Edit tour

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net
Analysis ID:	1432315
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2444,i,15971310653574119148,10434369989334271885,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/ttp/url/get-page-data HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveContent-Length: 173sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://security-us.mimecast.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundx-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/html; charset=utf-8Content-Length: 180ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-EncodingDate: Fri, 26 Apr 2024 18:59:30 GMTConnection: close

Source: chromecache_63.2.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_63.2.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/29@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2444,i,15971310653574119148,10434369989334271885,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2444,i,15971310653574119148,10434369989334271885,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net	0%	Avira URL Cloud	safe
https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/r/Akjcmy83Tyqu4jiKkY0loKkW4h48tqcbO9gZhn_-k_uVAd2q7v_ttiOxkUuTQPEWo2JwpHrnbwT_9JpXWJTWzC-7nRCHVVxhXCSULg33_FfJnsc7KP7F9CuwM6Wb9_HW87mhsljLPOD-Yn3-MqNENmGdxV7uMSczlkzfVkuS9Yla9mFj_h15Y6l48kEIZBZSMFvvCwZcqFNCS0OZDXopH-D3MYbocvC-rm9EVi1OTSGimfE8XyEbR4tZNyX887bVXFo1wPQmK0en15VHlvSFpHCwGRCqy2qtK9wBVpW_XyjObYaNhEH6KhkoiL-RMTn3CJZLEbh3v9QdVkqzHtEQk1VGlLuqEY8SRs3xraRwEKNryn4dafudjuCS43-VNIPG7dbPG0RTLmU1L0ksJ-Acz4R-Ltf_Q3-F5r6y7htC-eUK_vvkV3ZFmtW0yQp_-4aWL_ikZDSpU1_tAoA7O3rQI_hkGK0jnUwG_lxleZB20zRhQuy1IprCLKt5KiIOgg1v-pXN5CMWl8RDuiMY144Yi_YJwUhFna8gECliLI9T_7dDEJ0-NIVARRIbfw59agRoYmyQ4J4e4rv5ub976KTaT3MQg3-q40ZmzUG4x4lO1ciQ3CW2vKjZr36lRB206Bt0ck7tOf20DFZ9l0JqLC8RCtApUBvv459ytMVb_t_KOD72LHNnzCNyTNb-zDL1Bva9F5xnhLTC4ekv1Cg5PiIpMoIY7vvau9j7E4_gZawxEZs2AzFgdxA-WA_SA27ahdyIuc-PzE3NvFJUTxTsAq9tX7Nq6qcHC4mdZxH5zZO3skP4vMIY7GcxecMEcFihwsuM2K6PIrySLLpS6UMBzY3N_vAkR77glb-n1eWutA-YlGE3x715w-fNspiDHvKNZ9E3F31CLbzxjPi9fvmFsoQsU55-mQxQsww_WJT7aMwnyX7hVU4_3rqxHWnVYq2cNCcN6ycY53JWmu_iRUJw9DOVV8-skIIFR6evVbu5T-zPWncBJAhjf4OqTo5-nll1rZrXaCMUeriQgWX0D5ehT4oynnKPAjc0RIa3zHMX2U5sidnvNanzwcVWzpRoijQuYkGYTM6RfG2JD7WtycYWuF-jGzbXEhTkOkEFP7D_EC6nCVMvtyeFRPrCDHnW9wmkaYlxAFvLZ8iL5qcaKEdU2Xcv1foDSnCEkx6pA3gObsDRpmZyNjh8oRZaFmK9gU1xTA0aBTVzckE3o_sf9Df3NSXLiQUI65XYgfHkfRZNkEYAsWrFzhVpVTsDQ83alfH6I7mtf69Ixc0jS9_u1uGi2SeQAlf-1Ds71KEB2iHf5186OdADPCQHu-aeErU7yZZOQmMYySGKP5YC6cV028nxISJUDFz9XyzK5y8YjMkwN0fnsbvTVGgt2z1mXZU5RNRzf1wDSj8Vc05uzWF3ntNK9utnfuw8mJuFIb8yLAhxrg60DrEcCV3e4PyQwKhtJchx4TsqXj-X1MhhjBj0nF-NeSpRZ4RBPGQDtERxWKknGmUodWqTWc4t1v22hNBJZWYjkuczaQ6DLyIqZEIjn-Cq8oXFJQV2kFQ1tuhjpuh2eqWss3wEU0HZFaaPOkY1aWVCdOKp_nR9UbtYjBf9D3DTcjT0ba7kXTwTVCxGV6UjeMc_yeYzGF5cqGCubdWLJc3Ak4x6U6Ky35QOvyjwxBoMSCCXRIPflCXIfyMYWnshBwFmonvwDG5EJ_Lm0UFjSxAVEj7Y36mv7MBt9Z4L-9QNfQejLP4qnnM1-0cfdN-cjVCZ3SzVqers2wUIhsz7mb3Mwr3PQKzCgz3Bc0PREaTlpDDfm3097IqYLOHnoWWD_IhTJtu8yjIurPFSzKWkNIH2fpCX4x-PNZlUkj2x5bw7jMfkKZ7P9dRdLJOl42KZvZRZr8UA3XcmBhwMlyv8jzdI1r5jkHtVjSdzuFJ83F-N29On6fAx6ckwKJi3KOidm64dcCLVUlqGTJpExY0HeKtmT4DBmTwkHg0VLYW-43wvKAgo-4d9x9_B5Sx7ZOxxEozoT97E70nfUG5yPtxZhaVI2iPbzMI9Xu9b5zepLazNzLsLbXGR5STzIzZVoWWP4anD4-4yRzYaukGwoxw5iOHcLiAwQ9rkLSF1zoRCveRq9IezLDfNRPTAhumyLtJoJNCa2QgjLMZx4e-e3I2IWFvM_gYt4mtbjJa6lj0YIo0fFQ6PUdriyENvb0WkprJpuMFLxGaR49vt9zVmA9mO_bva7wGfK-JdKrAchl75Qc5QJJmsJwsV_W6soHNey4lOt-E3CI_3IjqctGXn0Kd_rDvFFR2FAaklSU60cCxne-sEOa8GSFmdpE5DN9MDb_pzsvMOHF2LScC3zmREkNmjUaXdQdsJe4WJRJNmlXyuzjDWIVPAoWtVltXUvsEQCi4AQSowzIfedVAQXuhTvR6nwc7XCze6qfww8zFyqo1L34jiTyNeS8_aTCl83Y3YlrDcJiKCKYb4dyMSySV3wUxEBLq4MX_olOlhWqdTF3yftFzue1oxk1xEuTYoZn134mf9Mr6nO7RHG2dpbbDXl-Ab8wT1QNBh3XKM8oKX6kckfiOeQhWUrOC7bagUragD6wlsG4CUue4oymP6F9ey5D6qUCyAp3TlUrMNgVNPq4b7ce9fk1EABqtqiPFsUA6JB3pYk4plNMQrvuFK2MlCCaH-Dqw1KjXrUWsThNMfSE_TxYg9ZhC-Fg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
url.us.m.mimecastprotect.com	205.139.111.113	true	false	unknown
security-us.mimecast.com	205.139.110.99	true	false	high
www.google.com	142.250.217.228	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://url.us.m.mimecastprotect.com/r/Akjcmy83Tyqu4jiKkY0loKkW4h48tqcbO9gZhn_-k_uVAd2q7v_ttiOxkUuTQPEWo2JwpHrnbwT_9JpXWJTWzC-7nRCHVVxhXCSULg33_FfJnsc7KP7F9CuwM6Wb9_HW87mhsljLPOD-Yn3-MqNENmGdxV7uMSczlkzfVkuS9Yla9mFj_h15Y6l48kEIZBZSMFvvCwZcqFNCS0OZDXopH-D3MYbocvC-rm9EVi1OTSGimfE8XyEbR4tZNyX887bVXFo1wPQmK0en15VHlvSFpHCwGRCqy2qtK9wBVpW_XyjObYaNhEH6KhkoiL-RMTn3CJZLEbh3v9QdVkqzHtEQk1VGlLuqEY8SRs3xraRwEKNryn4dafudjuCS43-VNIPG7dbPG0RTLmU1L0ksJ-Acz4R-Ltf_Q3-F5r6y7htC-eUK_vvkV3ZFmtW0yQp_-4aWL_ikZDSpU1_tAoA7O3rQI_hkGK0jnUwG_lxleZB20zRhQuy1IprCLKt5KiIOgg1v-pXN5CMWl8RDuiMY144Yi_YJwUhFna8gECliLI9T_7dDEJ0-NIVARRIbfw59agRoYmyQ4J4e4rv5ub976KTaT3MQg3-q40ZmzUG4x4lO1ciQ3CW2vKjZr36lRB206Bt0ck7tOf20DFZ9l0JqLC8RCtApUBvv459ytMVb_t_KOD72LHNnzCNyTNb-zDL1Bva9F5xnhLTC4ekv1Cg5PiIpMoIY7vvau9j7E4_gZawxEZs2AzFgdxA-WA_SA27ahdyIuc-PzE3NvFJUTxTsAq9tX7Nq6qcHC4mdZxH5zZO3skP4vMIY7GcxecMEcFihwsuM2K6PIrySLLpS6UMBzY3N_vAkR77glb-n1eWutA-YlGE3x715w-fNspiDHvKNZ9E3F31CLbzxjPi9fvmFsoQsU55-mQxQsww_WJT7aMwnyX7hVU4_3rqxHWnVYq2cNCcN6ycY53JWmu_iRUJw9DOVV8-skIIFR6evVbu5T-zPWncBJAhjf4OqTo5-nll1rZrXaCMUeriQgWX0D5ehT4oynnKPAjc0RIa3zHMX2U5sidnvNanzwcVWzpRoijQuYkGYTM6RfG2JD7WtycYWuF-jGzbXEhTkOkEFP7D_EC6nCVMvtyeFRPrCDHnW9wmkaYlxAFvLZ8iL5qcaKEdU2Xcv1foDSnCEkx6pA3gObsDRpmZyNjh8oRZaFmK9gU1xTA0aBTVzckE3o_sf9Df3NSXLiQUI65XYgfHkfRZNkEYAsWrFzhVpVTsDQ83alfH6I7mtf69Ixc0jS9_u1uGi2SeQAlf-1Ds71KEB2iHf5186OdADPCQHu-aeErU7yZZOQmMYySGKP5YC6cV028nxISJUDFz9XyzK5y8YjMkwN0fnsbvTVGgt2z1mXZU5RNRzf1wDSj8Vc05uzWF3ntNK9utnfuw8mJuFIb8yLAhxrg60DrEcCV3e4PyQwKhtJchx4TsqXj-X1MhhjBj0nF-NeSpRZ4RBPGQDtERxWKknGmUodWqTWc4t1v22hNBJZWYjkuczaQ6DLyIqZEIjn-Cq8oXFJQV2kFQ1tuhjpuh2eqWss3wEU0HZFaaPOkY1aWVCdOKp_nR9UbtYjBf9D3DTcjT0ba7kXTwTVCxGV6UjeMc_yeYzGF5cqGCubdWLJc3Ak4x6U6Ky35QOvyjwxBoMSCCXRIPflCXIfyMYWnshBwFmonvwDG5EJ_Lm0UFjSxAVEj7Y36mv7MBt9Z4L-9QNfQejLP4qnnM1-0cfdN-cjVCZ3SzVqers2wUIhsz7mb3Mwr3PQKzCgz3Bc0PREaTlpDDfm3097IqYLOHnoWWD_IhTJtu8yjIurPFSzKWkNIH2fpCX4x-PNZlUkj2x5bw7jMfkKZ7P9dRdLJOl42KZvZRZr8UA3XcmBhwMlyv8jzdI1r5jkHtVjSdzuFJ83F-N29On6fAx6ckwKJi3KOidm64dcCLVUlqGTJpExY0HeKtmT4DBmTwkHg0VLYW-43wvKAgo-4d9x9_B5Sx7ZOxxEozoT97E70nfUG5yPtxZhaVI2iPbzMI9Xu9b5zepLazNzLsLbXGR5STzIzZVoWWP4anD4-4yRzYaukGwoxw5iOHcLiAwQ9rkLSF1zoRCveRq9IezLDfNRPTAhumyLtJoJNCa2QgjLMZx4e-e3I2IWFvM_gYt4mtbjJa6lj0YIo0fFQ6PUdriyENvb0WkprJpuMFLxGaR49vt9zVmA9mO_bva7wGfK-JdKrAchl75Qc5QJJmsJwsV_W6soHNey4lOt-E3CI_3IjqctGXn0Kd_rDvFFR2FAaklSU60cCxne-sEOa8GSFmdpE5DN9MDb_pzsvMOHF2LScC3zmREkNmjUaXdQdsJe4WJRJNmlXyuzjDWIVPAoWtVltXUvsEQCi4AQSowzIfedVAQXuhTvR6nwc7XCze6qfww8zFyqo1L34jiTyNeS8_aTCl83Y3YlrDcJiKCKYb4dyMSySV3wUxEBLq4MX_olOlhWqdTF3yftFzue1oxk1xEuTYoZn134mf9Mr6nO7RHG2dpbbDXl-Ab8wT1QNBh3XKM8oKX6kckfiOeQhWUrOC7bagUragD6wlsG4CUue4oymP6F9ey5D6qUCyAp3TlUrMNgVNPq4b7ce9fk1EABqtqiPFsUA6JB3pYk4plNMQrvuFK2MlCCaH-Dqw1KjXrUWsThNMfSE_TxYg9ZhC-Fg	false	Avira URL Cloud: safe	unknown
https://security-us.mimecast.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false		high
https://security-us.mimecast.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false		high
https://security-us.mimecast.com/ttpwp/resources/images/mimecastlogo@2x.png	false		high
https://security-us.mimecast.com/ttpwp/resources/images/favicon.ico	false		high
https://security-us.mimecast.com/ttpwp/resources/styles.5257ca6e429949972959.js	false		high
https://security-us.mimecast.com/api/ttp/url/get-page-data	false		high
https://security-us.mimecast.com/branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/style.css?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp	false		high
https://security-us.mimecast.com/ttpwp/resources/main.5257ca6e429949972959.js	false		high
https://security-us.mimecast.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false		high
https://security-us.mimecast.com/branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp	false		high
https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net	false		unknown
https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA	false		high
https://security-us.mimecast.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false		high
https://security-us.mimecast.com/ttpwp/resources/languages/en.json	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_63.2.dr	false		high
https://community.mimecast.com/docs/DOC-241	chromecache_63.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
205.139.111.113	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
205.139.110.99	security-us.mimecast.com	United States	30031	MIMECAST-US	false
142.250.217.228	www.google.com	United States	15169	GOOGLEUS	false
207.211.31.110	unknown	United States	14135	NAVISITE-EAST-2US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432315
Start date and time:	2024-04-26 20:58:02 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/29@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.195, 142.250.217.174, 142.251.162.84, 34.104.35.123, 52.165.165.26, 199.232.214.172, 192.229.211.108, 52.165.164.15, 142.250.189.131
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/images/mimecastlogo@2x.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	7.9930739048349935
Encrypted:	true
SSDEEP:	768:NzA1kfxARdebgMmiX+c2BERO9/ufrv7KkffWz6tw2O7i:NzA1k5aebgMmYWH9mfpfSmPOe
MD5:	E5231978386520AFD0019A8F5D007882
SHA1:	5E06725A18323ED9372E3E488D4F6DF1A56B3091
SHA-256:	71BF29B23EAACC10ACE4DB7E3711FD8F16F199F8F5F8FF5895A0BB0C13546509
SHA-512:	D5EEE91E55BFE7FB220705545D6E767C1A969F4E313F1991C220F4EAA05A7ABC83EE9E6B804D1DF90C1779591F587E1FD58230E120CDA529F8C98BC337E4D3D3
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
Preview:	wOF2............../..............................T.V..N...x..S..~..6.$..x. ..2..U.C..T'.a..!...{.1...l.$......\|...(.U...=A.1...PkY..N....t.+P`..Kp.:n......p......~.......-....`;D.vu.p.N.t......]u....m....Hln..a.x..N.gl...'[`..V..L{.....f.9.l..sw7....M.....B..n.M.6.....z..(...)..}>...... .A.KG}.Q...Z.....G.w\K........a..,.F...3....Z.i)-..<l.eEu.eY.e6..66].VY.5.n.....\_..W....J.ARC.{....u...r.H-...x.A-j.z........?...0..K..EU...v...YC..y.?J.{.._..L60.R..%...X...j..B]E..U.w.?.....J....dD..9.'.r....o.....X.l.^@>...wj?w.7S<G3ch..%..2Hr....&.....K..Q..l;.......f..O2$..}H K......s...~.m..t\|..+.........'..,S...H{@.X.S.E....p.g..\|.{E....Vi7...u.:K...r.3s~.....d..........(tC.......D....f....higI..9.q...Y.....J.F.....X...2c./......dM.K........1....&.. L.A,I....gL....2.i.Rd.8.h.0w....=.@.b.Q..@AP.}K?.$.....k..."...D..5....#...3r.eY@(p.........&....\...@..q..1......F k<....=....9G.f*..........y..N..[..._5.....U.@..\|}..u.k2..7...).#y.................d..B

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9408
Entropy (8bit):	7.958531081228106
Encrypted:	false
SSDEEP:	192:iP/NtAzG/mM5pIjgtWyO/jBp4WsdvgC2Ikzko0lrekzAcks:G/NtEG+M56gtWPNp3s5Z2Ikzko0lLz7
MD5:	59134773D6A96B1B62C36FFB96BE6AC6
SHA1:	A1542BED1D798CE8C791A83EB35A0FA8F5F936D3
SHA-256:	7E57D2D0F7369027226A1E2E7C21102C29D9102E3E5F85BE174857A29AB084BA
SHA-512:	148CEDE4DB8898B0A0021012A609C46129EC6675994174F01F98CA87E922ECD2E678A1D0EFB83B289783B2E9C6FBAA0AF63C44B8E215603849424548CF73B4BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...x......wXw....sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.134.[z..$0IDATx^..\|.U..g^....ky-.4..B........{#.B..I..."..bY].uW..."..........EE.....!....d.......?.\|..\|&..93o...s.w.a....... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".3.a..Muk...Z.\|s..w.....M...7.e,..Xd2.D.......e..A..M..k...H.qt../{..i..Q..e..A..J.eu.f...a.gvkz:...p).2..........d.f..Ip..X.o=f.ms...'N....'(.@..~&",.]I......{..{....h..2C.... ....2..@.._T...`....,.....^.. .. ..hF.8..(.....H....J.r.....k^.I..Je2F.......q..W M.;/....-.....\.",.].T.Y.B_T...O#T.....B..!b.r....q.T..N(+A....CO.P~,.Q.gQQ.q.'...\."...e.G."~...W.P{<...T(P0D.:.a.j.FV....k.zD.../...5g.!$\|....!.....6..c0l.L.........w_.d2iN.R.7.BD.U.Z.NV...VI......onp ...d.I.....kR.I...0.....3.-.......A...-D.!b.p..q.F...1......]...iH.C.....kO...g..((.2.Z:..2.4

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/languages/en.json
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17152
Entropy (8bit):	5.391244405499397
Encrypted:	false
SSDEEP:	384:+6W07PLkroKAqnNN6cVSfMSYICv70n6vxVgHNH3pv/EYRs6UmOkLBPUMx:RB7PLkcMTSETv5rgt5EkU8PUu
MD5:	BEC66575E1C280E5041EFB0665141845
SHA1:	42893859EA2DE523193BD7CBD4173E52E9B402C1
SHA-256:	0367BF9BDDF7F8747008FA412393A70E505BBFB63A0F6CEF23D319EE932B786A
SHA-512:	4CC37916CC3757F86895A707A13CE9290C49A4A968E3AD056D23590D2B405EFB73668BF54BAA60BC750C59526A71E73EF4C534FA321B83D8141F2D1BA27C0E17
Malicious:	false
Reputation:	low
Preview:	{"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Browsing","IN_PRIVATE_SAFARI":"Private Browsing","IN_PRIVATE_IE":"InPrivate mode","COMPATIBILITY_VIEW":"Compatibility View","IN_PRIVATE_EDGE":"InPrivate mode","DISABLED_COOKIE_ERROR":"<strong>Cookies are required.</strong> To continue, please allow cookies in your browser and try again.","ACCESS_DENIED_MESSAGE_COMPONENT":{"TITLE":"Sorry, you don.t have permission to access this page","DESCRIPTION":"If you need access, please contact your administrator.","LINK_1":"Go to the login page"},"$I18N_ACCOUNT_SWITCH_BAR":{"VIEWING_ACCOUNT":"Viewing account"},"$I18N_ASIDE_RECIPIENTS":{"SEARCH_PLACEHOLDER":"Search recipients","COLUMNS":{"EMAIL":"Recipients","STATUS":"Message Status"},"STATUS":{"DELIVERY":"Pending Delivery","DELIVERED":"Delivered","H

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 120, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9408
Entropy (8bit):	7.958531081228106
Encrypted:	false
SSDEEP:	192:iP/NtAzG/mM5pIjgtWyO/jBp4WsdvgC2Ikzko0lrekzAcks:G/NtEG+M56gtWPNp3s5Z2Ikzko0lLz7
MD5:	59134773D6A96B1B62C36FFB96BE6AC6
SHA1:	A1542BED1D798CE8C791A83EB35A0FA8F5F936D3
SHA-256:	7E57D2D0F7369027226A1E2E7C21102C29D9102E3E5F85BE174857A29AB084BA
SHA-512:	148CEDE4DB8898B0A0021012A609C46129EC6675994174F01F98CA87E922ECD2E678A1D0EFB83B289783B2E9C6FBAA0AF63C44B8E215603849424548CF73B4BC
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp
Preview:	.PNG........IHDR...,...x......wXw....sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.134.[z..$0IDATx^..\|.U..g^....ky-.4..B........{#.B..I..."..bY].uW..."..........EE.....!....d.......?.\|..\|&..93o...s.w.a....... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".D.@...!.!2H.... .".".3.a..Muk...Z.\|s..w.....M...7.e,..Xd2.D.......e..A..M..k...H.qt../{..i..Q..e..A..J.eu.f...a.gvkz:...p).2..........d.f..Ip..X.o=f.ms...'N....'(.@..~&",.]I......{..{....h..2C.... ....2..@.._T...`....,.....^.. .. ..hF.8..(.....H....J.r.....k^.I..Je2F.......q..W M.;/....-.....\.",.].T.Y.B_T...O#T.....B..!b.r....q.T..N(+A....CO.P~,.Q.gQQ.q.'...\."...e.G."~...W.P{<...T(P0D.:.a.j.FV....k.zD.../...5g.!$\|....!.....6..c0l.L.........w_.d2iN.R.7.BD.U.Z.NV...VI......onp ...d.I.....kR.I...0.....3.-.......A...-D.!b.p..q.F...1......]...iH.C.....kO...g..((.2.Z:..2.4

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4193)
Category:	downloaded
Size (bytes):	5909
Entropy (8bit):	5.806120501233646
Encrypted:	false
SSDEEP:	48:08kjiCFaELviL/yt+nPnlB2yYXyPXyBlt+nPnlB2yYXyPXydBaELvVIoFaELvV+J:3Lat+nvllYCK3t+nvllYCK0wafowUlQ
MD5:	FC09C1F197B311A7D4C1345E203280DC
SHA1:	A64BFE6E40CF1C80337667066908D7E424426F4A
SHA-256:	79FB75AD78C58D5CB8272EC4C18078EECEB250655469DC473535165F4236B4CB
SHA-512:	64F45C205556BDCC9721D7CBA22BA0C2691484A8642A7EE0B1EC83B8DCC0C9270A4D537B31FDE9E7955F7AADF4527DEA0CB9D4E734EB1404CF136275EAAEA215
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <link rel="stylesheet" href="/branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/style.css?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1042084
Entropy (8bit):	5.585805715375964
Encrypted:	false
SSDEEP:	24576:mGKAoVuog6AhVuhgqWHAhVuhISFSr3TSZWkcSO2dpoFPQ+Lgl9SclgDFaGa3mDKt:jFS3y9Sclg+3ZjMdX56Udy8sx
MD5:	5F0D3A7E853059D6E1BF72263336A1B6
SHA1:	1D2860B87C7C0DFBC8A4BB72733BFA811108826D
SHA-256:	C1C6725B64EE8DDB255DE008BDFFB528CB91B10DE40B67737E0B6DD9C47C6096
SHA-512:	2C56B00157F0C55DA7DCEE2319799C01C4F21F3E88A6A5CB9BBF168A86B89C525CF45ACAC4267DDB0E41F6F77BF4F0FD2CDB9909D245E927F428BAD8581D213D
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/main.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"urt._ots._mar._api._mai._eka._uzt._abu._ira._urr._aza._abe.".split("_"),monthsParseExact:!0,weekdays:"igandea_astelehena_asteartea_asteazkena_osteguna_ostirala_larunbata".split("_"),weekdaysShort:"ig._al._ar._az._og._ol._lr.".split("_"),weekdaysMin:"ig_al_ar_az_og_ol_lr".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"YYYY-MM-DD",LL:"YYYY[ko] MMMM[ren] D[a]",LLL:"YYYY[ko] MMMM[ren] D[a] HH:mm",LLLL:"dddd, YYYY[ko] MMMM[ren] D[a] HH:mm",l:"YYYY-M-D",ll:"YYYY[ko] MMM D[a]",lll:"YYYY[ko] MMM D[a] HH:mm",llll:"ddd, YYYY[ko] MMM D[a] HH:mm"},calendar:{sameDay:"[gaur] LT[etan]",nextDay:"[bihar] LT[etan]",nextWeek:"dddd LT[etan]",lastDay:"[atzo] LT[etan]",lastWeek:"[aurreko] dddd LT[etan]",sameElse:"L"},relativeTim

