apr_Ma\xfd_I\xfdn_I\xfdl_Awg_Sen_Okt_No\xfd_Dek".split("_"),weekdays:"\xddek\u015fenbe_Du\u015fenbe_Si\u015fenbe_\xc7ar\u015fenbe_Pen\u015fenbe_Anna_\u015eenbe".split("_"),weekdaysShort:"\xdde
2024-04-24 08:17:22 UTC	16384	IN	Data Raw: 32 5c 75 32 64 33 30 5c 75 32 64 35 39 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2f 4d 4d 2f 59 59 59 59 22 2c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 20 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 7d 2c 63 61 6c 65 6e 64 61 72 3a 7b 73 61 6d 65 44 61 79 3a 22 5b 5c 75 32 64 33 30 5c 75 32 64 35 39 5c 75 32 64 33 37 5c 75 32 64 34 35 20 5c 75 32 64 33 34 5d 20 4c 54 22 2c 6e 65 78 74 44 61 79 3a 22 5b 5c 75 32 64 33 30 5c 75 32 64 35 39 5c 75 32 64 33 64 5c 75 32 64 33 30 20 5c 75 32 64 33 34 5d 20 Data Ascii: 2\u2d30\u2d59".split("_"),longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"DD/MM/YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY HH:mm",LLLL:"dddd D MMMM YYYY HH:mm"},calendar:{sameDay:"[\u2d30\u2d59\u2d37\u2d45 \u2d34] LT",nextDay:"[\u2d30\u2d59\u2d3d\u2d30 \u2d34]
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 76 61 72 20 69 3d 72 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 72 5d 28 29 7d 29 2c 65 26 26 28 48 5b 65 5d 3d 69 29 2c 74 26 26 28 48 5b 74 5b 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 28 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 5b 31 5d 2c 74 5b 32 5d 29 7d 29 2c 6e 26 26 28 48 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6f 72 64 69 6e 61 6c 28 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 56 61 6c 69 Data Ascii: var i=r;"string"==typeof r&&(i=function(){return this[r]()}),e&&(H[e]=i),t&&(H[t[0]]=function(){return C(i.apply(this,arguments),t[1],t[2])}),n&&(H[n]=function(){return this.localeData().ordinal(i.apply(this,arguments),e)})}function I(e,t){return e.isVali
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 29 29 3c 31 7c 7c 69 3e 37 29 26 26 28 75 3d 21 30 29 29 3a 28 61 3d 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 77 65 65 6b 2e 64 6f 77 2c 73 3d 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 77 65 65 6b 2e 64 6f 79 2c 6c 3d 52 65 28 53 74 28 29 2c 61 2c 73 29 2c 6e 3d 6b 74 28 74 2e 67 67 2c 65 2e 5f 61 5b 30 5d 2c 6c 2e 79 65 61 72 29 2c 72 3d 6b 74 28 74 2e 77 2c 6c 2e 77 65 65 6b 29 2c 6e 75 6c 6c 21 3d 74 2e 64 3f 28 28 69 3d 74 2e 64 29 3c 30 7c 7c 69 3e 36 29 26 26 28 75 3d 21 30 29 3a 6e 75 6c 6c 21 3d 74 2e 65 3f 28 69 3d 74 2e 65 2b 61 2c 28 74 2e 65 3c 30 7c 7c 74 2e 65 3e 36 29 26 26 28 75 3d 21 30 29 29 3a 69 3d 61 29 2c 72 3c 31 7c 7c 72 3e 4e 65 28 6e 2c 61 2c 73 29 3f 6d 28 65 29 2e 5f 6f 76 65 72 66 6c 6f 77 57 65 65 6b 73 3d 21 30 3a 6e 75 6c 6c 21 3d 75 3f 6d Data Ascii: ))<1\|\|i>7)&&(u=!0)):(a=e._locale._week.dow,s=e._locale._week.doy,l=Re(St(),a,s),n=kt(t.gg,e._a[0],l.year),r=kt(t.w,l.week),null!=t.d?((i=t.d)<0\|\|i>6)&&(u=!0):null!=t.e?(i=t.e+a,(t.e<0\|\|t.e>6)&&(u=!0)):i=a),r<1\|\|r>Ne(n,a,s)?m(e)._overflowWeeks=!0:null!=u?m
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 29 7d 2c 70 6e 2e 69 73 56 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 74 68 69 73 29 7d 2c 70 6e 2e 6c 61 6e 67 3d 58 74 2c 70 6e 2e 6c 6f 63 61 6c 65 3d 24 74 2c 70 6e 2e 6c 6f 63 61 6c 65 44 61 74 61 3d 65 6e 2c 70 6e 2e 6d 61 78 3d 44 74 2c 70 6e 2e 6d 69 6e 3d 54 74 2c 70 6e 2e 70 61 72 73 69 6e 67 46 6c 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 28 7b 7d 2c 6d 28 74 68 69 73 29 29 7d 2c 70 6e 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 6e 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 3b 66 6f 72 28 74 20 69 6e 20 65 29 6f 28 65 2c 74 29 26 26 6e 2e Data Ascii: fore(e,t)},pn.isValid=function(){return p(this)},pn.lang=Xt,pn.locale=$t,pn.localeData=en,pn.max=Dt,pn.min=Tt,pn.parsingFlags=function(){return f({},m(this))},pn.set=function(e,t){if("object"==typeof e){var n,r=function(e){var t,n=[];for(t in e)o(e,t)&&n.
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 76 61 6c 69 64 44 61 74 65 28 29 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 61 2c 73 2c 6f 2c 75 3d 4b 6e 28 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 29 2f 31 65 33 2c 6c 3d 4b 6e 28 74 68 69 73 2e 5f 64 61 79 73 29 2c 63 3d 4b 6e 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 29 2c 64 3d 74 68 69 73 2e 61 73 53 65 63 6f 6e 64 73 28 29 3b 72 65 74 75 72 6e 20 64 3f 28 65 3d 47 28 75 2f 36 30 29 2c 74 3d 47 28 65 2f 36 30 29 2c 75 25 3d 36 30 2c 65 25 3d 36 30 2c 6e 3d 47 28 63 2f 31 32 29 2c 63 25 3d 31 32 2c 72 3d 75 3f 75 2e 74 6f 46 69 78 65 64 28 33 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 3f 30 2b 24 2f 2c 22 22 29 3a 22 22 2c 69 3d 64 3c 30 3f 22 2d 22 3a 22 22 2c 61 3d 4a 6e 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 29 21 3d 3d 4a 6e 28 64 29 3f Data Ascii: validDate();var e,t,n,r,i,a,s,o,u=Kn(this._milliseconds)/1e3,l=Kn(this._days),c=Kn(this._months),d=this.asSeconds();return d?(e=G(u/60),t=G(e/60),u%=60,e%=60,n=G(c/12),c%=12,r=u?u.toFixed(3).replace(/\.?0+$/,""):"",i=d<0?"-":"",a=Jn(this._months)!==Jn(d)?
2024-04-24 08:17:23 UTC	16384	IN	Data Raw: 6d 65 3a 7b 66 75 74 75 72 65 3a 22 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 37 20 25 73 22 2c 70 61 73 74 3a 22 25 73 20 5c 75 30 34 34 32 5c 75 30 34 33 30 5c 75 30 34 33 63 5c 75 30 34 34 33 22 2c 73 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 33 62 5c 75 30 34 34 63 5c 75 30 34 33 61 5c 75 30 34 35 36 20 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 61 5c 75 30 34 34 33 5c 75 30 34 33 64 5c 75 30 34 33 34 22 2c 6d 3a 74 2c 6d 6d 3a 74 2c 68 3a 74 2c 68 68 3a 74 2c 64 3a 22 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 30 34 34 63 22 2c 64 64 3a 74 2c 4d 3a 22 5c 75 30 34 33 63 5c 75 30 34 33 35 5c 75 30 34 34 31 5c 75 30 34 34 66 5c 75 30 34 Data Ascii: me:{future:"\u043f\u0440\u0430\u0437 %s",past:"%s \u0442\u0430\u043c\u0443",s:"\u043d\u0435\u043a\u0430\u043b\u044c\u043a\u0456 \u0441\u0435\u043a\u0443\u043d\u0434",m:t,mm:t,h:t,hh:t,d:"\u0434\u0437\u0435\u043d\u044c",dd:t,M:"\u043c\u0435\u0441\u044f\u04

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49730	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:26 UTC	630	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-za.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-za.mimecast.com/ttpwp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:26 UTC	487	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"21790-18d89b1f630" Content-Type: font/woff2 Content-Length: 137104 Date: Wed, 24 Apr 2024 08:17:26 GMT Connection: close
2024-04-24 08:17:26 UTC	5361	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2024-04-24 08:17:26 UTC	16384	IN	Data Raw: 53 df 39 c4 fa cb f8 4e c2 3c a4 47 6b 3d 2f 82 b5 fc a4 a9 53 6c 75 00 d6 c0 62 c1 fb 47 ad 42 22 15 2f 3c cf a5 c4 96 1b 2f 72 2e 7c 2c 8a aa b3 c5 c6 cc e2 b4 da a1 ef fd 89 e2 c3 62 62 23 1a 52 55 76 66 37 84 65 b5 5a a8 1d 0b 25 c3 6f f9 51 c5 c3 0b 79 8e 31 e1 ad 03 1c 0e 19 aa 4e 3c ca 86 77 9e e9 d4 89 a4 af 1f 5e 65 e1 16 22 bd aa eb 61 3e ef a7 53 7a 65 0e ea 54 ff 1c 9d ea c1 38 1b aa 64 13 17 5d 5e a6 3a 27 15 02 2b d0 95 fa c0 4a 0b b3 aa 3a f2 c5 50 9c b5 97 d2 48 69 0b 01 75 da c6 5a aa ac ea f1 5a aa dd e6 5e 37 dd b6 ea 7c a2 c2 24 e5 c9 d6 16 af 6b dd 9e e9 94 19 08 65 6f 38 16 fa 08 15 05 64 0c ca 73 fb da ed 2c 4b 2c dd 1c 56 e5 28 e2 00 ca a9 c3 98 e1 85 97 b7 0b 2a 21 7f b4 45 19 ee 8d e9 9b 5a 7a a3 34 a2 68 d8 d5 44 ca 3c 87 b2 a3 Data Ascii: S9N<Gk=/SlubGB"/</r.\|,bb#RUvf7eZ%oQy1N<w^e"a>SzeT8d]^:'+J:PHiuZZ^7\|$keo8ds,K,V(*!EZz4hD<
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: a0 f6 a9 b9 2e b5 45 b4 56 99 d6 76 06 53 2f b2 a8 96 2a 27 db 97 74 5a 3b 64 2d 23 45 48 6e cb 9e a5 4e 8d d7 e4 d3 f2 66 ce d7 b6 f7 ac 59 4d 6f 81 56 88 e9 a5 95 8a a1 fc f2 51 0e c7 b9 67 37 3e 6a 75 c6 31 2e e6 0a 9f dc 3f f6 40 07 6f ce c4 71 f9 73 b3 4f 5b bc 31 8b 3f 57 e4 f2 c7 2b 47 a5 62 98 50 d5 70 e6 95 a9 23 83 6b a8 62 20 e6 ce 26 39 40 f6 85 39 d6 24 ac 68 6d 8e 85 09 66 a3 fc 1a 26 26 98 a2 f2 eb d8 98 7d 9a ed a2 e6 e8 7d 9d 3f 99 74 5a b2 90 24 49 67 92 8a 31 32 f4 07 95 49 32 f0 c6 cc d1 49 1c ae e7 2d 50 7a 49 94 ba ae da a2 77 d6 3c 9a 75 2c 9a 4f 30 ce f9 ff 12 12 f4 f4 7a 8c 3c 16 e0 9d 35 57 36 4a 3a 91 fc 0c c1 fb fc 1f 5e 3d d0 33 e8 70 81 71 75 e9 fd 39 92 36 c1 38 5a 2a 30 45 4e b3 60 dc 2c 4d ec 29 a7 65 38 0b e8 43 c0 49 af Data Ascii: .EVvS/'tZ;d-#EHnNfYMoVQg7>ju1.?@oqsO[1?W+GbPp#kb &9@9$hmf&&}}?tZ$Ig12I2I-PzIw<u,O0z<5W6J:^=3pqu968Z0EN`,M)e8CI
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: d1 26 e4 b1 87 17 7c 35 69 3d 40 9e fe bb 04 6c 4b 8b 2a 91 c0 61 00 1b c2 c9 2b fd fe f8 ba 28 23 42 63 d0 7d a7 79 f5 f3 f3 82 14 1b 25 0c 46 24 8f 2e 69 36 78 32 be 5a 48 eb 53 ac 16 11 a9 e5 ed 41 28 97 4f 3e 22 af af 10 b8 1e 73 a1 7a ac c6 70 a6 22 d1 f2 18 86 65 2e fa 15 7d 20 de 9b 45 f6 9e d7 49 2a d7 b1 01 2d 57 50 34 d2 86 40 0d 9b 28 15 5d 1b df cc 39 17 d1 4c 9c 6c 06 6b be 72 ed d0 d4 c6 8c 66 1b 7c 6c 53 1c ec f4 20 14 d2 6c fd ee 3f ae 1d 71 80 9d 53 23 e5 c5 22 d7 4c 13 9f 05 5d a2 41 2c 27 90 e1 2b f7 31 2f 53 52 c0 bd 84 5b a8 ec 0a d0 f6 ed 0e af dc 2e c5 06 2c d2 37 fd 7e 89 c8 fc 07 a5 8f 4a a9 5e 41 1e bb cc 5a 54 2d 45 5d 6c dc 40 65 29 94 f2 ea c7 c1 93 ef 22 0d 7c 0b ea 66 22 a3 3e 4d 10 27 f0 0d 1e c3 4a cf 35 c1 19 d7 0f 57 ab Data Ascii: &\|5i=@lKa+(#Bc}y%F$.i6x2ZHSA(O>"szp"e.} EI-WP4@(]9Llkrf\|lS l?qS#"L]A,'+1/SR[.,7~J^AZT-E]l@e)"\|f">M'J5W
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: 3b 31 7a 14 ed 84 ce e9 88 56 be c0 8a ba 07 69 0f 32 83 25 14 80 ce 67 c3 89 15 37 50 a7 f7 97 6a 56 16 e7 37 e9 28 62 76 9c 9d ec 6c 41 e6 1a 4e 00 74 da 8b d8 d4 d8 81 94 f2 d8 4c 83 0e 03 89 a4 b8 b4 4b 77 fd f5 26 3c 0a c6 9b 0a d3 3c dd 95 ee 9e 4f bc 0d 23 cd 23 d8 79 f7 b6 dc 4e b0 c3 6d fe 64 00 2d ff 4f 42 74 11 de 39 4d 59 3e 7c ca 5d 47 bf ec a9 8a 04 5c 14 4e a7 75 60 85 b3 07 ae 91 73 09 5c 79 4d ec ea 35 1f 2b 33 3e 3c d4 fe 2b 7b 61 29 c9 3b 01 09 24 51 96 b2 c0 51 b1 32 db 4a ea e7 76 71 0f 90 9d 8b 01 e4 9f 69 c3 08 22 e8 e8 38 77 42 6f 58 e4 b2 03 69 37 91 f3 f7 4d 78 bc ed 0c 0e 02 13 e5 3e 1f 5c a9 f8 ca cc 61 a0 90 5b dd 87 e7 bf 70 db 92 ef eb 52 01 97 02 bf 62 62 76 72 2b de 8e dc e5 19 4d 47 9b 8e 3c 5a 3b ee 9a e5 f6 b8 3f f8 cf Data Ascii: ;1zVi2%g7PjV7(bvlANtLKw&<<O##yNmd-OBt9MY>\|]G\Nu`s\yM5+3><+{a);$QQ2Jvqi"8wBoXi7Mx>\a[pRbbvr+MG<Z;?