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4422)
Category:	downloaded
Size (bytes):	4423
Entropy (8bit):	4.7943278500283455
Encrypted:	false
SSDEEP:	48:LjeKFHLkgjzZI+8zeay1rHFThJDkMXFThEjoGsci1H+FyFWTFFPUOgF3GfzL:JFHRnZI+3DkyKjoGjid+FfXP/R
MD5:	E754DA7ECBDF5252348B557D064AE89B
SHA1:	C46614FF36E8723F02281D668D6C40A7F4FBAE11
SHA-256:	9AE9C6C79E74DFD850AC37D1E5FD0FFF26C16219D77D5324F557EF987EA6C3EB
SHA-512:	6895B985A06BE4595CFD153F5EADA27BEDADEC14371B0DC72A7CE4F8107E2703CAA76F0F3D42FCE67C525E76CF5C6F068B362B98316A317F1065D177349915E1
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/style.css?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp
Preview:	.btn-primary{background-color:#ef6421;border-color:#ef6421}.btn-primary:focus,.btn-primary.focus{background-color:#ce4d0f;border-color:#87320a}.btn-primary:hover{background-color:#ce4d0f;border-color:#c54a0e}.btn-primary:active,.btn-primary.active,.open>.btn-primary.dropdown-toggle{background-color:#ce4d0f;border-color:#c54a0e}.btn-primary:active:hover,.btn-primary:active:focus,.btn-primary:active.focus,.btn-primary.active:hover,.btn-primary.active:focus,.btn-primary.active.focus,.open>.btn-primary.dropdown-toggle:hover,.open>.btn-primary.dropdown-toggle:focus,.open>.btn-primary.dropdown-toggle.focus{background-color:#ad410c;border-color:#87320a}.btn-primary.disabled:hover,.btn-primary.disabled:focus,.btn-primary.disabled.focus,.btn-primary[disabled]:hover,.btn-primary[disabled]:focus,.btn-primary[disabled].focus,fieldset[disabled] .btn-primary:hover,fieldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary.focus{background-color:#ef6421;border-color:#ef6421}.btn-primary .b

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:	3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	low
URL:	https://security-us.mimecast.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.755948041571961
Encrypted:	false
SSDEEP:	3:PouV7uJLzLcvzSAEtvxLzUbSodX7JH4vrLUe9ubygGjxcM16SWXxVWRaecKBc4NM:hxuJLzLcbzEdxqXLorwe9UygqxcMUSWp
MD5:	B574A8D3BC4C6A4FE57E89008E9645A3
SHA1:	471EBF49ADD18D605FD24F188DD460F165DDEF45
SHA-256:	3237A8FE51F94BBF3E3E38E4A8E0DC1A643F5DFB5C49D265A8B456CD646D6FCC
SHA-512:	011CB4A90C3B5A4D467B8765A51121CC2AAE9F5C1B570DC82D73D3B12B32F63928F6BD9BE96C5410212392A13DA287154D729A1E0D21AF3E13CCB07F2DD11224
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>.</head>.<body>.<h1>Error 404</h1>.<h2>Sorry, page not found.</h2>.<p>We could not find the page you requested.</p>.</body>.</html>

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 278 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2782
Entropy (8bit):	7.890665381967812
Encrypted:	false
SSDEEP:	48:gr5PgoGEsDuBLtiXQ2aCEmvG38pV1R45Y4acDR8191zK4uTxBkVH:grVg7EEuBxm+CZvG3oVj4q8219NaBSH
MD5:	07B8BD39C8F13A94F1CCD97F7653D428
SHA1:	FE66A7D2E3671B1543D0386A6FC6B3B33E8D9F1B
SHA-256:	8E1D77F207216CE9BEE61B3DF07A4D368A83409EB166816B5A9A197B9FFBEB9C
SHA-512:	B3F3AFE37E5542269F1B3DA98E9C4A7C2E0E38FEA9C4A555581412E3FA2F11F18BA3852A4DB86F0C792B30FAF5E4A97E3910A5F97A3528EF40FA83A898B0F210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]..\E..l. .XS.F1....R..T./.. ...TYJ..A..D.Ze...PK.R;...`F.RP.3.(J.."~...dE.....Y.uN.k.....%K..S...._.....266f....:.ia..\|.=.0............d$DO....x.q)...+..).TX@..x/......0..0......%..zr...c.s.x.q0x,......0-...(.j................B..4....l.....0-..[aL...0^.@.%N!nmQ.8....l'...=n.....b...^O......Ph..K...<MC6.M....>.Q..f...8q....%].6.O...}....o.K..3...+..'..<.N<o+p.o"~..G16...._xV..1g.m...? ^..yg.....D...7q.......<....F<.x.q..F\.u.,^...f.e..`L./E.M.>b.8.......9....6-.b.;>[..W..t.x.h.M.N...../....~t.6.'...ca...i.\|E..._.2..K.<.x.m.s!dO.g{..}....{....P....__......D...1.EX...w./!.`..>.b.4qyL\......./.....r>.....m..=...PX.'~..6..C..'@T....W.....,_..y....5.U.......3..,.........\|.S...+....N......e.0nE..c..5.@...)..wxD....f;.....m.1/...]....fC....1.I%..x.....v_.....V.8SR.e.$>.i..v).m7<.8`.{.S...(5.B..\...G..%....y[.C..!...9.MY.W .!./.......zgwHX.e..S.0........ ='

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 20:58:44.836669922 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 20:58:46.399229050 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 20:58:56.070425987 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 20:58:58.205945015 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.206037998 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.206145048 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.206307888 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.206389904 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.206468105 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.206780910 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.206825018 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.207005978 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.207041979 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.540183067 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.543431044 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.547724962 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.547780037 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.548142910 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.548185110 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.549278021 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.549283028 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.549356937 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.549406052 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.554469109 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.554552078 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.555381060 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.555480003 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.555490017 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.555505991 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.600693941 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.645391941 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.645418882 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.748011112 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.960725069 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.960805893 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.960823059 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.960889101 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.966556072 CEST	49737	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.966593981 CEST	443	49737	205.139.111.113	192.168.2.4
Apr 26, 2024 20:58:58.969271898 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:58:58.969348907 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:59:00.176896095 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:00.176944971 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.177098989 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:00.211966038 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:00.211985111 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.546607018 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.637089014 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:00.637154102 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.638292074 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.638305902 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:00.638369083 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:02.285567999 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:02.285778046 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:02.460045099 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:02.460115910 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:02.569346905 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:02.582092047 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:02.582143068 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:02.582216978 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:02.590796947 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:02.590842009 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:02.859273911 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:02.859384060 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.123241901 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.123320103 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.124430895 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.245243073 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.394622087 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.436125994 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.522917986 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.522986889 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.523041010 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.523299932 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.523322105 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.523335934 CEST	49740	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.523343086 CEST	443	49740	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.556406021 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.556483030 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.556931973 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.557286024 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:03.557320118 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.811458111 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:03.811559916 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.374332905 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.374418974 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.374758959 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.377763987 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.424113035 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.506160975 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.506222010 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.506275892 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.512643099 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.512669086 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:05.512682915 CEST	49741	443	192.168.2.4	23.204.76.112
Apr 26, 2024 20:59:05.512690067 CEST	443	49741	23.204.76.112	192.168.2.4
Apr 26, 2024 20:59:10.555736065 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:10.555802107 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:10.555876970 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:11.606028080 CEST	49739	443	192.168.2.4	142.250.217.228
Apr 26, 2024 20:59:11.606059074 CEST	443	49739	142.250.217.228	192.168.2.4
Apr 26, 2024 20:59:20.890470982 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:59:20.890558958 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:59:20.890623093 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:59:21.282959938 CEST	49736	443	192.168.2.4	205.139.111.113
Apr 26, 2024 20:59:21.283010006 CEST	443	49736	205.139.111.113	192.168.2.4
Apr 26, 2024 20:59:21.412889004 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.412935972 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.413014889 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.413841009 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.413871050 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.922733068 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.923253059 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.923273087 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.924271107 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.924407959 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.932915926 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.932979107 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.934937000 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:21.934954882 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:21.980135918 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.166831970 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.167023897 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.167089939 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.167129040 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.167155027 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.167249918 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.168931007 CEST	49748	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.168951988 CEST	443	49748	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.263695955 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.263777018 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.263946056 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.264489889 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.264554977 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.264643908 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.265162945 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.265214920 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.265568972 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.265605927 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.762850046 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.763319016 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.766478062 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.766525030 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.766907930 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.766937017 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.766993046 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.767479897 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.767791033 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.767887115 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.768284082 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.768374920 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.768460035 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.768522978 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.812160015 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.812164068 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.934046030 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.934111118 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.934190035 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:22.934256077 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.935342073 CEST	49750	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:22.935381889 CEST	443	49750	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:23.167166948 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:23.167242050 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:23.167313099 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:23.167320013 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:23.167381048 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:23.168768883 CEST	49749	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:23.168798923 CEST	443	49749	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.250511885 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.250591993 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.250678062 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.251252890 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.251358032 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.251435041 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.251946926 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.252048969 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.252129078 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.252655983 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.252692938 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.252890110 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.252928019 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.253216982 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.253253937 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.743726969 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.744281054 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.744335890 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.745630980 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.745709896 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.746222973 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.746311903 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.746412992 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.746431112 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.752913952 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.752989054 