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: 5e 05 66 ac d6 f3 0a 73 d9 76 70 71 ff 5b 32 e7 66 19 46 c9 ff df fa aa bd 1d e8 2d fb 5b ba 27 ed 0f dd 16 80 29 7b 32 3f cf d5 79 43 e5 ae de 65 31 24 e9 67 fb ed 2e 88 25 24 71 ad 0b 76 fb 95 1b 12 cf 07 22 a8 8a 0d b4 bc 7b 17 85 6e 62 94 3a 5c 78 f1 5e 1e 6d 83 11 41 a5 9c 07 95 e3 08 4e 6c f1 d2 eb b5 da 85 37 21 c7 42 cf 2e c4 f4 25 ee 6d 5e 9e 28 c8 70 ce 89 ee c3 1e e2 9c 73 19 e4 fa 92 20 5b 89 1d c2 60 b1 18 e0 bf 25 8a a3 51 f3 1d c7 93 42 d6 af fc a8 6f fd f9 61 b1 e5 a6 94 62 48 dc 09 76 35 ad 62 ad a2 32 99 7b 98 34 07 23 28 10 57 ff 71 7e 5b 0b 40 39 50 bf eb f6 d0 91 d1 68 9c ae 7f 5f 13 be 71 99 74 a1 26 5c 76 d2 e4 af 0c 88 c8 b8 a8 83 b0 a2 ac 64 15 30 8c 9a 89 18 f0 1f 7c d7 77 fc 4b 1b 8a 29 52 e8 23 31 10 b4 48 91 85 0a eb 21 10 9e Data Ascii: ^fsvpq[2fF-['){2?yCe1$g.%$qv"{nb:\x^mANl7!B.%m^(ps [`%QBoabHv5b2{4#(Wq~[@9Ph_qt&\vd0\|wK)R#1H!
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: 68 7a d5 b3 d0 82 45 63 64 7a 0f 09 21 da 46 27 ff 83 dc a3 97 0c 9a fe 80 09 8f 6a 70 91 8f 13 e1 de 95 84 e7 31 42 53 6c 10 b5 3e e7 4a 96 7b ca d3 8f 1a 62 0d 9d ac 89 41 3d bf 51 1d 4d 2f b8 bb b9 d4 05 f9 29 e5 6d fe fd 69 4a f2 a6 bb 05 f4 e8 ea db 1f 50 13 c4 1a 7a 8d 0f 0b 33 fd 8c b8 0a 4b 60 dd 73 1b 1c 69 fa a1 ee 03 71 8e 74 81 0e 4a 19 f8 d0 17 dd a1 83 56 b1 30 53 a0 d5 e7 ba f7 14 a8 08 35 50 de bb 73 12 54 b9 b1 da 54 5a f2 9e a6 a6 3d 64 ad a8 54 47 58 5d f0 b7 84 65 5e b4 6c 68 e7 8c 2c da 1a 72 97 54 85 4c 9d fa 2e 8c c1 b4 2f b6 cf fc 54 3e 35 13 19 96 22 2d 21 6c 76 79 f9 c8 5c 62 5d 4a f4 3f 51 fd 11 91 8f a7 54 fc 5e a3 73 63 de cb 97 41 f5 ce 15 bd 7c 91 dc e3 1d 19 25 7e aa 41 af a5 25 f6 bc 7d 82 07 7a ad a2 64 0f 30 9f ad b1 39 Data Ascii: hzEcdz!F'jp1BSl>J{bA=QM/)miJPz3K`siqtJV0S5PsTTZ=dTGX]e^lh,rTL./T>5"-!lvy\b]J?QT^scA\|%~A%}zd09
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: 91 b8 e5 65 2d 2a 6a 70 c3 aa 5a 8c 15 22 5c d8 62 e3 01 eb 5f c6 31 e5 5a 02 03 63 57 3e ba 7c 65 95 24 65 0b 31 45 4d 5f 57 2a d5 ad ba f2 f0 ca ca a0 c4 f3 1e eb a8 55 3f 9f f1 38 f3 73 15 75 9d c7 f9 a0 c4 95 eb 79 56 49 75 a5 eb d4 f4 14 e2 96 da 21 7a 2c 1c 22 60 b0 27 84 99 ec 0c 23 b1 ef f4 ba bd 25 08 ac d8 0b d8 e0 c2 be ee cc ff d5 bb 3a 76 c7 c5 b7 8b 5d 71 cf 0a 6c f8 27 b7 24 65 15 d3 07 b2 ca 2e 8a ad 8b 5a 2b 94 04 a2 6f 3b 58 0e 53 16 af 29 2a f7 f0 99 59 b3 ce 1c ce 8d 7a 1f cb 94 a5 f2 f8 d6 6a 8a 3d 45 c5 8d bb d8 ec 5d 21 79 a5 03 18 bc 3f 5a 8e 35 39 27 28 13 19 7d dd e7 02 12 8f a6 bb 98 93 fe 80 b4 98 5d 6a c2 63 ff e8 0d 0c 38 d7 ed 3e 47 7d ac 31 27 a7 71 75 9d 26 25 de e3 a5 53 ca 87 f4 8f 73 49 7f d3 ff 0f b7 d8 74 17 50 a5 dc Data Ascii: e-jpZ"\b_1ZcW>\|e$e1EM_WU?8suyVIu!z,"`'#%:v]ql'$e.Z+o;XS)*Yzj=E]!y?Z59'(}]jc8>G}1'qu&%SsItP
2024-04-24 08:17:27 UTC	16384	IN	Data Raw: 37 ea 38 83 ad 1d e1 b0 64 93 af c5 57 bf b6 81 85 14 45 62 85 df 13 24 f0 3e 14 cf be a8 17 22 a6 3a 1a d1 4c 46 48 a1 5f 20 8d e1 41 0e e6 f3 7a 30 42 37 7f 8c c8 1d 44 88 ba d6 c5 63 90 01 24 9c 78 46 c4 94 24 cb c9 fc f6 02 8f be d0 d2 2e b1 02 cf 5f a2 48 fe bf 8b 7e f7 27 45 1d 3b 5f 84 64 32 62 47 24 2a 85 74 ae 8f a3 61 e9 94 a8 a6 3c 29 e3 f7 3b 49 b8 e3 9f 96 37 c5 a4 90 d0 22 d2 9b 39 18 8d 01 c6 06 8e bb 66 a4 29 c2 f3 03 e2 f8 b4 7b f7 e2 71 05 93 4c 91 21 54 c2 e2 9b d7 ee 62 24 43 14 c1 bc 59 89 ff 14 a4 66 cb 5d 9e b3 a9 e8 33 92 33 22 3d 5c 9e 14 0a 3e d4 97 d7 0d 8f cd 2e 57 a3 9c 5f 0a 79 61 2d 0f 4f 78 7d 36 aa fc ae d8 40 ae 1f 5f 87 5d c4 99 52 24 b8 4f 89 4f 6d 61 95 3a 31 10 1a 69 19 fc 4f f0 bb 4f 1b a3 c9 c7 8c a4 57 e3 04 27 23 Data Ascii: 78dWEb$>":LFH_ Az0B7Dc$xF$._H~'E;_d2bG$*ta<);I7"9f){qL!Tb$CYf]33"=\>.W_ya-Ox}6@_]R$OOma:1iOOW'#
2024-04-24 08:17:27 UTC	671	IN	Data Raw: 97 98 35 43 60 a8 03 1a ec 7e 37 76 6a 0d 14 d4 61 43 5a 6f c5 ed b9 0e cc 68 d8 6f 79 34 69 ee 38 b8 e5 37 ae c8 c3 6c 64 2d c8 c1 31 fc 3a 6e 70 48 a9 55 55 ac f6 35 c0 98 40 37 25 83 8c b1 6c 4b 53 d7 7e 8f 38 c6 db 5b 3c c8 d1 d5 ff 8c 3c c6 2a b7 fc 22 91 36 df 08 aa 0f af 55 7f 6f e1 df b7 98 66 99 eb f1 ee 0c b5 f5 83 13 aa 3c 66 18 db 6e 60 43 a7 a9 8f 5c 1f 9d 90 88 f7 38 0d 79 60 dd 1d 86 b5 4e 39 45 f1 db 5a 0a 62 a8 1d c1 39 65 56 c8 93 0b 84 07 54 ff a1 8d 62 b6 b1 55 17 b5 a5 11 71 31 c6 0d d3 6f 10 86 f8 c6 1a 79 5a b8 36 28 f2 a4 99 7a ce 83 45 eb 13 e5 f3 d8 6e cb 8c 13 a7 04 aa 66 3a ba 76 c7 ba 51 5c 1c bb b6 33 be 5e ac 0e fe 67 ae 99 46 1b 7d d7 ec bc 4d e5 68 25 f0 76 68 2b d8 7c d2 6c 2a 92 82 f0 3b e2 ea fb 02 49 27 92 1c c3 28 50 Data Ascii: 5C`~7vjaCZohoy4i87ld-1:npHUU5@7%lKS~8[<<"6Uof<fn`C\8y`N9EZb9eVTbUq1oyZ6(zEnf:vQ\3^gF}Mh%vh+\|l;I'(P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:26 UTC	604	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:26 UTC	529	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:26 GMT Connection: close
2024-04-24 08:17:26 UTC	301	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-04-24 08:17:26 UTC	16384	IN	Data Raw: 4e 5f 50 52 49 56 41 54 45 5f 49 45 22 3a 22 49 6e 50 72 69 76 61 74 65 20 6d 6f 64 65 22 2c 22 43 4f 4d 50 41 54 49 42 49 4c 49 54 59 5f 56 49 45 57 22 3a 22 43 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 56 69 65 77 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 45 44 47 45 22 3a 22 49 6e 50 72 69 76 61 74 65 20 6d 6f 64 65 22 2c 22 44 49 53 41 42 4c 45 44 5f 43 4f 4f 4b 49 45 5f 45 52 52 4f 52 22 3a 22 3c 73 74 72 6f 6e 67 3e 43 6f 6f 6b 69 65 73 20 61 72 65 20 72 65 71 75 69 72 65 64 2e 3c 2f 73 74 72 6f 6e 67 3e 20 54 6f 20 63 6f 6e 74 69 6e 75 65 2c 20 70 6c 65 61 73 65 20 61 6c 6c 6f 77 20 63 6f 6f 6b 69 65 73 20 69 6e 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 41 43 43 45 53 53 5f 44 45 4e 49 45 44 5f 4d 45 Data Ascii: N_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_ME
2024-04-24 08:17:27 UTC	467	IN	Data Raw: 4f 55 4e 44 22 3a 22 57 65 20 63 61 6e 27 74 20 73 65 65 6d 20 74 6f 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2e 22 2c 22 4e 4f 54 5f 46 4f 55 4e 44 5f 4d 45 53 53 41 47 45 22 3a 22 45 72 72 6f 72 20 34 30 34 2c 20 69 66 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 6b 65 65 70 73 20 70 6f 70 70 69 6e 67 20 75 70 2c 20 70 6c 65 61 73 65 20 67 65 74 20 69 6e 20 74 6f 75 63 68 20 77 69 74 68 22 2c 22 49 4e 56 41 4c 49 44 5f 54 4f 4b 45 4e 22 3a 22 49 6e 76 61 6c 69 64 20 74 6f 6b 65 6e 22 2c 22 49 4e 56 41 4c 49 44 5f 54 4f 4b 45 4e 5f 4d 45 53 53 41 47 45 22 3a 22 49 6e 76 61 6c 69 64 2f 45 78 70 69 72 65 64 20 74 6f 6b 65 6e 2c 20 69 66 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 6b 65 65 70 73 20 70 6f Data Ascii: OUND":"We can't seem to find the page you're looking for.","NOT_FOUND_MESSAGE":"Error 404, if this message keeps popping up, please get in touch with","INVALID_TOKEN":"Invalid token","INVALID_TOKEN_MESSAGE":"Invalid/Expired token, if this message keeps po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49731	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:26 UTC	660	OUT	POST /api/ttp/url/get-page-data HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive Content-Length: 172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://security-za.mimecast.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:26 UTC	172	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 55 4d 4d 58 66 4b 41 52 52 50 34 4d 59 38 5a 71 33 75 6e 34 31 36 57 49 76 44 37 50 6e 44 65 6e 57 4b 36 4a 77 51 58 6f 61 6e 6e 68 63 38 4e 66 45 57 35 70 77 42 46 38 5a 39 79 43 42 61 6d 41 58 31 47 6b 41 77 6a 41 62 30 6b 57 46 4f 62 7a 6d 79 75 6b 61 35 75 6b 39 73 5a 43 50 34 54 79 6a 74 48 52 4b 6e 69 34 42 79 44 6f 51 72 4f 62 5f 42 74 73 65 61 57 76 37 6d 31 6a 7a 69 76 33 22 2c 22 70 61 67 65 54 79 70 65 22 3a 22 77 61 72 6e 22 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"UMMXfKARRP4MY8Zq3un416WIvD7PnDenWK6JwQXoannhc8NfEW5pwBF8Z9yCBamAX1GkAwjAb0kWFObzmyuka5uk9sZCP4TyjtHRKni4ByDoQrOb_BtseaWv7m1jziv3","pageType":"warn"}]}
2024-04-24 08:17:27 UTC	560	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 08:17:26 GMT content-type: application/json; charset=UTF-8 Content-Length: 9686 connection: close cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow content-md5: 8a29733b0509d894655832603d305751 x-mc-req-id: 7de49798-297d-49d2-aa0f-2dd50e1d5449 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"25d6-4R1G3WowugVfWgdyWzMlHSPwByY"
2024-04-24 08:17:27 UTC	9686	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 77 61 72 6e 22 2c 22 6f 72 69 67 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 75 72 6c 33 36 38 37 2e 6a 6f 73 65 65 75 73 74 61 73 69 6f 72 69 76 65 72 61 2e 63 6f 6d 2f 6c 73 2f 63 6c 69 63 6b 3f 75 70 6e 5c 75 30 30 33 64 75 30 30 31 2e 57 73 6c 54 47 39 77 4e 49 39 5a 54 72 36 68 4b 52 56 56 34 48 50 4c 30 34 72 68 50 58 4e 56 41 31 71 4c 65 4a 52 78 6c 69 69 35 53 73 6a 53 62 4e 71 68 71 79 32 57 42 46 2d 32 46 58 66 41 67 78 38 51 4e 64 6c 6c 62 61 64 6f 45 34 66 56 57 6a 75 5a 2d 32 42 35 55 51 33 47 2d 32 46 6c 42 76 4d 62 73 35 43 42 64 58 33 59 65 59 57 4f 4b 2d 32 46 36 71 33 69 42 52 42 42 66 36 71 58 4a 78 Data Ascii: {"meta":{"status":200},"data":[{"pageType":"warn","originalUrl":"http://url3687.joseeustasiorivera.com/ls/click?upn\u003du001.WslTG9wNI9ZTr6hKRVV4HPL04rhPXNVA1qLeJRxlii5SsjSbNqhqy2WBF-2FXfAgx8QNdllbadoE4fVWjuZ-2B5UQ3G-2FlBvMbs5CBdX3YeYWOK-2F6q3iBRBBf6qXJx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49732	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:26 UTC	589	OUT	GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:26 UTC	483	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1084-18d89b1f630" Content-Type: image/png Content-Length: 4228 Date: Wed, 24 Apr 2024 08:17:26 GMT Connection: close
2024-04-24 08:17:26 UTC	4228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 78 08 06 00 00 00 d2 7f 4f 94 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRxOpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49733	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:28 UTC	388	OUT	GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:28 UTC	483	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1084-18d89b1f630" Content-Type: image/png Content-Length: 4228 Date: Wed, 24 Apr 2024 08:17:28 GMT Connection: close
2024-04-24 08:17:28 UTC	4228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 78 08 06 00 00 00 d2 7f 4f 94 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRxOpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49734	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:28 UTC	641	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-za.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-za.mimecast.com/ttpwp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:28 UTC	485	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"92e8-18d89b1f630" Content-Type: font/woff2 Content-Length: 37608 Date: Wed, 24 Apr 2024 08:17:28 GMT Connection: close
2024-04-24 08:17:29 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2024-04-24 08:17:29 UTC	5447	IN	Data Raw: c3 62 cc 21 f8 4d ae e5 1c 4d 66 23 d7 fd 35 19 00 3c a5 a5 b8 66 b6 e9 6a a5 c1 b4 a7 e6 28 6a ed 8b 4f 56 8f d6 f7 6e 5d 39 7b e5 c6 c7 3d ac f6 fd 2f 8e ad 4c 69 62 85 88 4a 15 5f fc b4 0c 2e b8 ae 1d cf 38 a8 6a 02 6d a2 80 76 42 55 19 b8 04 9f c2 78 4a ab 68 7b 4a 75 16 53 8c fc 42 78 f7 67 5d 0a 5e cd dc 7f 85 a7 63 54 8f 97 3f e6 ba ea f2 ee f3 90 63 92 14 26 72 b3 2f dd cb b5 11 6c 55 ba 6a dc fe 8b fb 17 8c 53 0b f7 56 7e a8 7a 65 ae 91 63 78 79 f0 d1 6d 3e 8f cc 95 1e df 1d c7 82 c2 23 73 86 b0 77 bf e9 68 61 66 76 d7 eb ba 1a c8 d1 fc ca 7e 87 73 ee 62 75 b3 ba 48 dd a2 ce f2 96 ec e6 35 ac 78 78 b7 2b c5 32 92 93 a5 2a ff 07 02 ac 68 23 01 e0 39 89 74 3e 8a 00 24 64 5a aa e5 9a f5 bd ed 6e d2 ed b4 24 92 15 b6 ba 35 a9 b1 24 2b 66 0e 5b 8b 06 Data Ascii: b!MMf#5<fj(jOVn]9{=/LibJ_.8jmvBUxJh{JuSBxg]^cT?c&r/lUjSV~zecxym>#swhafv~sbuH5xx+2*h#9t>$dZn$5$+f[
2024-04-24 08:17:29 UTC	15777	IN	Data Raw: 96 6a da 21 9c 98 c7 8a d9 dd b0 9d 73 bd 68 e3 3a 4e 61 fa 80 1c 12 4d 25 12 0b 50 56 34 9d 19 dd 0b 00 90 41 08 90 8f cf 35 7a 1b 15 8f 28 48 50 81 b3 ab 5c 92 cd 78 c7 99 65 a6 a1 8a 68 22 85 08 24 a7 7a 25 f9 15 d5 e2 5c 51 56 96 28 57 7c 5d 20 87 36 e4 9b d7 49 4f d5 8a 3b 03 7e 93 9b 9e 13 c3 b3 f5 41 ba 80 00 5d 90 7e 8f 45 0e 6d c8 37 f7 90 e5 b3 e5 c3 95 71 90 68 ad 9c e1 2d c9 16 8b b3 ab 2d 72 51 89 b7 3c b8 56 d4 26 fb 14 86 6b ce 3d 00 82 93 1c b2 d5 43 4b 3a df 8c 8e 9c 3d 61 92 1d b4 75 be b6 6d 07 4d a9 e8 81 f1 00 26 0a 20 bd 2e 90 59 e5 75 64 ee 8c de 03 fe 65 10 97 1d 2a 97 87 3e d8 78 b7 84 42 90 80 40 80 ae 86 12 d6 8e 0b 0d a1 6d 06 ca 30 f5 53 1d c6 f9 20 06 cf f7 f7 50 db c6 04 88 90 51 be 8c 78 18 cf a6 6d 7b d0 7b 70 39 9a c8 62 Data Ascii: j!sh:NaM%PV4A5z(HP\xeh"$z%\QV(W\|] 6IO;~A]~Em7qh--rQ<V&k=CK:=aumM& .Yude*>xB@m0S PQxm{{p9b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49735	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:28 UTC	381	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:28 UTC	529	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:28 GMT Connection: close
2024-04-24 08:17:29 UTC	16384	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-04-24 08:17:29 UTC	768	IN	Data Raw: 56 41 4c 49 44 41 54 49 4f 4e 22 3a 7b 22 41 50 49 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 22 3a 22 41 6e 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 50 41 53 53 57 4f 52 44 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 70 61 73 73 77 6f 72 64 22 2c 22 52 45 53 54 41 52 54 5f 50 52 4f 43 45 53 53 22 3a 22 44 69 64 6e 27 74 20 72 65 63 65 69 76 65 20 61 20 63 6f 64 65 3f 22 2c 22 53 54 41 52 54 5f 41 47 41 49 4e 22 3a 22 53 74 61 72 74 20 61 67 61 69 6e 22 2c 22 45 4d 41 49 4c 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 43 4f 44 45 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 Data Ascii: VALIDATION":{"API_VALIDATION_ERROR":"An error has occurred.","PASSWORD_INVALID":"Please enter a valid password","RESTART_PROCESS":"Didn't receive a code?","START_AGAIN":"Start again","EMAIL_INVALID":"Please enter a valid email address","CODE_INVALID":"Ple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:28 UTC	373	OUT	GET /api/ttp/url/get-page-data HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:28 UTC	439	IN	HTTP/1.1 404 Not Found x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/html; charset=utf-8 Content-Length: 180 ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:28 GMT Connection: close
2024-04-24 08:17:28 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49737	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:30 UTC	583	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:30 UTC	508	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Content-Type: image/x-icon Content-Length: 1150 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:30 GMT Connection: close
2024-04-24 08:17:30 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	41.74.196.11	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:32 UTC	382	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-za.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:32 UTC	508	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Content-Type: image/x-icon Content-Length: 1150 Vary: Accept-Encoding Date: Wed, 24 Apr 2024 08:17:32 GMT Connection: close
2024-04-24 08:17:32 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49744	161.35.102.60	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:42 UTC	908	OUT	GET /r/3042db97a8b16e515f3d7efec?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MTk7fXM6NToiZW1haWwiO2k6MTk7czo0OiJzdGF0IjtzOjIyOiI2NjI3ZDAxZjNiNmFiNzQ1NzM1NDEwIjtzOjQ6ImxlYWQiO3M6NToiMzM0NjgiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjE5O319& HTTP/1.1 Host: mautic.joseeustasiorivera.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:43 UTC	822	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 24 Apr 2024 08:17:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 1054 Connection: close Cache-Control: no-cache, private Set-Cookie: mautic_device_id=op7cb6k04khdkos2kcmbcfx; expires=Thu, 24-Apr-2025 08:17:43 GMT; Max-Age=31536000; path=/; secure; SameSite=None Set-Cookie: mtc_id=33468; path=/; secure; SameSite=None Set-Cookie: mtc_sid=op7cb6k04khdkos2kcmbcfx; path=/; secure; SameSite=None Set-Cookie: mautic_referer_id=19016; expires=Wed, 24-Apr-2024 08:47:43 GMT; Max-Age=1800; path=/; secure; SameSite=None Location: https://aduiwui.hosted.phplist.com/lists/lt.php?tid=KkoBU15SAgQCA0gADFJUGw1VC1sUUVsLUh0BVVpVU1RXUgVWVAFNU1NTA1BWUgcbWARXAhQEBAAAHQEICQdIAAMHAVNTDFUIAFdRGAVVVQIKWAZSFAVTWlwdDAhdAEhbUVAJS1YCVAJUVFdcAQ8HAg Age: 0 X-Cache: MISS