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.753411055 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.753447056 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.753751993 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.753786087 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.754601955 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.754908085 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.755141020 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.755342007 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.755564928 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.755657911 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.755793095 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.756190062 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.796139002 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.800122023 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.858247042 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.912117004 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.920773983 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.921755075 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:25.976797104 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.991291046 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:25.991413116 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.073659897 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073676109 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073703051 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073713064 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073753119 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.073774099 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073822021 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.073857069 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.073857069 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.073888063 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.075325012 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.075340986 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.075392962 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.075422049 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.075438023 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.075470924 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.075483084 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.075510025 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.075603008 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084023952 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084050894 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084093094 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084120035 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084125996 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084146023 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084157944 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084157944 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084172964 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084208012 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084208012 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084242105 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.084394932 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.084474087 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085293055 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085351944 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085395098 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085405111 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085413933 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085452080 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085479975 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085505962 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085534096 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.085535049 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085535049 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085536003 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085558891 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.085592031 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.086899996 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.086963892 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.086992979 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.087018013 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.087049961 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.087054014 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.087071896 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.087117910 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.087124109 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.087142944 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.087186098 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.236288071 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.236324072 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.236372948 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.236371994 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.236423016 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.236437082 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.236479044 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.236493111 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.236551046 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.236558914 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.237061024 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.237103939 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.237135887 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.237143993 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.237174988 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.246824026 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.246871948 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.246926069 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.246977091 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.247008085 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.247051954 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.249038935 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.249083042 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.249136925 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.249150991 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.249202013 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.249289989 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.249905109 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.249939919 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.249994993 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.250026941 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.250053883 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.250072956 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.251307964 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.251329899 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.251367092 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.251380920 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.251408100 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.251425028 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290750027 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290751934 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290780067 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290796995 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290854931 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290865898 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290874004 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290899992 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.290913105 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290951014 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290957928 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.290957928 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.304366112 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.396394014 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396419048 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396459103 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396469116 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.396488905 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396512985 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.396522999 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396533966 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.396567106 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396620035 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.396629095 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396748066 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.396986961 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.397159100 CEST	49753	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.397175074 CEST	443	49753	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.409434080 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.409481049 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.409522057 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.409548044 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.409578085 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.409600973 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410196066 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410238028 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410280943 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410294056 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410340071 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410340071 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410620928 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410681963 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410712957 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410739899 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.410769939 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.410788059 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411436081 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411499977 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411545992 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411557913 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411587000 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411606073 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411720037 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411744118 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411783934 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411806107 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.411834002 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.411887884 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.412111998 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.412131071 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.412168980 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.412180901 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.412204981 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.412240982 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413022995 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413044930 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413094997 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413109064 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413208961 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413592100 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413635015 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413681030 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413693905 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413724899 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413748026 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413861036 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413889885 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413924932 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413937092 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.413964033 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.413980961 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.414541006 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.414558887 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.414613962 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.414627075 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.414655924 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.414675951 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.452248096 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452296019 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452328920 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452349901 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452352047 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.452368975 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452425003 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.452430010 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.452444077 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.452449083 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.452542067 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.572016001 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.572073936 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.572134972 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.572166920 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.572191000 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.572226048 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.573028088 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.573072910 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.573117018 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.573131084 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.573162079 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.573179960 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.574146986 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.574192047 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.574232101 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.574244976 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.574282885 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.574301004 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.575287104 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.575331926 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.575403929 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.575419903 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.575479984 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.577363014 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.577415943 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.577447891 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.577460051 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.577488899 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.577505112 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.578533888 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.578577042 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.578613043 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.578624964 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.578671932 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.578692913 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580224991 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580271959 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580303907 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580316067 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580343008 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580359936 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580612898 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580646038 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580684900 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580710888 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.580737114 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.580766916 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.582231998 