2024-04-24 08:17:43 UTC	1054	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 61 64 75 69 77 75 69 2e 68 6f 73 74 65 64 2e 70 68 70 6c 69 73 74 2e 63 6f 6d 2f 6c 69 73 74 73 2f 6c 74 2e 70 68 70 3f 74 69 64 3d 4b 6b 6f 42 55 31 35 53 41 67 51 43 41 30 67 41 44 46 4a 55 47 77 31 56 43 31 73 55 55 56 73 4c 55 68 30 42 56 56 70 56 55 31 52 58 55 67 56 57 56 41 46 4e 55 31 4e 54 41 31 42 57 55 67 63 62 57 41 52 58 41 68 51 45 42 41 41 41 48 51 45 49 43 51 64 49 41 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://aduiwui.hosted.phplist.com/lists/lt.php?tid=KkoBU15SAgQCA0gADFJUGw1VC1sUUVsLUh0BVVpVU1RXUgVWVAFNU1NTA1BWUgcbWARXAhQEBAAAHQEICQdIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49745	45.33.29.14	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:44 UTC	816	OUT	GET /lists/lt.php?tid=KkoBU15SAgQCA0gADFJUGw1VC1sUUVsLUh0BVVpVU1RXUgVWVAFNU1NTA1BWUgcbWARXAhQEBAAAHQEICQdIAAMHAVNTDFUIAFdRGAVVVQIKWAZSFAVTWlwdDAhdAEhbUVAJS1YCVAJUVFdcAQ8HAg HTTP/1.1 Host: aduiwui.hosted.phplist.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:44 UTC	544	IN	HTTP/1.1 303 See Other date: Wed, 24 Apr 2024 08:17:44 GMT server: Apache/2.4.38 (Debian) set-cookie: WebblerSession=v3tdvglq0o5b8gohk3mbkhebpn; path=/; domain=phplist.com; secure; HttpOnly; SameSite=Strict expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache location: https://kmg.zaz.mybluehost.me/south/manage/ene/ content-length: 0 content-type: text/html; charset=UTF-8 set-cookie: SERVERID=pqserver4\|ZijAK\|ZijAK; path=/; HttpOnly; Secure; SameSite=Lax connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49746	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:45 UTC	661	OUT	GET /south/manage/ene/ HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 08:17:49 UTC	429	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: MISS Set-Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1; path=/ Transfer-Encoding: chunked
2024-04-24 08:17:49 UTC	6594	IN	Data Raw: 31 39 62 35 0d 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 70 61 63 6b 65 67 65 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 70 61 63 6b 65 67 65 73 2f 6a 71 75 65 72 79 2e 6a 73 22 20 3e 0a 20 20 20 20 20 Data Ascii: 19b5<html> <head> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="stylesheet" href="packeges/bootstrap.min.css"> <link rel="stylesheet" href="packeges/jquery.js" >
2024-04-24 08:17:49 UTC	653	OUT	GET /south/manage/ene/packeges/bootstrap.min.css HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:49 UTC	8192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Last-Modified: Wed, 13 Feb 2019 21:47:50 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Transfer-Encoding: chunked Content-Type: text/css 1faa koH-}'.#p"5k>,P7pt^"o_+P(+kz6s/'Z \/+]!S2OM_xhKs\Ra;sQ_LS)A$&P@]I@@erOb [3hY18ae T;Q1NW^6Z>a>VqLe$w@N(goBf$mb7l2_ IZ5iuP/I;U$MAbQ2MhS66mdX~8-u,R(a- yehC8m8WeV4EpV/?3%8[{wUb~d?>\r&O'_di0^O=jCK^W8Uaa % eO1,)/&]u B-dd"SB}cHcVM5Z\`Hux+V}v?S\|X}WW;UQk+iGR( (v&)3Yfy3x4L]ef_Le&Hh]1bcEFK>?F;vC+rurA1sF&Xq^"b<7soI'<G8r+r1vLfQ5HZ[g<0u/%yXZXFT=bfI\|5\|l'p{ 7fiuQD&$;Q+"s`Us^AK]V&D@]$T(0\|#w9Mk8[y0tT5:M>9cc8LVX\|h;Ui+{w>H9SDY3(54@`7<Yvs3g4]xU1s&eKJQU3NR%YW;udWsVG^'`>5.Nl0qSp&/\|'(?a,TLUN4lcY:e\|Nf;t+-K%)p$jc~'\eA9aWHcpW5XaBh+a=Ehu!1He)vMQZ/1#u6BZ1@i]t3; H4j7=T9D_QdIW2\|W50Hf^"R9,oS.^iW** ~\|M@rS90 j()H<No}c/4zLvV~8-%Ykd[/-Kcu%lZ2o`cFUY0K@4IO0<T$$~h-U[O;#ZMTuyK)0<\&dnJrTUXu5"J^V;-fDAP%)s}N%XuL_JPA4YkUWPT'\|'~V$mihEW"L&v]"p%U.kRUc2{MNJcc.K_DNJRqVnI_hQq!q)5S]@MVQT1wB3k{-zc]TcG}bu[6&qX7#(L-\|y{kMrr[jk$bV%Jb..:5g"c6?ffl8wiV9VZf~8yJ8S6&\|%"+kETf9>Fi,\J(='4U-On[TRj#[erQ]UHpip(qJ+N/Tu!#ROsvu>J5S"s: Ie\|W%l$qkMi:X`=)vj~ ={Np%)/gNL8C;8M&V,?miJo1&3TIvA`co{8cc5}GD8otM\|cFI[4tLJEj:13hK){uiovcV+,! #@CMiKbP>8j{6d) Ewh.m\q.Vn7J?9[6VQNp!b=jD5j#ovl'%8)p&8g3O_TzLYp&?N^?~YuO}6g}99(:NtZN9yaw:O:i}:tNyb4'\|E\|ON)<6t:s`wp$O'Nn9s8yp<?TR^"K#q:LMDZR@~Dm45}v{u.:;1H4uEQN64s)xSwmeq v8F\n]jZF39S\a;z8#rYF@'B0Sa3YkTXTXTNq DpPuf6=ho#:\VJE-OVD!eGaHs9Ne2ygxC?9g3>#2u2yFgCf36Cv3'%'bOj[!7MkJT7ywg'$//I]`'s~/7r$!$p=OKbPo{Jdp]vUgI)7@NFc\Z]irL:NCKn1D[W/S&txS{"]l4HB)E`_V=bgY{` uvkS(hr9#QYF@'Ke3ZktYtY/uN.DpffuQfSfT;kF.uu Z6,7TQ3Os,g.Q7O$o3I>i5J IAu%O GIyOm8w'/Y?>]iZ.hi1He<mlw7N&)ls?j&$g'93yM6v$'nNhWqnRx(pG;YJ@ BjVs/.!\|>[x'rh"0Du!F8H3Pr.nWUggFclBbg{J<\HpVQ%,uL]:]K]SpK8%:3i,qgnj.quKF.6r#(eGa>%j>%aLyOZyR'<i'GI<)Qf6<i'md.(wKOywnC} ;,2ZZR{zr'OoSI>[Or`<I0Y&INLv$gd;S&7U).o@(6 DhN8Xv@~Dm45k Ks=44uI~j1H4uu;8QiBg"=79;+F)2`4[oUi.v[ PgGjj=R>&sq0%UiTtK]6SFNRNtGaa6:a6Ka[e:eKec6mRQMjr0Jexpe:4rFIk%y$OFI<ij<jV`I(i=OZIQR8O p'm(i;OI1swBcP5NTwo>/<&kLrVz8pd3Yk7Nr&vw/B=)qN8,h% !X5hkZ9T@nWNSn1D[W/S&tIxS"]l4HB)F5g_Vbg{` uvpVS(ehr9#QYF@'Ke3ZktYtY/uN.DpffuQfSfT;kF.uu Z6,7TQ3Os,g.Q7O$o3I>i5J IAu%O GIyOm8w'/Y?>]iZ.hi1He<mlw7N&)ls?j&$g'93yM6v$'nNhWqn{Jd4w>3R(s%$p&)x!iJ$yI9L<X swdEQKV]wi/u\|aA/qJC;:t =OFNDA]I15DIkXVlMC T%_+x<c<gJbuYq@^F3V%iyS$_93,9sd^+Wgb96M-%!%z Zb:D&/u#1-q%T{dY%i:^m]@]!a3,-w)vwzz.I/2.4I-Sn#`c5]`-MEpL]n[z efN#SD1a8<=qGL#Z2}E>_zY&F-.36Z Y'HB\|d /N[yiIF\kQd&i!$ /Q8I>'X<U\IB&N\|vR"s6K.{[z I_FC@$?8fc;a!.<}XU(7x,8M%^+3#6pP[tI<~['K#GSKA+P1'SKVyk;g;O1n$BPD({edb'QW:]L2$=TZx-3$.t?_dW3i/NZ?t\|h8)IYI]w8Q(S. +TGfDfkP?v)v L`]{Rl tw`+` 7J8}^m''XC(;Q[3J%0^;X#)/Q1l75XN sL~v\% Q+N5 wW%/mBVQ[ppVX@)#(>DhoyDZ0#h~lWd1~pLM/LEbvRJ LZ'aW8K k=GKqo%{3l!tXDjyl8a:R,ejf+O=%2GIS0;VZfJ0Kl?d1c.%/)-'J$VMer\;aL3S=]esnmPu>x Cxws.$S (esA@3JXJ0Fvp-T]jVH7k/jUrKimkw5s)Y;&i{mZ\|;x7^[TITL!h5hxW=\|+CD8Vv6O_T:3W4)!y>V`X{O-Ej'089I;]"Rqcp}^'aTOgxp"UZ(6 f%J bQE=&49S9Pjc-9NxU;+}J^BDu7@smp T9"(&~6"Ht"{r0eQm&$VYVCs5csA@Xj{bLP?pNNTJ0KjQi3@;>>%P0OPrKY~o}sI7^(_16U]a)ewk;je,vVj+]01}{k^^2k0oR?9!dw`o'%PJFiaOY.F/RL%U=jdqk>7\vRh^O3I^\79ZWmV/ 1o]&)fKO>dy~VydA$E/fw'7NO)F</Ow~:\ =={{\dO8MBag~rnew> H)c_<_x1\|p@}uLuhP=FT/16:lXW{mO,{eWk])]01}{k^^2k0oR?F>i:cg3;6z(Kvzc`9&\|^Dc\oM.X)ik'9gVos$~E1rQ( J)8m^eQy>])e
2024-04-24 08:17:49 UTC	202	IN	Data Raw: 1b 53 3e 7a 62 38 06 76 a1 e3 b9 16 5d 28 3c 4e 6c 73 b5 a7 9e c6 2b a9 d7 59 5c ce 76 13 89 97 ca 2e 70 d8 3b 69 e0 7e 3e e8 ec 59 cf a5 0e 03 5d 01 98 73 fa 1d 33 20 14 83 da 17 7e f7 2c 03 d0 31 e6 82 80 b0 3e 36 da 5c 91 9b d2 2f c9 7e 6d f4 77 a4 7f bf f4 7b e4 47 ad 99 e0 c7 49 70 1b e0 4c 0a 7f 95 40 10 46 cd de 99 e0 bb 92 4c 1f de db 21 e5 ea fd c7 6d 70 03 9c 9a ff 60 d5 39 26 7c 8f 1c a3 f9 b1 3d 01 85 21 b2 18 3f ac 1c d3 5d 87 e6 7a 6b da 5e f0 78 d3 f0 a8 e4 f2 61 a0 ee f1 07 af f2 11 f0 99 30 de 06 87 ab e0 b4 42 4a 19 2c 1c 3f 7e 6b b1 2e 0d 78 ae 46 97 4a bf a3 7d fb b1 52 00 d2 d8 Data Ascii: S>zb8v](<Nls+Y\v.p;i~>Y]s3 ~,1>6\/~mw{GIpL@FL!mp`9&\|=!?]zk^xa0BJ,?~k.xFJ}R
2024-04-24 08:17:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-24 08:17:49 UTC	8192	IN	Data Raw: 31 66 61 30 0d 0a c7 bc 21 57 72 ce 24 ad 6e 1f 73 de e2 63 75 7d bb 23 a1 75 c5 f0 2b 8a 19 4f 9e af ed 34 33 e0 c7 89 bd 08 a0 a5 37 fa 88 97 69 39 25 e3 b4 55 c9 4b 88 f6 94 c8 1c b9 8e 73 17 15 58 64 b4 54 cb 57 48 55 2a bc 28 55 7e b3 6a fa 0d d0 46 bd f7 23 90 c4 0f 1a 85 07 dc 81 ac 8a d7 54 52 5e 22 1c d7 9c ed 24 44 0d 52 8b fc 4d ad 4a e0 80 82 68 d2 bb c0 07 6b d4 bf c2 84 d0 32 eb 9b 1b 76 3b c2 78 28 77 3a 93 bd 09 db 14 46 4b b0 72 a0 59 2e 91 6b 07 c3 9c 69 9a 46 cd be 99 e0 bb 92 f4 04 b6 0c 79 9e 63 06 7e cb d0 f6 31 ea 09 16 98 d0 5d dd 37 7f b3 53 2e 0a 55 53 4a c1 59 23 73 bf ed 42 cf 71 1e ea 93 66 9a 75 84 0d eb 59 a2 1d 34 c1 2c 79 50 d3 aa 45 7f 32 ec 76 91 c7 f1 b8 b4 c0 19 a0 9d 60 0f 9f 54 27 8c da fb 53 fd 92 fd 74 28 98 79 e7 Data Ascii: 1fa0!Wr$nscu}#u+O437i9%UKsXdTWHU*(U~jF#TR^"$DRMJhk2v;x(w:FKrY.kiFyc~1]7S.USJY#sBqfuY4,yPE2v`T'St(y
2024-04-24 08:17:49 UTC	1786	IN	Data Raw: bb b2 6c 5e 7a 8d 7a e6 09 a4 78 c7 e4 65 90 82 7f eb 82 df 3d c6 08 e1 63 9d eb 5b 5b 26 bc 94 82 2b 75 71 0c 0c a1 18 52 2e c0 1c 5e 95 5c d0 3d 9d 42 35 30 48 e4 b1 35 11 95 94 97 68 de c3 b0 dd a0 36 00 d7 60 29 7d f9 4e 9a 63 fb e9 5e 0f 56 9d 63 c2 f7 8b b7 b7 5f 0a 20 14 1b 0f 95 80 14 44 6d 09 20 bb 04 88 22 a6 6d dd 5d 1f 8f 3f 70 9b 92 97 f0 f6 66 97 f8 e5 a8 08 ad 18 7e ed 8c cb e0 a0 06 8d 86 58 73 8f 86 07 6b 2f 70 85 9a 3f d1 ec 5a 61 42 68 99 59 0c 52 89 9c a8 f7 7c cc a5 6a ae ee 8c d6 ca 64 f2 95 41 d7 b7 69 6b 31 5a 3e 9f 7a c7 8c 27 cf 03 0c b2 03 01 85 e1 aa 3f e7 54 94 72 b5 8c 79 be e7 fc 05 c4 51 c2 41 5a 04 12 2e f0 79 af 53 92 3d 98 e5 d8 db 62 9d 84 41 48 a2 8a d3 52 2a a9 e0 05 4a 59 b7 45 d1 dc 74 0d 86 c4 71 7d ec 65 ed b7 71 Data Ascii: l^zzxe=c[[&+uqR.^\=B50H5h6`)}Nc^Vc_ Dm "m]?pf~Xsk/p?ZaBhYR\|jdAik1Z>z'?TryQAZ.yS=bAHR*JYEtq}eq
2024-04-24 08:17:49 UTC	8096	IN	Data Raw: af 59 b6 ed 71 1c c7 b2 84 bf ef af d0 46 21 51 11 d3 96 4b 92 ad 70 84 84 1a e4 cc 60 07 bb c0 f6 7c 98 c6 00 0f 30 98 05 28 91 b2 59 21 91 5a 8a 0e cb 69 c4 7f 7f 28 52 94 c5 17 39 1c 55 dd e8 ed ec ca b4 2e cf 3d f7 9c 7b 6e b8 84 88 17 56 31 32 87 b8 a4 e4 52 80 f2 6d cf e8 91 c0 10 37 60 8f b2 23 ab 1f 1f 20 e0 20 93 df bf 74 ef fb 3f f5 4d bd fa b6 29 c5 cf e0 1d a3 d3 3f d3 fe d7 9f a3 20 0a 36 c3 ff 7f 0e c4 33 e9 7e fd f9 c0 79 9b fd f2 cb e9 74 5a 9f 36 6b ca f6 bf 24 51 14 0d 04 3f 7f db 20 d1 df 02 7e 08 3a ce e8 1b fa f5 e7 49 6f 70 fd 2b 12 ae 7e 1e 11 e1 09 43 7e f8 f5 e7 64 2a 88 b5 a1 12 b4 a2 75 90 3b 95 1b cc 11 ab b1 f8 e7 d7 9f 63 a1 06 fe fa f3 9f b7 c1 ee 90 24 e2 9f 38 55 ff 26 1b f1 ef cf bf 28 1d 83 24 f1 eb 61 69 3f a8 e7 37 d6 Data Ascii: YqF!QKp`\|0(Y!Zi(R9U.={nV12Rm7`# t?M)? 63~ytZ6k$Q? ~:Iop+~C~d*u;c$8U&($ai?7
2024-04-24 08:17:49 UTC	8096	IN	Data Raw: 88 5c f3 b0 ed 0b a7 17 8d 91 a6 2b ca 9a 8c 51 0e 38 7a dc 3c 47 10 ed 9f f2 a5 87 8f 8f ef 7f 23 de b5 c5 06 71 d7 d6 e0 9c 61 52 63 82 c2 a2 a6 e5 db 78 dc 09 43 8d 3e 6e f9 fb 1d 31 2e 12 aa c7 4d c8 a5 a8 85 8d 17 96 ad 93 14 35 e3 6d 89 bb 1e ee ea 5f 86 2d ea 0b 94 09 8d 77 ed 39 50 06 20 3e 76 59 1a 7d cb b5 45 40 70 03 64 cc a6 f0 60 bd 4b 87 83 22 08 b0 00 93 0a 13 2c 2e e0 4b 68 7b 17 61 d7 5c 94 f3 78 e6 5c fe 1e 01 ea 75 9d a0 e6 56 fe 7b 46 4f 97 e8 9b 27 a5 4e 2c 0f 3d 46 f3 7c 74 e9 43 98 9e 9d bb 2f ff bf 0a ef da 60 fb 6b a5 0f ca 37 c1 77 24 70 cc d6 9b fd 35 5c ad 27 ba 11 f3 a0 ef de 90 17 b1 a6 dd e5 80 3f d6 d2 54 58 80 0e 0d 14 17 cb ac ae ff 77 dc b4 94 71 40 b8 ee e0 b4 b5 c1 a2 e4 e2 1a 0c 61 ed f0 aa aa 8b 56 7b 75 54 c8 aa 47 Data Ascii: \+Q8z<G#qaRcxC>n1.M5m_-w9P >vY}E@pd`K",.Kh{a\x\uV{FO'N,=F\|tC/`k7w$p5\'?TXwq@aV{uTG
2024-04-24 08:17:49 UTC	868	IN	Data Raw: 84 58 09 3a a4 c0 9c 01 d2 55 94 35 d9 f4 e0 f0 1f db d6 df 32 3d b8 f7 0e 5a cc 85 90 1f 4e cf f5 65 de 54 51 c2 c3 13 1a ec 85 b5 74 3d ab 64 9b 28 ba 09 16 ce e7 f0 b1 b6 d4 42 84 0c 50 1b 1d db e5 01 05 ad a1 81 dd dd c6 5a 5a 54 c9 69 90 2b 28 15 b2 e3 e7 1a 65 aa e2 2c f2 74 c0 1c 5d 4a 5a 53 96 fd 54 55 95 03 68 19 6e 00 3b 6b 48 14 ed 0a 03 05 0c 58 56 d1 f2 d8 ad ac e2 81 be 0b d9 13 43 fa 5c 6c 9c 39 1d 2a 29 81 b3 49 cf e5 2e dd 41 77 d2 04 34 67 5d cb c6 b4 ed eb b6 4a b7 ee b4 63 59 a2 ae d3 a8 e4 05 ec b6 a9 67 96 82 59 93 c6 a2 31 27 7e 7d 7e 4d dc f5 62 52 d1 09 b2 03 49 f1 e2 0e 19 30 e6 04 59 31 97 56 3d 3f ef 5c 1b 27 c0 08 26 fb 6b 7e 65 1c ed dc 09 23 cc 1c a2 8b c6 9c 02 bc 14 e6 fd 49 2c 04 64 7f 05 c1 72 93 fa b6 a5 50 e6 94 b1 66 Data Ascii: X:U52=ZNeTQt=d(BPZZTi+(e,t]JZSTUhn;kHXVC\l9*)I.Aw4g]JcYgY1'~}~MbRI0Y1V=?\'&k~e#I,drPf
2024-04-24 08:17:49 UTC	8	IN	Data Raw: d1 ff 15 d3 6e 60 02 00 Data Ascii: n`
2024-04-24 08:17:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-24 08:17:49 UTC	690	OUT	GET /south/manage/ene/images/search.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:49 UTC	927	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:11:54 GMT Accept-Ranges: bytes Content-Length: 694 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml <svg class="svg-inline--fa fa-search fa-w-16 hw-navbar__icon fa-2x" title="Sk" aria-labelledby="svg-inline--fa-title-mbLGChaTPO4n" data-prefix="far" data-icon="search" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg=""><title id="svg-inline--fa-title-mbLGChaTPO4n">Sk</title><path fill="currentColor" d="M508.5 468.9L387.1 347.5c-2.3-2.3-5.3-3.5-8.5-3.5h-13.2c31.5-36.5 50.6-84 50.6-136C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c52 0 99.5-19.1 136-50.6v13.2c0 3.2 1.3 6.2 3.5 8.5l121.4 121.4c4.7 4.7 12.3 4.7 17 0l22.6-22.6c4.7-4.7 4.7-12.3 0-17zM208 368c-88.4 0-160-71.6-160-160S119.6 48 208 48s160 71.6 160 160-71.6 160-160 160z"></path></svg>
2024-04-24 08:17:49 UTC	688	OUT	GET /south/manage/ene/images/menu.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	955	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:19:30 GMT Accept-Ranges: bytes Content-Length: 722 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml <svg class="svg-inline--fa fa-bars fa-w-14 hw-navbar__bars fa-stack-2x" title="NOT_TRANSLATED" aria-labelledby="svg-inline--fa-title-dHMG9sS027ba" data-prefix="far" data-icon="bars" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-dHMG9sS027ba">NOT_TRANSLATED</title><path fill="currentColor" d="M436 124H12c-6.627 0-12-5.373-12-12V80c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12z"></path></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49749	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:49 UTC	645	OUT	GET /south/manage/ene/packeges/jquery.js HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	305	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Sat, 25 May 2019 04:05:00 GMT Accept-Ranges: bytes Content-Length: 88145 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: application/javascript
2024-04-24 08:17:50 UTC	7887	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 61 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 Data Ascii: ed===t:e.isDisabled===t\|\|e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function y
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 53 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 53 2c 64 5d 29 2c 61 3d 3d 3d 65 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 28 64 2d 3d 76 29 3d 3d 3d 67 7c 7c 64 25 67 3d 3d 30 26 26 30 3c 3d 64 2f 67 7d 7d 7d 2c 50 53 45 55 Data Ascii: ={}))[h]\|\|[])[0]===S&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[S,d]),a===e))break;return(d-=v)===g\|\|d%g==0&&0<=d/g}}},PSEU
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 6b 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 21 3d 3d 72 7d 29 3a 6e 2e 6e 6f 64 65 54 79 70 65 3f 6b 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 21 3d 3d 72 7d 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 3f 6b 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 69 2e 63 61 6c 6c 28 6e 2c 65 29 21 3d 3d 72 7d 29 3a 6b 2e 66 69 6c 74 65 72 28 6e 2c 65 Data Ascii: t\r\n\f])[\x20\t\r\n\f]\/?>(?:<\/\1>\|)$/i;function j(e,n,r){return m(n)?k.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?k.grep(e,function(e){return e===n!==r}):"string"!=typeof n?k.grep(e,function(e){return-1<i.call(n,e)!==r}):k.filter(n,e
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 6b 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 7a 3d 2f 5e 2d 6d 73 2d 2f 2c 55 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 Data Ascii: id 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(k(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},z=/^-ms-/,U=/-([a-z])/g;function X(e,t){return t.toUpperCa
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 26 26 74 68 69 73 5b 69 5d 29 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 28 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 69 5d 7c 7c 7b 7d 29 2e 64 65 6c 65 67 61 74 65 54 79 70 65 26 26 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 65 6c 73 65 20 69 66 28 72 3d 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 51 2e 73 65 74 28 74 68 69 73 2c 69 2c 72 29 2c 74 3d 6f 28 74 68 69 73 2c 69 29 2c 74 68 69 73 5b 69 5d 28 29 2c 72 21 3d 3d 28 6e 3d 51 2e 67 65 74 28 74 68 69 73 2c 69 29 29 7c 7c 74 3f 51 2e 73 65 74 28 74 68 69 73 2c 69 2c 21 31 29 3a 6e 3d 7b 7d 2c 72 21 3d 3d 6e 29 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 Data Ascii: &&this[i]){if(r.length)(k.event.special[i]\|\|{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Q.set(this,i,r),t=o(this,i),this[i](),r!==(n=Q.get(this,i))\|\|t?Q.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault()
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 75 3d 65 2c 63 21 3d 3d 70 26 26 28 75 3d 6b 2e 63 6c 6f 6e 65 28 75 2c 21 30 2c 21 30 29 2c 73 26 26 6b 2e 6d 65 72 67 65 28 61 2c 76 65 28 75 2c 22 73 63 72 69 70 74 22 29 29 29 2c 69 2e 63 61 6c 6c 28 6e 5b 63 5d 2c 75 2c 63 29 3b 69 66 28 73 29 66 6f 72 28 6c 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 6b 2e 6d 61 70 28 61 2c 52 65 29 2c 63 3d 30 3b 63 3c 73 3b 63 2b 2b 29 75 3d 61 5b 63 5d 2c 68 65 2e 74 65 73 74 28 75 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 51 2e 61 63 63 65 73 73 28 75 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 6b 2e 63 6f 6e 74 61 69 6e 73 28 6c 2c 75 29 26 26 28 75 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: u=e,c!==p&&(u=k.clone(u,!0,!0),s&&k.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,k.map(a,Re),c=0;c<s;c++)u=a[c],he.test(u.type\|\|"")&&!Q.access(u,"globalEval")&&k.contains(l,u)&&(u.src&&"module"!==(u.type\|\|"").toLowerCas