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.582277060 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.582321882 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.582334995 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.582360029 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.582493067 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584356070 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584400892 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584439993 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584453106 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584479094 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584526062 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584533930 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584547997 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584590912 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584605932 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.584633112 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.584681988 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.586106062 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.586124897 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.586158991 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.586172104 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.586218119 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.586218119 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.587480068 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.587501049 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.587554932 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.587568045 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.587629080 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.588783979 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.588804007 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.588845968 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.588857889 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.588882923 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.589006901 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.590401888 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.590423107 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.590471029 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.590483904 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.590598106 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592071056 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592132092 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592161894 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592176914 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592205048 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592221022 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592631102 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592652082 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592689037 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592701912 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.592729092 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.592746019 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.594557047 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594611883 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594619036 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594630957 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.594633102 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594645023 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594672918 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.594686031 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.594710112 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.594724894 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.594724894 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.595822096 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.595863104 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.595900059 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.595912933 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.595943928 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.595959902 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.596610069 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.596628904 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.596674919 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.596688032 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.596714973 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.596739054 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.597707033 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.597727060 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.597784042 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.597798109 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.597841978 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.598695040 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.598715067 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.598758936 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.598772049 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.598798037 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.598814964 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.599972963 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.599993944 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.600034952 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.600047112 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.600074053 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.600094080 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.732803106 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.732851982 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.732903957 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.732932091 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.732958078 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.733059883 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.734986067 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.735028982 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.735055923 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.735070944 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.735111952 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.735111952 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.736274004 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.736319065 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.736370087 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.736382961 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.736418009 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.736435890 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.737147093 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.737188101 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.737231970 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.737243891 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.737298965 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.737298965 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.738296986 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.738338947 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.738370895 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.738416910 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.738442898 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.738476992 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.739370108 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.739419937 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.739471912 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.739484072 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.739533901 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.739533901 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.740324974 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741214991 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741264105 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741295099 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741307974 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741338015 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741354942 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741769075 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741807938 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741832972 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741846085 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.741879940 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.741899014 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.743105888 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.743150949 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.743187904 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.743221998 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.743248940 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.743266106 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.744337082 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.744378090 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.744416952 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.744430065 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.744474888 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.744474888 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.745359898 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.745408058 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.745448112 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.745460033 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.745491028 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.745510101 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.746870995 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.746917963 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.746953964 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.746965885 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.746998072 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.747014999 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.748337030 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.748379946 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.748435974 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.748447895 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.748476982 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.748493910 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.749272108 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.749296904 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.749355078 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.749380112 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.749407053 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.749444008 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.749989986 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750030994 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750063896 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750097036 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750122070 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750142097 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750211000 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750256062 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750272036 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750283957 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750307083 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.750313997 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750341892 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750370979 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.750969887 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751013994 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751049995 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.751061916 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751090050 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.751110077 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.751847982 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751890898 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751934052 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.751945972 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.751972914 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.751991987 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.752540112 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.752584934 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.752616882 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.752629995 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.752655983 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.752672911 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.753437996 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.753479958 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.753518105 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.753529072 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.753557920 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.753635883 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.754769087 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.754810095 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.754838943 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.754852057 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.754882097 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.754899979 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.755841970 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.755891085 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.755933046 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.755944967 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.755980015 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.755999088 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.756676912 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.756721020 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.756747007 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.756762028 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.756808996 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.756834030 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.757766008 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.757808924 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.757862091 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.757874012 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.757905006 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.757924080 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.758740902 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.758788109 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.758838892 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.758851051 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.758897066 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.758897066 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.759608984 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.759651899 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.759696960 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.759708881 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.759738922 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.759758949 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.777430058 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.777471066 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.777575016 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.777591944 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.777646065 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.808058023 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.816955090 CEST	49751	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.816989899 CEST	443	49751	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.897622108 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.897666931 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.897744894 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.897773027 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.897802114 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898013115 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898081064 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898083925 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898112059 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898156881 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898176908 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898288012 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898329973 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898364067 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898395061 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.898422956 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.898439884 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899194002 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899235964 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899281025 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899293900 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899338007 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899353981 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899525881 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899584055 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899619102 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899631023 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899657965 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899900913 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899950027 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.899971962 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.899985075 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.900022984 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.900048018 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.901789904 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.901835918 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.901861906 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.901875019 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.901907921 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.901925087 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.905061007 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.905102968 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.905145884 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.905159950 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.905186892 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.905220032 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907463074 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907504082 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907546997 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907560110 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907588959 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907720089 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907763004 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907794952 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907794952 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907809973 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907843113 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907860041 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907877922 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907918930 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.907948017 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.907962084 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.908005953 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.908023119 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.908737898 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.908787012 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.908824921 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.908839941 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.908868074 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.908888102 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.909524918 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.909567118 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.909605026 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.909617901 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.909645081 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.911722898 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.911768913 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.911772013 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.911788940 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.911797047 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.911843061 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.911868095 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.912678957 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.912717104 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.912760019 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.912771940 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.912817955 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.912846088 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.912906885 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.912920952 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.912975073 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.913003922 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:26.913067102 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.949081898 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.957518101 CEST	49752	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:26.957546949 CEST	443	49752	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.093462944 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.093549013 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.093640089 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.094594002 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.094628096 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.127167940 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.127223015 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.127290010 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.128871918 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.128905058 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.589694023 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.627604961 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.678940058 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:27.800122976 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:27.802315950 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.307684898 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.307724953 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.307795048 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.308589935 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.308635950 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.308907032 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.308975935 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.310096979 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.310451031 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.357659101 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.406308889 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.517132044 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.517524958 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.518876076 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.519263029 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.519839048 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.519881964 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.520313025 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.520613909 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.564138889 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.568120956 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.687903881 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.713157892 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.713247061 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.713337898 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.715687037 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.715723038 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.737114906 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.789254904 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.789293051 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.789366961 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.790005922 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.790047884 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.790110111 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.795597076 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.795617104 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.796572924 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.796591997 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850385904 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850404978 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850446939 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850460052 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850475073 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850522995 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.850564003 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850606918 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.850608110 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.850640059 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.850673914 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.880038023 CEST	49755	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.880074024 CEST	443	49755	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.943890095 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.944243908 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:29.944300890 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.944468975 CEST	49754	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:29.944503069 CEST	443	49754	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.013705015 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.014503956 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.014523983 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.018135071 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.018209934 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.018834114 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.018976927 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.018980980 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.019047022 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.067620993 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.067627907 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.100533009 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.100605965 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.100681067 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.100733995 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.100795031 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.100862980 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.101083994 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.101114988 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.101212978 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.101246119 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.196518898 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.196542978 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.208420038 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.208672047 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.208714008 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.209203959 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.209748983 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.209842920 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.209999084 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.256114006 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.286326885 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.286566019 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.286582947 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.286854982 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.287019968 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.287058115 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.287080050 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.287455082 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.287549019 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.287601948 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.288192987 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.288264036 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.288883924 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.288958073 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.290380955 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.290416956 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.304117918 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.328145981 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.337820053 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.343969107 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.343997955 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344047070 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344048977 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.344064951 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344091892 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344120979 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.344120979 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.344129086 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344183922 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.344208002 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.344923019 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344940901 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344974041 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.344993114 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.345132113 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.345132113 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.345132113 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.374552011 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.375173092 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.375230074 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.375243902 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.375272989 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.375304937 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.375348091 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.441462040 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.441718102 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.451150894 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.451226950 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.451284885 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.451293945 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.451349020 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.452147007 CEST	49758	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.452167988 CEST	443	49758	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.456973076 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.456998110 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.457066059 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.457283974 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.457297087 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.505279064 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505301952 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505342960 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505362034 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505403996 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.505409002 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505455017 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.505511999 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.505511999 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.505512953 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.507086039 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.507105112 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.507143974 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.507155895 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.507160902 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.507209063 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.507241964 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.507275105 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.507293940 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.508084059 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.508121014 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.508161068 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.508161068 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.508193970 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.508208990 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.508238077 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.508276939 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.514072895 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514553070 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514560938 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514599085 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514609098 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.514617920 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514646053 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.514655113 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.514683008 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.514705896 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.518419981 CEST	49759	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.518465996 CEST	443	49759	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.537730932 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.537755966 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.537815094 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.537883997 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.537919044 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.537945032 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.538209915 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.538280964 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.538285971 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.538336039 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.539472103 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.539551020 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.539623022 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.540455103 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.540494919 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.542579889 CEST	49757	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.542613983 CEST	443	49757	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.605695963 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.605988979 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.606033087 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.607018948 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.607223988 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.607249975 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.607533932 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.607623100 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.607935905 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.608020067 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.608047962 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.610825062 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.610913038 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.611167908 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.611258984 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.611341953 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.649202108 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.649224997 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.666045904 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.666096926 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.666152000 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.666203022 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.666235924 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.666269064 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.667728901 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.667768955 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.667814016 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.667828083 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.667898893 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.667898893 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.669121027 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.669159889 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.669205904 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.669217110 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.669249058 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.669277906 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.670820951 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.670885086 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.670897961 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.670913935 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.670947075 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.670967102 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.670978069 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.671083927 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.671139956 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.671371937 CEST	49756	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.671400070 CEST	443	49756	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.684016943 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.684035063 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.691009045 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.691045046 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.691134930 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.691587925 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:30.691615105 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:30.697660923 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.776081085 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.779856920 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.779927969 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.780967951 CEST	49760	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.780988932 CEST	443	49760	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.820636034 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.942296028 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942323923 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942368984 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942387104 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942406893 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942414045 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.942468882 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942516088 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.942516088 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.942660093 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.942707062 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.942754984 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.946190119 CEST	49761	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.946225882 CEST	443	49761	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.957847118 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.958116055 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.958139896 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.959618092 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:30.960025072 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.960561991 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.960561991 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:30.960640907 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.010251045 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.010274887 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.042666912 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.042928934 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.042967081 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.044462919 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.044682980 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.044982910 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.044982910 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.045013905 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.045080900 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.055661917 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.102073908 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.102097034 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.142709970 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.142817020 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.142923117 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.143049955 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.143676996 CEST	49762	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.143707991 CEST	443	49762	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.190181971 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.221592903 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.221626997 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.222805977 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.224474907 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.224474907 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.224668980 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.282375097 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.282377958 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.389888048 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.391599894 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.391896009 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.392298937 CEST	49764	443	192.168.2.4	205.139.110.99
Apr 26, 2024 20:59:31.392324924 CEST	443	49764	205.139.110.99	192.168.2.4
Apr 26, 2024 20:59:31.396634102 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.396718979 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.397140980 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.399255037 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.399291039 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.431619883 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432085037 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432094097 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432183981 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432228088 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432245016 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.432245016 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.432251930 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.432471991 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.437041044 CEST	49763	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.437072039 CEST	443	49763	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.904870987 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.905224085 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.905267000 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.906383991 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:31.908900976 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.909051895 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:31.909082890 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:32.076637983 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:32.076730967 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 20:59:32.076735020 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:32.076791048 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:32.106231928 CEST	49766	443	192.168.2.4	207.211.31.110
Apr 26, 2024 20:59:32.106295109 CEST	443	49766	207.211.31.110	192.168.2.4
Apr 26, 2024 21:00:00.123999119 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:00.124079943 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.124238014 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:00.124628067 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:00.124663115 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.519443035 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.519783020 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:00.519814014 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.520920038 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.521759987 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:00.521944046 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:00.567698956 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:03.788327932 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 21:00:03.788395882 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 21:00:03.912743092 CEST	80	49723	72.21.81.240	192.168.2.4
Apr 26, 2024 21:00:03.912784100 CEST	80	49724	72.21.81.240	192.168.2.4
Apr 26, 2024 21:00:03.912811995 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 21:00:03.912848949 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 21:00:10.503375053 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:10.503504992 CEST	443	49770	142.250.217.228	192.168.2.4
Apr 26, 2024 21:00:10.503581047 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:11.603852987 CEST	49770	443	192.168.2.4	142.250.217.228
Apr 26, 2024 21:00:11.603909016 CEST	443	49770	142.250.217.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 20:58:55.277650118 CEST	53	64865	1.1.1.1	192.168.2.4
Apr 26, 2024 20:58:55.280065060 CEST	53	62450	1.1.1.1	192.168.2.4
Apr 26, 2024 20:58:56.185291052 CEST	53	58556	1.1.1.1	192.168.2.4
Apr 26, 2024 20:58:58.044027090 CEST	50387	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:58:58.044167995 CEST	53266	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:58:58.169498920 CEST	53	50387	1.1.1.1	192.168.2.4
Apr 26, 2024 20:58:58.171647072 CEST	53	53266	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:00.039695024 CEST	59478	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:00.039879084 CEST	51843	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:00.164752960 CEST	53	59478	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:00.164819956 CEST	53	51843	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:15.366208076 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 20:59:15.573079109 CEST	53	55699	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:21.284717083 CEST	54119	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:21.284898043 CEST	58437	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:21.410798073 CEST	53	58437	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:21.411828041 CEST	53	54119	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:29.928165913 CEST	57412	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:29.928231001 CEST	63655	53	192.168.2.4	1.1.1.1
Apr 26, 2024 20:59:30.055289030 CEST	53	63655	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:30.099987030 CEST	53	57412	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:34.334336042 CEST	53	49620	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:55.019572973 CEST	53	53111	1.1.1.1	192.168.2.4
Apr 26, 2024 20:59:56.844217062 CEST	53	56698	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 20:58:58.044027090 CEST	192.168.2.4	1.1.1.1	0xf0f9	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.044167995 CEST	192.168.2.4	1.1.1.1	0xa1c9	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 26, 2024 20:59:00.039695024 CEST	192.168.2.4	1.1.1.1	0xf982	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:00.039879084 CEST	192.168.2.4	1.1.1.1	0x3cd2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:59:21.284717083 CEST	192.168.2.4	1.1.1.1	0x90df	Standard query (0)	security-us.mimecast.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.284898043 CEST	192.168.2.4	1.1.1.1	0x9e3d	Standard query (0)	security-us.mimecast.com	65	IN (0x0001)	false
Apr 26, 2024 20:59:29.928165913 CEST	192.168.2.4	1.1.1.1	0x7acc	Standard query (0)	security-us.mimecast.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:29.928231001 CEST	192.168.2.4	1.1.1.1	0x4cf3	Standard query (0)	security-us.mimecast.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:58:58.169498920 CEST	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:00.164752960 CEST	1.1.1.1	192.168.2.4	0xf982	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:00.164819956 CEST	1.1.1.1	192.168.2.4	0x3cd2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:59:09.066504955 CEST	1.1.1.1	192.168.2.4	0xb6c6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:09.066504955 CEST	1.1.1.1	192.168.2.4	0xb6c6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:09.479290009 CEST	1.1.1.1	192.168.2.4	0x4e0f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:59:09.479290009 CEST	1.1.1.1	192.168.2.4	0x4e0f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		205.139.110.99	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		205.139.110.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		207.211.31.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		207.211.31.110	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		205.139.110.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:21.411828041 CEST	1.1.1.1	192.168.2.4	0x90df	No error (0)	security-us.mimecast.com		207.211.31.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:22.421658039 CEST	1.1.1.1	192.168.2.4	0xa553	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:59:22.421658039 CEST	1.1.1.1	192.168.2.4	0xa553	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		207.211.31.110	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		207.211.31.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		205.139.110.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		205.139.110.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		207.211.31.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:30.099987030 CEST	1.1.1.1	192.168.2.4	0x7acc	No error (0)	security-us.mimecast.com		205.139.110.99	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:59:49.390759945 CEST	1.1.1.1	192.168.2.4	0x3192	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:59:49.390759945 CEST	1.1.1.1	192.168.2.4	0x3192	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 21:00:08.113110065 CEST	1.1.1.1	192.168.2.4	0x7865	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 21:00:08.113110065 CEST	1.1.1.1	192.168.2.4	0x7865	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.us.m.mimecastprotect.com

fs.microsoft.com

security-us.mimecast.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	205.139.111.113	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:58:58 UTC	728	OUT	GET /s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:58:58 UTC	2947	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 26 Apr 2024 18:58:58 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/Akjcmy83Tyqu4jiKkY0loKkW4h48tqcbO9gZhn_-k_uVAd2q7v_ttiOxkUuTQPEWo2JwpHrnbwT_9JpXWJTWzC-7nRCHVVxhXCSULg33_FfJnsc7KP7F9CuwM6Wb9_HW87mhsljLPOD-Yn3-MqNENmGdxV7uMSczlkzfVkuS9Yla9mFj_h15Y6l48kEIZBZSMFvvCwZcqFNCS0OZDXopH-D3MYbocvC-rm9EVi1OTSGimfE8XyEbR4tZNyX887bVXFo1wPQmK0en15VHlvSFpHCwGRCqy2qtK9wBVpW_XyjObYaNhEH6KhkoiL-RMTn3CJZLEbh3v9QdVkqzHtEQk1VGlLuqEY8SRs3xraRwEKNryn4dafudjuCS43-VNIPG7dbPG0RTLmU1L0ksJ-Acz4R-Ltf_Q3-F5r6y7htC-eUK_vvkV3ZFmtW0yQp_-4aWL_ikZDSpU1_tAoA7O3rQI_hkGK0jnUwG_lxleZB20zRhQuy1IprCLKt5KiIOgg1v-pXN5CMWl8RDuiMY144Yi_YJwUhFna8gECliLI9T_7dDEJ0-NIVARRIbfw59agRoYmyQ4J4e4rv5ub976KTaT3MQg3-q40ZmzUG4x4lO1ciQ3CW2vKjZr36lRB206Bt0ck7tOf20DFZ9l0JqLC8RCtApUBvv459ytMVb_t_KOD72LHNnzCNyTNb-zDL1Bva9F5xnhLTC4ekv1Cg5PiIpMoIY7vvau9j7E4_gZawxEZs2AzFgdxA-WA_SA27ahdyIuc-PzE3NvFJUTxTsAq9tX7Nq6qcHC4mdZxH5zZO3skP4vMIY7GcxecMEcFihwsuM2K6PIrySLLpS6UMBzY3N_vAkR77glb-n1eWutA-YlGE3x715w-fNspiDHvKNZ9E3F31CLbzxjPi9fvmFsoQsU55-mQxQsww_WJT7aMwnyX7hVU4_3rqxHWnVYq2cNCcN6ycY53JWmu_iRUJ [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	205.139.111.113	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:58:58 UTC	3383	OUT	GET /r/Akjcmy83Tyqu4jiKkY0loKkW4h48tqcbO9gZhn_-k_uVAd2q7v_ttiOxkUuTQPEWo2JwpHrnbwT_9JpXWJTWzC-7nRCHVVxhXCSULg33_FfJnsc7KP7F9CuwM6Wb9_HW87mhsljLPOD-Yn3-MqNENmGdxV7uMSczlkzfVkuS9Yla9mFj_h15Y6l48kEIZBZSMFvvCwZcqFNCS0OZDXopH-D3MYbocvC-rm9EVi1OTSGimfE8XyEbR4tZNyX887bVXFo1wPQmK0en15VHlvSFpHCwGRCqy2qtK9wBVpW_XyjObYaNhEH6KhkoiL-RMTn3CJZLEbh3v9QdVkqzHtEQk1VGlLuqEY8SRs3xraRwEKNryn4dafudjuCS43-VNIPG7dbPG0RTLmU1L0ksJ-Acz4R-Ltf_Q3-F5r6y7htC-eUK_vvkV3ZFmtW0yQp_-4aWL_ikZDSpU1_tAoA7O3rQI_hkGK0jnUwG_lxleZB20zRhQuy1IprCLKt5KiIOgg1v-pXN5CMWl8RDuiMY144Yi_YJwUhFna8gECliLI9T_7dDEJ0-NIVARRIbfw59agRoYmyQ4J4e4rv5ub976KTaT3MQg3-q40ZmzUG4x4lO1ciQ3CW2vKjZr36lRB206Bt0ck7tOf20DFZ9l0JqLC8RCtApUBvv459ytMVb_t_KOD72LHNnzCNyTNb-zDL1Bva9F5xnhLTC4ekv1Cg5PiIpMoIY7vvau9j7E4_gZawxEZs2AzFgdxA-WA_SA27ahdyIuc-PzE3NvFJUTxTsAq9tX7Nq6qcHC4mdZxH5zZO3skP4vMIY7GcxecMEcFihwsuM2K6PIrySLLpS6UMBzY3N_vAkR77glb-n1eWutA-YlGE3x715w-fNspiDHvKNZ9E3F31CLbzxjPi9fvmFsoQsU55-mQxQsww_WJT7aMwnyX7hVU4_3rqxHWnVYq2cNCcN6ycY53JWmu_iRUJw9DOVV8-skIIFR6evVbu5T-zPWncBJAhjf4OqTo5-n [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:20 UTC	671	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 26 Apr 2024 18:59:20 GMT Content-Length: 0 Connection: close Location: https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA#/block?key=f7NMJEqqjACRd6ggJvxOkZQF3yXgAr0HNTAo1Y7jaraUhOwJIkki7-IMFLzRQsU_H-os0CivhKgusrmaNkidlWID0bPRkla2x3n0GFU2P9zMXpsiXhxj7se0IzAAx-w6 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:59:03 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=43482 Date: Fri, 26 Apr 2024 18:59:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:59:05 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=43474 Date: Fri, 26 Apr 2024 18:59:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 18:59:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:21 UTC	894	OUT	GET /ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:22 UTC	435	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/html; charset=utf-8 Content-Length: 5909 ETag: W/"1715-pkv+bkDPHIAzdmcGaQjX5CRCb0o" Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:22 GMT Connection: close
2024-04-26 18:59:22 UTC	5909	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:22 UTC	810	OUT	GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/style.css?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:23 UTC	529	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 18:59:22 GMT ETag: W/"1147-18f1bc6c6bf" Content-Type: text/css; charset=UTF-8 Content-Length: 4423 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:23 GMT Connection: close
2024-04-26 18:59:23 UTC	4423	IN	Data Raw: 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 66 36 34 32 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 66 36 34 32 31 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 65 34 64 30 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 37 33 32 30 61 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 65 34 64 30 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 35 34 61 30 65 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e Data Ascii: .btn-primary{background-color:#ef6421;border-color:#ef6421}.btn-primary:focus,.btn-primary.focus{background-color:#ce4d0f;border-color:#87320a}.btn-primary:hover{background-color:#ce4d0f;border-color:#c54a0e}.btn-primary:active,.btn-primary.active,.open>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:22 UTC	536	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:22 UTC	533	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:22 GMT Connection: close
2024-04-26 18:59:22 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:25 UTC	538	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:25 UTC	536	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:25 GMT Connection: close
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 68 65 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 72 65 74 75 72 6e 20 44 2e 72 65 6a 65 63 74 28 65 29 7d 76 61 72 20 64 3d 6f 28 22 73 74 61 74 65 22 29 2c 6d 3d 6f 28 22 76 61 6c 75 65 22 29 2c 67 3d 6f 28 22 66 69 6e 61 6c 6c 79 22 29 2c 76 3d 6f 28 22 70 61 72 65 6e 74 50 72 6f 6d 69 73 65 56 61 6c 75 65 22 29 2c 5f 3d 6f 28 22 70 61 72 65 6e 74 50 72 6f 6d 69 73 65 53 74 61 74 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6b 28 65 2c 74 2c 6e 29 7d 63 61 74 63 68 28 72 29 7b 6b 28 65 2c 21 31 2c 72 29 7d Data Ascii: r");function f(e){return e&&e.then}function h(e){return e}function p(e){return D.reject(e)}var d=o("state"),m=o("value"),g=o("finally"),v=o("parentPromiseValue"),_=o("parentPromiseState");function y(e,t){return function(n){try{k(e,t,n)}catch(r){k(e,!1,r)}
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 72 4c 65 61 76 65 3a 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 4d 53 50 6f 69 6e 74 65 72 4d 6f 76 65 3a 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 2c 4d 53 50 6f 69 6e 74 65 72 4f 75 74 3a 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 4d 53 50 6f 69 6e 74 65 72 4f 76 65 72 3a 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 4d 53 50 6f 69 6e 74 65 72 55 70 3a 22 70 6f 69 6e 74 65 72 75 70 22 7d 2c 5f 3d 30 3b 5f 3c 72 2e 6c 65 6e 67 74 68 3b 5f 2b 2b 29 7b 76 61 72 20 79 3d 63 2b 28 28 45 3d 72 5b 5f 5d 29 2b 73 29 2c 62 3d 63 2b 28 45 2b 61 29 3b 6f 5b 45 5d 3d 7b 7d 2c 6f 5b 45 5d 5b 73 5d 3d 79 2c 6f 5b 45 5d 5b 61 5d 3d 62 7d 66 6f 72 28 5f 3d 30 3b 5f 3c 68 2e 6c 65 6e 67 74 68 3b 5f 2b 2b 29 66 6f 72 28 76 61 72 20 54 3d 68 5b 5f 5d 2c 6b 3d 69 5b 54 5d 3d 7b 7d Data Ascii: rLeave:"pointerleave",MSPointerMove:"pointermove",MSPointerOut:"pointerout",MSPointerOver:"pointerover",MSPointerUp:"pointerup"},_=0;_<r.length;_++){var y=c+((E=r[_])+s),b=c+(E+a);o[E]={},o[E][s]=y,o[E][a]=b}for(_=0;_<h.length;_++)for(var T=h[_],k=i[T]={}
2024-04-26 18:59:26 UTC	9296	IN	Data Raw: 3d 6e 26 26 2d 31 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 74 5b 6e 5d 29 29 72 65 74 75 72 6e 3b 69 66 28 22 70 6c 61 79 62 61 63 6b 52 61 74 65 22 3d 3d 6e 26 26 31 21 3d 3d 74 5b 6e 5d 26 26 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 41 6e 69 6d 61 74 69 6f 6e 45 66 66 65 63 74 54 69 6d 69 6e 67 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 22 2c 22 32 30 31 34 2d 31 31 2d 32 38 22 2c 22 55 73 65 20 41 6e 69 6d 61 74 69 6f 6e 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 20 69 6e 73 74 65 61 64 2e 22 29 29 72 65 74 75 72 6e 3b 6f 5b 6e 5d 3d 74 5b 6e 5d 7d 7d 29 3a 6f 2e 64 75 72 61 74 69 6f 6e 3d 74 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 3c 30 7c 7c 65 3e 31 7c 7c 6e 3c 30 7c 7c 6e 3e 31 3f 68 3a 66 75 6e 63 74 Data Ascii: =n&&-1==f.indexOf(t[n]))return;if("playbackRate"==n&&1!==t[n]&&e.isDeprecated("AnimationEffectTiming.playbackRate","2014-11-28","Use Animation.playbackRate instead."))return;o[n]=t[n]}}):o.duration=t,o}function o(e,t,n,r){return e<0\|\|e>1\|\|n<0\|\|n>1?h:funct
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 61 72 20 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 66 6f 72 28 76 61 72 20 6f 3d 6e 5b 69 5d 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 2d 31 3b 61 2b 2b 29 7b 76 61 72 20 73 3d 61 2c 63 3d 61 2b 31 2c 75 3d 6f 5b 73 5d 2e 6f 66 66 73 65 74 2c 6c 3d 6f 5b 63 5d 2e 6f 66 66 73 65 74 2c 66 3d 75 2c 68 3d 6c 3b 30 3d 3d 61 26 26 28 66 3d 2d 31 2f 30 2c 30 3d 3d 6c 26 26 28 63 3d 73 29 29 2c 61 3d 3d 6f 2e 6c 65 6e 67 74 68 2d 32 26 26 28 68 3d 31 2f 30 2c 31 3d 3d 75 26 26 28 73 3d 63 29 29 2c 72 2e 70 75 73 68 28 7b 61 70 70 6c 79 46 72 6f 6d 3a 66 2c 61 70 70 6c 79 54 6f 3a 68 2c 73 74 61 72 74 4f 66 66 73 65 74 3a 6f 5b 73 5d 2e 6f 66 66 73 65 74 2c 65 6e 64 4f 66 66 73 65 74 3a 6f 5b 63 5d 2e 6f 66 66 73 65 74 2c 65 61 73 69 6e 67 46 Data Ascii: ar r=[];for(var i in n)for(var o=n[i],a=0;a<o.length-1;a++){var s=a,c=a+1,u=o[s].offset,l=o[c].offset,f=u,h=l;0==a&&(f=-1/0,0==l&&(c=s)),a==o.length-2&&(h=1/0,1==u&&(s=c)),r.push({applyFrom:f,applyTo:h,startOffset:o[s].offset,endOffset:o[c].offset,easingF
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 6e 5b 31 2c 4d 61 74 68 2e 74 61 6e 28 68 29 2c 30 2c 30 2c 4d 61 74 68 2e 74 61 6e 28 66 29 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 6b 65 77 78 22 3a 72 65 74 75 72 6e 20 74 3d 69 28 65 2e 64 5b 30 5d 29 2c 5b 31 2c 30 2c 30 2c 30 2c 4d 61 74 68 2e 74 61 6e 28 74 29 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 73 6b 65 77 79 22 3a 72 65 74 75 72 6e 20 74 3d 69 28 65 2e 64 5b 30 5d 29 2c 5b 31 2c 4d 61 74 68 2e 74 61 6e 28 74 29 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 5d 3b 63 61 73 65 22 74 72 61 6e 73 6c 61 74 65 22 3a 72 65 74 75 72 6e 5b 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 6e 3d 65 Data Ascii: n[1,Math.tan(h),0,0,Math.tan(f),1,0,0,0,0,1,0,0,0,0,1];case"skewx":return t=i(e.d[0]),[1,0,0,0,Math.tan(t),1,0,0,0,0,1,0,0,0,0,1];case"skewy":return t=i(e.d[0]),[1,Math.tan(t),0,0,0,1,0,0,0,0,1,0,0,0,0,1];case"translate":return[1,0,0,0,0,1,0,0,0,0,1,0,n=e
2024-04-26 18:59:26 UTC	4076	IN	Data Raw: 69 5b 31 5d 5d 7d 7d 76 61 72 20 6f 3d 7b 6c 65 66 74 3a 7b 22 25 22 3a 30 7d 2c 63 65 6e 74 65 72 3a 7b 22 25 22 3a 35 30 7d 2c 72 69 67 68 74 3a 7b 22 25 22 3a 31 30 30 7d 2c 74 6f 70 3a 7b 22 25 22 3a 30 7d 2c 62 6f 74 74 6f 6d 3a 7b 22 25 22 3a 31 30 30 7d 7d 2c 61 3d 65 2e 6d 65 72 67 65 4e 65 73 74 65 64 52 65 70 65 61 74 65 64 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2e 6d 65 72 67 65 44 69 6d 65 6e 73 69 6f 6e 73 2c 22 20 22 29 3b 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e 64 6c 65 72 28 72 2e 62 69 6e 64 28 6e 75 6c 6c 2c 33 29 2c 61 2c 5b 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 22 5d 29 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e 64 6c 65 72 28 72 2e 62 69 6e 64 28 6e 75 6c 6c 2c 32 29 2c 61 2c 5b 22 70 65 72 73 70 Data Ascii: i[1]]}}var o={left:{"%":0},center:{"%":50},right:{"%":100},top:{"%":0},bottom:{"%":100}},a=e.mergeNestedRepeated.bind(null,e.mergeDimensions," ");e.addPropertiesHandler(r.bind(null,3),a,["transform-origin"]),e.addPropertiesHandler(r.bind(null,2),a,["persp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:25 UTC	535	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:25 UTC	537	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:25 GMT Connection: close
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-04-26 18:59:26 UTC	4358	IN	Data Raw: 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 5c 6e 7d 5c 6e 62 2c 5c 6e 73 74 72 6f 6e 67 20 7b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 6e 7d 5c 6e 64 66 6e 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 5c 6e 7d 5c 6e 68 31 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 2e 36 37 65 6d 20 30 3b 5c 6e 7d 5c 6e 6d 61 72 6b 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 30 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 7d 5c 6e 73 6d 61 6c 6c 20 7b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 5c 6e 7d 5c 6e 73 75 62 2c 5c 6e 73 75 Data Ascii: text-decoration: underline dotted;\n}\nb,\nstrong {\n font-weight: bold;\n}\ndfn {\n font-style: italic;\n}\nh1 {\n font-size: 2em;\n margin: 0.67em 0;\n}\nmark {\n background: #ff0;\n color: #000;\n}\nsmall {\n font-size: 80%;\n}\nsub,\nsu
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 6e 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 43 43 43 43 43 3b 5c 6e 7d 5c 6e 2e 73 72 2d 6f 6e 6c 79 20 7b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 5c 6e 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 5c 6e 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 30 3b Data Ascii: n margin-top: 20px;\n margin-bottom: 20px;\n border: 0;\n border-top: 1px solid #CCCCCC;\n}\n.sr-only {\n position: absolute;\n width: 1px;\n height: 1px;\n padding: 0;\n margin: -1px;\n overflow: hidden;\n clip: rect(0, 0, 0, 0);\n border: 0;
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 33 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 34 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 35 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 36 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 37 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 6c 67 2d 38 20 7b 5c Data Ascii: width: 16.66666667%;\n }\n .col-lg-3 {\n width: 25%;\n }\n .col-lg-4 {\n width: 33.33333333%;\n }\n .col-lg-5 {\n width: 41.66666667%;\n }\n .col-lg-6 {\n width: 50%;\n }\n .col-lg-7 {\n width: 58.33333333%;\n }\n .col-lg-8 {\
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 3e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 74 61 74 69 63 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 74 61 74 69 63 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 73 6d 2c 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e Data Ascii: > .form-control-static.input-group-addon,\n.input-group-sm > .input-group-btn > .form-control-static.btn {\n padding-right: 0;\n padding-left: 0;\n}\n.input-sm, .input-group-sm > .form-control,\n.input-group-sm > .input-group-addon,\n.input-group-sm > .
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 67 65 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 63 32 33 32 33 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 64 Data Ascii: ge: none;\n border-color: #ac2323;\n}\n.btn-danger:active:hover, .btn-danger:active:focus, .btn-danger:active.focus, .btn-danger.active:hover, .btn-danger.active:focus, .btn-danger.active.focus,\n.open > .btn-danger.dropdown-toggle:hover,\n.open > .btn-d
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 5c 6e 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 68 6f 76 65 72 2c 5c 6e 20 20 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 68 6f 76 65 72 2c 5c 6e 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 66 6f 63 75 73 2c 5c 6e 20 20 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 2e 74 61 Data Ascii: -justified > .active > a,\n .nav-tabs-justified > .active > a:hover,\n .nav-tabs.nav-justified > .active > a:hover,\n .nav-tabs-justified > .active > a:focus,\n .nav-tabs.nav-justified > .active > a:focus {\n border-bottom-color: #fff;\n }\n}\n.ta
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 2e 70 61 67 65 72 3a 62 65 66 6f 72 65 2c 20 2e 70 61 67 65 72 3a 61 66 74 65 72 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 5c 6e 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 5c 6e 7d 5c 6e 2e 70 61 67 65 72 3a 61 66 74 65 72 20 7b 5c 6e 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 5c 6e 7d 5c 6e 2e 70 61 67 65 72 20 6c 69 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 5c 6e 7d 5c 6e 2e 70 61 67 65 72 20 6c 69 20 3e 20 61 2c 5c 6e 2e 70 61 67 65 72 20 6c 69 20 3e 20 73 70 61 6e 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: style: none;\n}\n.pager:before, .pager:after {\n display: table;\n content: " ";\n}\n.pager:after {\n clear: both;\n}\n.pager li {\n display: inline;\n}\n.pager li > a,\n.pager li > span {\n display: inline-block;\n padding: 5px 14px;\n background-
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 20 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 5c 6e 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 5c 6e 7d 5c 6e 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 5c 6e 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 62 6f 64 79 Data Ascii: .table:first-child,\n.panel > .table-responsive:first-child > .table:first-child {\n border-top-left-radius: 5px;\n border-top-right-radius: 5px;\n}\n.panel > .table:first-child > thead:first-child > tr:first-child,\n.panel > .table:first-child > tbody
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 20 20 6c 65 66 74 3a 20 35 70 78 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 35 70 78 20 35 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 70 2d 69 6e 6e 65 72 20 7b 5c 6e 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 30 30 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 20 38 70 78 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 7d 5c 6e 2e 74 6f 6f 6c 74 69 Data Ascii: left: 5px;\n margin-top: -5px;\n border-width: 0 5px 5px;\n border-bottom-color: #000;\n}\n.tooltip-inner {\n max-width: 200px;\n padding: 3px 8px;\n color: #fff;\n text-align: center;\n background-color: #000;\n border-radius: 4px;\n}\n.toolti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:25 UTC	533	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:25 UTC	538	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"fe6a4-18d89b1f630" Content-Type: application/javascript; charset=UTF-8 Content-Length: 1042084 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:25 GMT Connection: close
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2024-04-26 18:59:26 UTC	4370	IN	Data Raw: 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 66 5f 5c 75 30 34 33 65 5c 75 30 34 33 61 5c 75 30 34 34 32 5f 5c 75 30 34 33 64 5c 75 30 34 33 65 5c 75 30 34 33 35 5f 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 66 5f 5c 75 30 34 33 66 5c 75 30 34 33 65 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 64 5c 75 30 34 33 Data Ascii: 430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433_\u0441\u0435\u043f_\u043e\u043a\u0442_\u043d\u043e\u0435_\u0434\u0435\u043a".split("_"),weekdays:"\u043d\u0435\u0434\u0435\u043b\u044f_\u043f\u043e\u043d\u0435\u0434\u0435\u043b\u043d\u043
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 39 32 38 35 31 29 2c 6f 28 31 30 31 37 30 33 36 32 39 38 2c 33 36 35 35 34 33 31 30 30 29 2c 6f 28 31 31 32 36 30 30 30 35 38 30 2c 32 36 31 38 32 39 37 36 37 36 29 2c 6f 28 31 32 38 38 30 33 33 34 37 30 2c 33 34 30 39 38 35 35 31 35 38 29 2c 6f 28 31 35 30 31 35 30 35 39 34 38 2c 34 32 33 34 35 30 39 38 36 36 29 2c 6f 28 31 36 30 37 31 36 37 39 31 35 2c 39 38 37 31 36 37 34 36 38 29 2c 6f 28 31 38 31 36 34 30 32 33 31 36 2c 31 32 34 36 31 38 39 35 39 31 29 5d 2c 6c 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 38 30 3b 65 2b 2b 29 6c 5b 65 5d 3d 6f 28 29 7d 28 29 3b 76 61 72 20 63 3d 73 2e 53 48 41 35 31 32 3d 74 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 Data Ascii: 92851),o(1017036298,365543100),o(1126000580,2618297676),o(1288033470,3409855158),o(1501505948,4234509866),o(1607167915,987167468),o(1816402316,1246189591)],l=[];!function(){for(var e=0;e<80;e++)l[e]=o()}();var c=s.SHA512=t.extend({_doReset:function(){this
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 65 78 74 44 61 79 3a 22 5b 54 6f 6d 6f 72 72 6f 77 20 61 74 5d 20 4c 54 22 2c 6e 65 78 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 61 74 5d 20 4c 54 22 2c 6c 61 73 74 44 61 79 3a 22 5b 59 65 73 74 65 72 64 61 79 20 61 74 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 22 5b 4c 61 73 74 5d 20 64 64 64 64 20 5b 61 74 5d 20 4c 54 22 2c 73 61 6d 65 45 6c 73 65 3a 22 4c 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 22 69 6e 20 25 73 22 2c 70 61 73 74 3a 22 25 73 20 61 67 6f 22 2c 73 3a 22 61 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 73 73 3a 22 25 64 20 73 65 63 6f 6e 64 73 22 2c 6d 3a 22 61 20 6d 69 6e 75 74 65 22 2c 6d 6d 3a 22 25 64 20 6d 69 6e 75 74 65 73 22 2c 68 3a 22 61 6e 20 68 6f 75 72 22 2c 68 68 3a 22 25 64 20 68 6f 75 72 73 22 2c Data Ascii: extDay:"[Tomorrow at] LT",nextWeek:"dddd [at] LT",lastDay:"[Yesterday at] LT",lastWeek:"[Last] dddd [at] LT",sameElse:"L"},relativeTime:{future:"in %s",past:"%s ago",s:"a few seconds",ss:"%d seconds",m:"a minute",mm:"%d minutes",h:"an hour",hh:"%d hours",
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 75 6c 75 6b 75 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 74 61 6d 6d 69 5f 68 65 6c 6d 69 5f 6d 61 61 6c 69 73 5f 68 75 68 74 69 5f 74 6f 75 6b 6f 5f 6b 65 73 5c 78 65 34 5f 68 65 69 6e 5c 78 65 34 5f 65 6c 6f 5f 73 79 79 73 5f 6c 6f 6b 61 5f 6d 61 72 72 61 73 5f 6a 6f 75 6c 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 73 75 6e 6e 75 6e 74 61 69 5f 6d 61 61 6e 61 6e 74 61 69 5f 74 69 69 73 74 61 69 5f 6b 65 73 6b 69 76 69 69 6b 6b 6f 5f 74 6f 72 73 74 61 69 5f 70 65 72 6a 61 6e 74 61 69 5f 6c 61 75 61 6e 74 61 69 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 73 75 5f 6d 61 5f 74 69 5f 6b 65 5f 74 6f 5f 70 65 5f 6c 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 Data Ascii: ulukuu".split("_"),monthsShort:"tammi_helmi_maalis_huhti_touko_kes\xe4_hein\xe4_elo_syys_loka_marras_joulu".split("_"),weekdays:"sunnuntai_maanantai_tiistai_keskiviikko_torstai_perjantai_lauantai".split("_"),weekdaysShort:"su_ma_ti_ke_to_pe_la".split("_")
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 63 74 29 3b 6e 75 6c 6c 21 3d 69 3f 74 5b 31 5d 3d 69 3a 6d 28 6e 29 2e 69 6e 76 61 6c 69 64 4d 6f 6e 74 68 3d 65 7d 29 3b 76 61 72 20 77 65 3d 22 4a 61 6e 75 61 72 79 5f 46 65 62 72 75 61 72 79 5f 4d 61 72 63 68 5f 41 70 72 69 6c 5f 4d 61 79 5f 4a 75 6e 65 5f 4a 75 6c 79 5f 41 75 67 75 73 74 5f 53 65 70 74 65 6d 62 65 72 5f 4f 63 74 6f 62 65 72 5f 4e 6f 76 65 6d 62 65 72 5f 44 65 63 65 6d 62 65 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 4c 65 3d 22 4a 61 6e 5f 46 65 62 5f 4d 61 72 5f 41 70 72 5f 4d 61 79 5f 4a 75 6e 5f 4a 75 6c 5f 41 75 67 5f 53 65 70 5f 4f 63 74 5f 4e 6f 76 5f 44 65 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 53 65 3d 2f 44 5b 6f 44 5d 3f 28 5c 5b 5b 5e 5c 5b 5c 5d 5d 2a 5c 5d 7c 5c 73 29 2b 4d 4d 4d 4d 3f 2f 2c 54 65 3d 66 65 2c 44 65 3d Data Ascii: ct);null!=i?t[1]=i:m(n).invalidMonth=e});var we="January_February_March_April_May_June_July_August_September_October_November_December".split("_"),Le="Jan_Feb_Mar_Apr_May_Jun_Jul_Aug_Sep_Oct_Nov_Dec".split("_"),Se=/D[oD]?(\[[^\[\]]*\]\|\s)+MMMM?/,Te=fe,De=
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 63 74 3d 21 30 2c 6c 2e 5f 75 73 65 55 54 43 3d 6c 2e 5f 69 73 55 54 43 3d 69 2c 6c 2e 5f 6c 3d 6e 2c 6c 2e 5f 69 3d 65 2c 6c 2e 5f 66 3d 74 2c 6c 2e 5f 73 74 72 69 63 74 3d 72 2c 28 6f 3d 6e 65 77 20 62 28 6c 74 28 77 74 28 6c 29 29 29 29 2e 5f 6e 65 78 74 44 61 79 26 26 28 6f 2e 61 64 64 28 31 2c 22 64 22 29 2c 6f 2e 5f 6e 65 78 74 44 61 79 3d 76 6f 69 64 20 30 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 4c 74 28 65 2c 74 2c 6e 2c 72 2c 21 31 29 7d 69 2e 63 72 65 61 74 65 46 72 6f 6d 49 6e 70 75 74 46 61 6c 6c 62 61 63 6b 3d 4c 28 22 76 61 6c 75 65 20 70 72 6f 76 69 64 65 64 20 69 73 20 6e 6f 74 20 69 6e 20 61 20 72 65 63 6f 67 6e 69 7a 65 64 20 52 46 43 32 38 32 32 20 6f 72 20 49 53 4f 20 66 6f 72 6d Data Ascii: ct=!0,l._useUTC=l._isUTC=i,l._l=n,l._i=e,l._f=t,l._strict=r,(o=new b(lt(wt(l))))._nextDay&&(o.add(1,"d"),o._nextDay=void 0),o}function St(e,t,n,r){return Lt(e,t,n,r,!1)}i.createFromInputFallback=L("value provided is not in a recognized RFC2822 or ISO form
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 28 22 64 61 79 22 29 2e 76 61 6c 75 65 4f 66 28 29 2c 72 5b 65 5d 2e 73 69 6e 63 65 3c 3d 6e 26 26 6e 3c 3d 72 5b 65 5d 2e 75 6e 74 69 6c 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 6e 61 72 72 6f 77 3b 69 66 28 72 5b 65 5d 2e 75 6e 74 69 6c 3c 3d 6e 26 26 6e 3c 3d 72 5b 65 5d 2e 73 69 6