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 28 72 3d 6e 65 2e 65 78 65 63 28 74 29 29 26 26 22 70 78 22 21 3d 3d 28 72 5b 33 5d 7c 7c 22 70 78 22 29 26 26 28 65 2e 73 74 79 6c 65 5b 75 5d 3d 74 2c 74 3d 6b 2e 63 73 73 28 65 2c 75 29 29 2c 5a 65 28 30 2c 74 2c 73 29 7d 7d 7d 29 2c 6b 2e 63 73 73 48 6f 6f 6b 73 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 7a 65 28 79 2e 72 65 6c 69 61 62 6c 65 4d 61 72 67 69 6e 4c 65 66 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 28 70 61 72 73 65 46 6c 6f 61 74 28 5f 65 28 65 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 29 29 7c 7c 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 2d 75 65 28 65 2c 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 67 Data Ascii: (r=ne.exec(t))&&"px"!==(r[3]\|\|"px")&&(e.style[u]=t,t=k.css(e,u)),Ze(0,t,s)}}}),k.cssHooks.marginLeft=ze(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(_e(e,"marginLeft"))\|\|e.getBoundingClientRect().left-ue(e,{marginLeft:0},function(){return e.g
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6b 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 2c 6b 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 6b 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 6b 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 74 7c 7c 28 69 74 3d 21 30 2c 6c 74 28 29 29 7d 2c 6b 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 74 3d 6e 75 6c 6c 7d 2c 6b 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 6b 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 6b 2e 66 78 26 26 6b 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 Data Ascii: fx.timer=function(e){k.timers.push(e),k.fx.start()},k.fx.interval=13,k.fx.start=function(){it\|\|(it=!0,lt())},k.fx.stop=function(){it=null},k.fx.speeds={slow:600,fast:200,_default:400},k.fn.delay=function(r,e){return r=k.fx&&k.fx.speeds[r]\|\|r,e=e\|\|"fx",thi
2024-04-24 08:17:50 UTC	8000	IN	Data Raw: 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 74 3d 28 6e 65 77 20 43 2e 44 4f 4d 50 61 72 73 65 72 29 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 74 2f 78 6d 6c 22 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 74 26 26 21 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 7c 7c 6b 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 65 29 2c 74 7d 3b 76 61 72 20 4e 74 3d 2f 5c 5b 5c 5d 24 2f 2c 41 74 3d 2f 5c 72 3f 5c 6e 2f 67 2c 44 74 3d 2f 5e 28 3f 3a 73 75 62 6d 69 74 7c 62 75 74 74 6f 6e 7c 69 6d 61 67 65 7c 72 65 73 65 74 Data Ascii: (!e\|\|"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){t=void 0}return t&&!t.getElementsByTagName("parsererror").length\|\|k.error("Invalid XML: "+e),t};var Nt=/\[\]$/,At=/\r?\n/g,Dt=/^(?:submit\|button\|image\|reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49748	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:49 UTC	645	OUT	GET /south/manage/ene/packeges/index.css HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	290	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Thu, 09 Dec 2021 20:54:08 GMT Accept-Ranges: bytes Content-Length: 2721 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: text/css
2024-04-24 08:17:50 UTC	2721	IN	Data Raw: 2e 6e 61 76 69 67 61 74 69 6f 6e 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 31 70 78 20 37 25 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 Data Ascii: .navigation{ width: 100%; position: fixed; top: 0; left: 0; padding: 11px 7%; justify-content: space-between; display: flex; background-color: #fff; z-index: 10; text-align: center; align-items: cente
2024-04-24 08:17:50 UTC	688	OUT	GET /south/manage/ene/images/user.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:14:58 GMT Accept-Ranges: bytes Content-Length: 802 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml <svg class="svg-inline--fa fa-user fa-w-14 hw-navbar__icon fa-2x" title="Min side" aria-labelledby="svg-inline--fa-title-I5ubRcgkbPW2" data-prefix="far" data-icon="user" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-I5ubRcgkbPW2">Min side</title><path fill="currentColor" d="M313.6 304c-28.7 0-42.5 16-89.6 16-47.1 0-60.8-16-89.6-16C60.2 304 0 364.2 0 438.4V464c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48v-25.6c0-74.2-60.2-134.4-134.4-134.4zM400 464H48v-25.6c0-47.6 38.8-86.4 86.4-86.4 14.6 0 38.3 16 89.6 16 51.7 0 74.9-16 89.6-16 47.6 0 86.4 38.8 86.4 86.4V464zM224 288c79.5 0 144-64.5 144-144S303.5 0 224 0 80 64.5 80 144s64.5 144 144 144zm0-240c52.9 0 96 43.1 96 96s-43.1 96-96 96-96-43.1-96-96 43.1-96 96-96z"></path></svg>
2024-04-24 08:17:50 UTC	638	OUT	GET /south/manage/ene/packeges/bootstrap.min.js HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	8192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Last-Modified: Wed, 13 Feb 2019 21:47:50 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Transfer-Encoding: chunked Content-Type: application/javascript 1faa ks9- / XyI,LjLJi)-2PU{#nKLk<_[ov?7-2w.p:#xMF&s7g?[94]nmLnOij_oNrFNsm+ri}i:0hP{Nf89 2=kLg/IqpR':SRU1ri_`F2e`WPEvb_.wq[,37k}~MtM\Z<a9[hau%KbfGaZ<7S2;uT#)juIFds<4@vHdrZ[["`$]7(G}6rZH$N{1mL7]0VGH<MOMh>:7ni#bW'U_6Z.:E3G~Ld}s!R#w\&j&CsBwP3$J#vK5ozk{NFrMzICHE^$80pF(+e<y`%(2Oxxs=\<=xr:w\&$`kk`>S0Ti&oQ9X/p v9K;AkEU9pHXtx4w'0hWVaBzfXj$!NYY<MpdW5-s}}2jyZY\M (xbifXxj.P/W+}A nT:ty?<Hi\|T?\Wl}2,WWU^yi-MoNAGc]nQ:2D{szZdbTivlIr7saoHSu=3!v{7(A5wz<%(_{wK?OkIc~]+OOgD#`O-'9leuN&wWUeqGkhd4f+5I"O>4~ .OSVPONBV_8dPpTL\/&\|$ifipgjS`bGEH&\|z4o'}<Ex`1#S\8}V0K=hpe(cU`).q6Z^=D({6{W7A'Rm!8x@\Frry;=`4pLd2@lva01lvcsr@ith^O DaJkIgd$zf"O)l0Pff;s>Bvp1So-lcP9p<i 7KuT,6hIu;bF1[9yZ(&Wp!bwiPNSV]9#,Z-1-{\IeMrvnLh8\O}$FF^n&0G"OoV~cS18~M9O#LDi7T%Q-}ihxj[IP#Ppug.TB_vG LPn;~L#_5v,Li`~\|TC;&XrMIr\|9Ww_l)i&6Q1>Ke{CL=5bs]/cLs ?-_08Fd2`xFxn{Ma0fHX?p:IRi7W]rQ;0=qI_kR/bC~$tpcnzGW?5%J?Z476)?['=t @Ww5F'&dg-iyw]9#lN!\R_30>9DcTX{%-~iT(EoZ(Vk<nw5v;!r=?;(${( VLSZ_cw77'f }!%Ds ^XP#YfZ~brs624SRN`KS)>r> 99pn\[3l9<0(=k<<.vNhxs\o2&)>Lfzq0yp?B0,YE0Jys{@!D_+!}M^}Vhn;/Q50dTb{):GNvUTF.<`UOa`]Py0:kL-NOq&2a1(1sfSCsO;GsX!Qb f5:hTBVJZE@cHu;\y0P[xc0002jt@pwo\w'co>S'XxZ\.TXL\|/?;A&ntUTf2]\ro7<?Ofe_N.o 8zWF&B/>5{t/a 58dVIK5.e~3xD7trt\|j/b-H&( jH8mlfbYA=k5^gN]5TgS"lg7O<H<MY=+@:w@(qxf!rM5y7B}H&V3#+h o9_9%<qxOU` U+Q^?OJ<}nl52{1\|u B'm#ZUfF(x_I@ih2r)<U(\|F5+[A">?qNKKcv;(+0<,2n X2[qi"F=s#C,dIflxrNR 82f{izRUu#z]oG{fXa+&lOe@h!;lxCe#J_9J ;92v_Xky q7Pd"=pV@~a5lFg0tJ '[P.tUXD;wOXL!,6^Qz=kJ]w2m&^^0%k9&-3!z(s3[0z^~n\9G>NOh?A]m ND+i(0v 6jav;\|fG>X?,)LMPxo>FheJ:+<QceiX<RT~b(2m5MO2]nw62JEWc"e`z<aqT_:{KV+}E}=I/nk_B~2:Na$30wn(m)c#V40&C<b--GR,G6iJ.</?995L#[G7 {7Sjc2JW:.7`o>xZ?2\|]/;vOp<SP_~uueVz<2Ol9y-UkXG0Z,R$]4\FssRG%;?_,VTHqbb3qAvG"puw24%YisYph{_z35]G)ta~atXNlA26769{ElWVeh}RGZdhmkCOIMnrE#w}Ya:53Je[spx#wu!EA^lBCS 8t^t$s::h_e]G@T2}P8lUV^ov7Kmy8&4FOI\q=q]^;LWd6m8&,aN_:R6jPG.C/DAC}~}ciJ7]H-pI;p5I\>D[> 16l^],yY73uoF9>dlMbT?ykT> \|0"\|DCZ7[pvAvqIZr::h)'Jl?7Czk},id.Gz2YJ/WXG;ZlPKEv]2X.@4vpQ}IN)E=obuaC R{wkvHF(Bks0B !7wM yF/u{A5{vv= -3lIUL,VIBv[rFjE\eQ/`cNQ^tIgZTwyu[psX@ ^W+=6n<w<EAWC.3Ke^8C8 9mlx,U({SvBsaKe,(j"2VHg>gN69=IG"M3]a\#Sf4ew>7CT?K?jw=]MHI9{WIr\|92XJy{OUe:Cy]xw-^Ro<i3:J?.hwpOQ%53uwusu&(nV3C.}ATd6m N\X=]t99g0HT'D0:M3R%+'X?z~ Ns\|"~t9~E b N`Ld-bv~^l>dd2G=3~kf%MtG%0G\Z>vlgpdxw$,^&Vy;I\#/:.W={v:^QiC4r23J+]yzJ(;yl8n}gbPRFewL1rZ.CX$m}`VB{DvexY2vxk84R\W{ kSKU"X>]{](xfnAfi;I\qls++89)'K;6BYJ_C-3Fck,R =9zRz^:,H'\@~CrBK2GcWv{v#s(-aoGoP{KSwkBLp#!FLDeZ5hVH&$/-=h`tEGW-Sy4F,7T5K&0RLW+-fL4N;N20=aS]p^8dG+ >ty=7um\M^$Va50\|xvwFS`:P1/ 3A=Xqqg'e; o@\[0{?~Ac}Pv\>D[bRS}`w[RO9B MPYMB_Y!4F,y qsO!T]bs>BTioSp4=CKrwm#HS(/Y.1c)pJp9Ca8P1CN>Q (%~nm+A@Lh8\O}0;MmcHSYkylTL]pcP_ bi3m!lOl}l-#V3^%H5c)obUW5sh&$)LV&-3!z(g;X%B8Du`m^\s[] KG^G/#qT'?FZGo9e}\|=:=^TisP]f8""JWLw24%{/1v7Kd:DR E\j! wF/jwpO/wWU7^ !SP<V(swLrq]8{yP/4-}bTWKS^g2w5zwamMny^hUETj.cxXPu><yV+( ylFIo2p'<[J, n}%j=y:,;/OuPNGL{2&ZOfxj0_/'C6rioDal]Hv#&aJMVTF#.1 \|I]AGU.N_^r]#$i=8,q3L_]Fg~Rkj6_3]#~W$~?{@N01O?.1"4z~<w/L"a9t}HmjVUv7gUrn=!i qUc_+
2024-04-24 08:17:50 UTC	216	IN	Data Raw: be 8d 4c e6 2e 60 9f aa 67 0a 33 7c 7d 6f 30 7a 86 e6 ca cf aa b2 77 98 c8 b4 95 5e a5 33 eb 84 93 51 c0 3e bb f0 d5 5d 41 6b 69 9e 86 1a f7 af d8 97 82 f4 2a d0 9a 69 b3 08 d8 b7 66 ac 58 10 b0 8f 3e a6 c4 e3 54 98 33 fc 09 d8 87 83 a2 d6 f6 29 1d 2c 3a 4a 3b c2 eb 43 69 f1 ec 6c 9e 01 fb 19 07 38 9d 79 9c 06 b1 bf ad 9e a0 90 94 5f bc 4b b4 73 7a 51 a7 ff ba 8d 14 15 ff c0 77 71 75 5d f0 17 0c 78 7a ea f7 1f d0 18 7a 36 b3 e0 3a e7 0c 0d 9c 75 4e ce d9 54 e7 2a 16 66 89 da 47 46 a7 e9 ad 30 a0 b0 d8 c0 0c f0 2b 82 4e 50 92 14 30 44 9a a5 02 2b e3 a5 12 0b 24 72 cd fe bc 1d 19 10 95 2f a6 60 56 d6 19 a9 92 d5 2c 57 91 67 1d ef 2a 76 21 56 Data Ascii: L.`g3\|}o0zw^3Q>]AkiifX>T3),:J;Cil8y_KszQwqu]xzz6:uNTfGF0+NP0D+$r/`V,Wg*v!V
2024-04-24 08:17:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-24 08:17:50 UTC	8192	IN	Data Raw: 31 66 61 30 0d 0a 9d 82 40 7f 6f 57 92 aa 16 52 40 ba 1c dd 59 7b 98 dc 00 28 33 b8 ff bf 5d 58 ef 21 f4 b9 fe 6c 45 c4 31 a0 cf 6e 2e 2d 9f 54 fd a1 63 e5 3b d3 59 06 26 54 79 9a 56 91 48 ab 99 4c c2 f2 91 80 eb 15 6f 02 b4 ca 7b 29 b7 d9 8f f8 1a 94 33 49 5d 21 d5 75 61 84 aa 2a 06 07 91 2b 43 9b 1a 11 c7 83 47 6c ba 92 d6 81 02 63 09 5d 3f 0a d3 72 61 c4 33 a3 9d 76 cb 0c ba 06 5c 6e 54 cb f1 ca 9a 8d f3 e4 8c 9c ec 9c b4 b1 52 bb 7d 92 90 9d 14 e5 73 61 7b a9 b0 96 dc 3a 4a 9f eb 45 fe 80 52 e2 77 46 2f ea 33 76 5b 19 84 f5 34 7f 79 63 d4 95 a3 5d 44 81 63 22 94 d2 78 26 f0 0a 76 02 e5 02 15 3e 1b 48 85 83 78 2c 0c 2e ea ec cc 5d 33 19 26 bc a0 80 3c 38 3e 7a 7f f3 85 a9 62 1e 6e a3 1c 25 4d 12 30 44 e2 3c c9 a5 ed c3 4c e4 a9 bb 35 e0 3b 20 26 b4 c9 Data Ascii: 1fa0@oWR@Y{(3]X!lE1n.-Tc;Y&TyVHLo{)3I]!ua*+CGlc]?ra3v\nTR}sa{:JERwF/3v[4yc]Dc"x&v>Hx,.]3&<8>zbn%M0D<L5; &
2024-04-24 08:17:50 UTC	387	IN	Data Raw: d4 b7 32 f5 eb f6 36 bf c7 de ca fb 5a bd 60 68 fd 82 a1 4d 65 68 4d 68 b7 84 b7 35 5a 18 04 85 c9 f3 2c f6 af 86 1f 2b 7d cb 86 5a e2 e6 8b db 68 0e 71 9e c2 e7 a2 17 55 c6 39 d2 7e 91 6e de 43 79 10 6e 73 9c 01 97 1b d5 7a ab b5 b7 69 c9 84 3f 57 ba 14 5b 8b 5e 11 c7 e8 51 11 cd fd a9 05 3b db 01 8e 3e 27 8d a6 ac 26 84 52 df 56 52 79 09 a7 c1 59 70 ea 8a 61 3b 65 47 80 d4 52 84 f5 c7 6a 55 2d 40 cb cf 64 c2 1d 2c 32 cf 25 bd 3b bf 67 75 91 9f 6c c1 1d b9 cf 4b e8 c2 63 08 4b ce b1 ab 8a 54 cd 68 6c c7 bf e5 60 96 23 48 21 72 da 5c a6 29 f9 8c 76 60 fb e4 78 e7 50 6e 60 81 b2 d5 ae 39 0d 5a c1 e9 3b a0 15 a2 dd d9 0d de 18 d0 e7 40 4f bf e2 86 e0 24 74 cb 0c f4 ac 05 ab d5 09 a0 cd 63 18 63 a0 dd c6 c7 d7 02 ca 45 93 81 b9 5b a4 17 3b 9c 58 a1 d0 55 ff Data Ascii: 26Z`hMehMh5Z,+}ZhqU9~nCynszi?W[^Q;>'&RVRyYpa;eGRjU-@d,2%;gulKcKThl`#H!r\)v`xPn`9Z;@O$tccE[;XU
2024-04-24 08:17:50 UTC	6670	IN	Data Raw: 9f 6e b9 ae 3b 8d 5c db f6 fd fe 8a b2 4e 0f 2c 0d 64 b5 7d ba cf c3 86 ae f6 70 80 ec d0 71 70 12 93 f4 ce f6 e6 32 e4 aa 05 c8 29 24 a2 52 d9 71 43 fd f7 bb 54 1f 50 d8 b8 bb cf eb f5 83 29 ad cf b9 e6 9c 57 b3 19 0a fa 14 3b 14 d8 b9 0b d7 79 05 ea 2f d0 98 62 cc b9 13 33 dd b0 03 5b d7 17 55 05 69 98 d0 b5 5f 5d 3d 39 ec 0f a0 cd 4c 8d 7f b3 59 e7 1e 71 a7 4e 86 cf 37 ef 0e f2 a6 94 4a 83 6d de 54 c2 38 3a 0b c3 bd de a8 ae 3d 8f 4d 94 15 32 dd 9a f8 b1 33 45 1b 54 1e a7 07 eb 19 ba e6 70 a2 33 a7 f5 2c 26 66 0a 9d 73 b8 ae 86 8b 9e 90 d1 c2 97 1f e2 ed 3d dc a0 eb cc 27 f4 a0 ed c9 14 28 9b 14 8d 78 f1 a5 4a 1d e0 a4 f4 a9 76 aa 38 b1 bb 27 3a 1a 6d 0e 56 a4 ab 44 39 4a 02 82 d0 8c 1d e0 62 da 5c aa 66 94 44 89 8a be 12 cf 13 9b 53 b5 d5 40 60 85 f2 Data Ascii: n;\N,d}pqp2)$RqCTP)W;y/b3[Ui_]=9LYqN7JmT8:=M23ETp3,&fs='(xJv8':mVD9Jb\fDS@`
2024-04-24 08:17:50 UTC	8	IN	Data Raw: 27 cc 5e e8 d8 e2 00 00 Data Ascii: '^
2024-04-24 08:17:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-24 08:17:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-04-24 08:17:50 UTC	667	OUT	GET /favicon.ico HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:51 UTC	509	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 08:17:51 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49747	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:49 UTC	693	OUT	GET /south/manage/ene/images/icon-viza.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	269	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Tue, 16 Mar 2021 06:19:10 GMT Accept-Ranges: bytes Content-Length: 12223 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	7923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 5d 08 02 00 00 00 c8 4c 08 c2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 4c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR]LpHYs.#.#x?vLiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-04-24 08:17:50 UTC	4300	IN	Data Raw: bd 0f 6e a5 41 88 06 77 ca 21 40 63 23 b6 6e 2a d6 6a 93 3d 93 01 86 bc 40 19 18 8a 80 b1 33 a7 fa d9 ca 37 63 b8 12 94 6f 14 42 ca a1 ce 58 e7 b6 db 36 0d ca aa 52 2b 99 cb bc 21 7e 99 a0 68 36 72 f8 f0 62 59 26 c1 bf fa b5 23 66 eb 2d 2e 12 91 44 08 06 30 b1 4a c1 4b 5f da b1 c3 df fe b6 6d 90 2e 1f 0f e5 36 00 70 ea 58 6f e9 42 0d 43 ed c9 9b 6a 83 84 e4 72 30 21 55 9b 66 30 32 12 5f cd e6 34 b6 4d a0 dc 77 6d 9a f8 2f 7f ed 86 7f f2 9b bb 7e ee 7d d5 78 71 60 a9 5c a8 65 a4 25 6b 81 45 e6 31 00 98 c9 cc 15 e8 a1 0c 1d 3e fd 6c 75 e0 d0 79 b3 86 d7 05 68 4c 09 cb 0f 7d e5 78 59 8d 39 96 32 65 b1 52 49 48 a6 aa d6 a6 4d f1 81 b7 ed 04 94 2d 2b 87 44 7c 51 b4 77 6e 1d b7 9a d0 48 62 25 26 b2 20 4d 22 50 5b e1 2f 1e 3c e3 72 b0 96 7b d3 dd 7f b5 20 84 08 Data Ascii: nAw!@c#n*j=@37coBX6R+!~h6rbY&#f-.D0JK_m.6pXoBCjr0!Uf02_4Mwm/~}xq`\e%kE1>luyhL}xY92eRIHM-+D\|QwnHb%& M"P[/<r{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49751	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:49 UTC	688	OUT	GET /south/manage/ene/images/logo.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	268	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Thu, 09 Dec 2021 20:51:22 GMT Accept-Ranges: bytes Content-Length: 5727 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	5727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 dd 00 00 01 45 08 03 00 00 00 07 34 a1 73 00 00 00 69 50 4c 54 45 ff ff ff 00 00 00 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e 00 77 c1 00 77 c1 00 77 c1 00 77 c1 ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e 00 77 c1 ed 1b 2e ed 1b 2e 00 77 c1 00 77 c1 ed 1b 2e 00 77 c1 00 77 c1 ed 1b 2e ff ff ff 9b 45 3d 28 00 00 00 20 74 52 4e 53 00 00 20 40 80 8f bf ef 50 30 40 70 80 50 10 60 cf 9f 60 af cf 10 20 8f bf 30 ef 9f 70 df df af e4 52 50 d9 00 00 15 85 49 44 41 54 78 da ec c1 01 01 00 00 00 80 90 fe af ee 08 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRE4siPLTEwwwwwww.....wwww.......w..ww.ww.E=( tRNS @P0@pP`` 0pRPIDATx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49750	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:49 UTC	699	OUT	GET /south/manage/ene/images/icon-mastercard.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kmg.zaz.mybluehost.me/south/manage/ene/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	268	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Tue, 16 Mar 2021 06:20:38 GMT Accept-Ranges: bytes Content-Length: 9618 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	7924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 5d 08 02 00 00 00 c8 4c 08 c2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 7e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR]LpHYs.#.#x?v~iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-04-24 08:17:50 UTC	1694	IN	Data Raw: ed 17 af 1b 3b 6e ec ec d9 c7 5d 7f fd f5 a3 46 d5 3d f6 f8 e3 4a a9 bb ee fa c5 89 f3 4e 18 3f ee 88 eb bf f2 95 2b 3e 7b 79 2a 95 01 00 42 10 f8 8d 8d 13 ae f8 ec 67 5b 5a 5a 9a 9a 5b 1e 7b f4 b1 f6 f6 8e ef fd cb 0d 67 9e 79 f6 98 31 f5 17 5f 7c c9 e7 3e ff 39 5b 14 fe ec 6b 9b 0e 34 57 03 69 2e c5 aa 56 bf 54 69 8d 54 ac d8 da ba 3a b1 be 9f cd ba 8e 66 42 2c ee 58 c9 66 33 59 06 25 e2 09 62 0e ad bf 67 cf 9e 86 09 0d d5 c9 da 54 77 4f 26 9d f2 3c 67 da b4 a9 61 68 b2 59 7f fa f4 e9 0b ef bf cf f5 dc 1b 6f bc e5 8a cf 5d 79 dc 71 73 be f9 cd 6f 31 eb e8 5b 00 a1 31 d6 66 33 99 0c 80 b6 b6 b7 00 2c 58 70 ef 85 17 5e 78 d9 65 97 7f fe ca 2b 49 51 22 91 8c 12 c8 99 88 48 32 99 94 0d 4d 47 67 07 80 39 73 e6 00 c6 f7 83 4c 26 d3 dd dd 19 86 c1 ae 5d bb 6a Data Ascii: ;n]F=JN?+>{y*Bg[ZZ[{gy1_\|>9[k4Wi.VTiT:fB,Xf3Y%bgTwO&<gahYo]yqso1[1f3,Xp^xe+IQ"H2MGg9sL&]j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49754	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:50 UTC	431	OUT	GET /south/manage/ene/images/search.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	271	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Mon, 15 Mar 2021 21:11:54 GMT Accept-Ranges: bytes Content-Length: 694 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml
2024-04-24 08:17:50 UTC	694	IN	Data Raw: 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 65 61 72 63 68 20 66 61 2d 77 2d 31 36 20 68 77 2d 6e 61 76 62 61 72 5f 5f 69 63 6f 6e 20 66 61 2d 32 78 22 20 74 69 74 6c 65 3d 22 53 c3 b8 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2d 74 69 74 6c 65 2d 6d 62 4c 47 43 68 61 54 50 4f 34 6e 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 72 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 65 61 72 63 68 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 64 61 74 61 2d 66 61 2d 69 32 73 76 67 3d 22 22 3e Data Ascii: <svg class="svg-inline--fa fa-search fa-w-16 hw-navbar__icon fa-2x" title="Sk" aria-labelledby="svg-inline--fa-title-mbLGChaTPO4n" data-prefix="far" data-icon="search" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg="">
2024-04-24 08:17:51 UTC	429	OUT	GET /south/manage/ene/images/user.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:51 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:51 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:14:58 GMT Accept-Ranges: bytes Content-Length: 802 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml <svg class="svg-inline--fa fa-user fa-w-14 hw-navbar__icon fa-2x" title="Min side" aria-labelledby="svg-inline--fa-title-I5ubRcgkbPW2" data-prefix="far" data-icon="user" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-I5ubRcgkbPW2">Min side</title><path fill="currentColor" d="M313.6 304c-28.7 0-42.5 16-89.6 16-47.1 0-60.8-16-89.6-16C60.2 304 0 364.2 0 438.4V464c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48v-25.6c0-74.2-60.2-134.4-134.4-134.4zM400 464H48v-25.6c0-47.6 38.8-86.4 86.4-86.4 14.6 0 38.3 16 89.6 16 51.7 0 74.9-16 89.6-16 47.6 0 86.4 38.8 86.4 86.4V464zM224 288c79.5 0 144-64.5 144-144S303.5 0 224 0 80 64.5 80 144s64.5 144 144 144zm0-240c52.9 0 96 43.1 96 96s-43.1 96-96 96-96-43.1-96-96 43.1-96 96-96z"></path></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49755	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:50 UTC	429	OUT	GET /south/manage/ene/images/logo.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	268	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Thu, 09 Dec 2021 20:51:22 GMT Accept-Ranges: bytes Content-Length: 5727 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	5727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 dd 00 00 01 45 08 03 00 00 00 07 34 a1 73 00 00 00 69 50 4c 54 45 ff ff ff 00 00 00 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 00 77 c1 ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e 00 77 c1 00 77 c1 00 77 c1 00 77 c1 ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e ed 1b 2e 00 77 c1 ed 1b 2e ed 1b 2e 00 77 c1 00 77 c1 ed 1b 2e 00 77 c1 00 77 c1 ed 1b 2e ff ff ff 9b 45 3d 28 00 00 00 20 74 52 4e 53 00 00 20 40 80 8f bf ef 50 30 40 70 80 50 10 60 cf 9f 60 af cf 10 20 8f bf 30 ef 9f 70 df df af e4 52 50 d9 00 00 15 85 49 44 41 54 78 da ec c1 01 01 00 00 00 80 90 fe af ee 08 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRE4siPLTEwwwwwww.....wwww.......w..ww.ww.E=( tRNS @P0@pP`` 0pRPIDATx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49752	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:50 UTC	440	OUT	GET /south/manage/ene/images/icon-mastercard.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	268	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Tue, 16 Mar 2021 06:20:38 GMT Accept-Ranges: bytes Content-Length: 9618 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	7924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 5d 08 02 00 00 00 c8 4c 08 c2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 7e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR]LpHYs.#.#x?v~iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-04-24 08:17:50 UTC	1694	IN	Data Raw: ed 17 af 1b 3b 6e ec ec d9 c7 5d 7f fd f5 a3 46 d5 3d f6 f8 e3 4a a9 bb ee fa c5 89 f3 4e 18 3f ee 88 eb bf f2 95 2b 3e 7b 79 2a 95 01 00 42 10 f8 8d 8d 13 ae f8 ec 67 5b 5a 5a 9a 9a 5b 1e 7b f4 b1 f6 f6 8e ef fd cb 0d 67 9e 79 f6 98 31 f5 17 5f 7c c9 e7 3e ff 39 5b 14 fe ec 6b 9b 0e 34 57 03 69 2e c5 aa 56 bf 54 69 8d 54 ac d8 da ba 3a b1 be 9f cd ba 8e 66 42 2c ee 58 c9 66 33 59 06 25 e2 09 62 0e ad bf 67 cf 9e 86 09 0d d5 c9 da 54 77 4f 26 9d f2 3c 67 da b4 a9 61 68 b2 59 7f fa f4 e9 0b ef bf cf f5 dc 1b 6f bc e5 8a cf 5d 79 dc 71 73 be f9 cd 6f 31 eb e8 5b 00 a1 31 d6 66 33 99 0c 80 b6 b6 b7 00 2c 58 70 ef 85 17 5e 78 d9 65 97 7f fe ca 2b 49 51 22 91 8c 12 c8 99 88 48 32 99 94 0d 4d 47 67 07 80 39 73 e6 00 c6 f7 83 4c 26 d3 dd dd 19 86 c1 ae 5d bb 6a Data Ascii: ;n]F=JN?+>{y*Bg[ZZ[{gy1_\|>9[k4Wi.VTiT:fB,Xf3Y%bgTwO&<gahYo]yqso1[1f3,Xp^xe+IQ"H2MGg9sL&]j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49753	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:17:50 UTC	434	OUT	GET /south/manage/ene/images/icon-viza.png HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:50 UTC	269	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Tue, 16 Mar 2021 06:19:10 GMT Accept-Ranges: bytes Content-Length: 12223 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/png
2024-04-24 08:17:50 UTC	7923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 5d 08 02 00 00 00 c8 4c 08 c2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 4c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR]LpHYs.#.#x?vLiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-04-24 08:17:50 UTC	4300	IN	Data Raw: bd 0f 6e a5 41 88 06 77 ca 21 40 63 23 b6 6e 2a d6 6a 93 3d 93 01 86 bc 40 19 18 8a 80 b1 33 a7 fa d9 ca 37 63 b8 12 94 6f 14 42 ca a1 ce 58 e7 b6 db 36 0d ca aa 52 2b 99 cb bc 21 7e 99 a0 68 36 72 f8 f0 62 59 26 c1 bf fa b5 23 66 eb 2d 2e 12 91 44 08 06 30 b1 4a c1 4b 5f da b1 c3 df fe b6 6d 90 2e 1f 0f e5 36 00 70 ea 58 6f e9 42 0d 43 ed c9 9b 6a 83 84 e4 72 30 21 55 9b 66 30 32 12 5f cd e6 34 b6 4d a0 dc 77 6d 9a f8 2f 7f ed 86 7f f2 9b bb 7e ee 7d d5 78 71 60 a9 5c a8 65 a4 25 6b 81 45 e6 31 00 98 c9 cc 15 e8 a1 0c 1d 3e fd 6c 75 e0 d0 79 b3 86 d7 05 68 4c 09 cb 0f 7d e5 78 59 8d 39 96 32 65 b1 52 49 48 a6 aa d6 a6 4d f1 81 b7 ed 04 94 2d 2b 87 44 7c 51 b4 77 6e 1d b7 9a d0 48 62 25 26 b2 20 4d 22 50 5b e1 2f 1e 3c e3 72 b0 96 7b d3 dd 7f b5 20 84 08 Data Ascii: nAw!@c#n*j=@37coBX6R+!~h6rbY&#f-.D0JK_m.6pXoBCjr0!Uf02_4Mwm/~}xq`\e%kE1>luyhL}xY92eRIHM-+D\|QwnHb%& M"P[/<r{
2024-04-24 08:17:51 UTC	429	OUT	GET /south/manage/ene/images/menu.svg HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:17:51 UTC	955	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 08:17:51 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:19:30 GMT Accept-Ranges: bytes Content-Length: 722 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/svg+xml <svg class="svg-inline--fa fa-bars fa-w-14 hw-navbar__bars fa-stack-2x" title="NOT_TRANSLATED" aria-labelledby="svg-inline--fa-title-dHMG9sS027ba" data-prefix="far" data-icon="bars" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""><title id="svg-inline--fa-title-dHMG9sS027ba">NOT_TRANSLATED</title><path fill="currentColor" d="M436 124H12c-6.627 0-12-5.373-12-12V80c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12zm0 160H12c-6.627 0-12-5.373-12-12v-32c0-6.627 5.373-12 12-12h424c6.627 0 12 5.373 12 12v32c0 6.627-5.373 12-12 12z"></path></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49765	50.116.65.227	443	6300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 08:18:01 UTC	719	OUT	GET /south/manage/Canada_fr/ HTTP/1.1 Host: kmg.zaz.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=58d1c669f95071befc3b01b0bdc8e5d1
2024-04-24 08:18:01 UTC	194	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 08:18:01 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
2024-04-24 08:18:01 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5572, Parent PID: 5672

General

Target ID:	0
Start time:	10:16:50
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6300, Parent PID: 5572

General

Target ID:	2
Start time:	10:16:52
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1984,i,12593039912173914650,15885612422497244575,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6504, Parent PID: 5672

General

Target ID:	3
Start time:	10:16:55
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.za.m.mimecastprotect.com/s/oln8C66VVXhXmkXOs6FLej?domain=url3687.joseeustasiorivera.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly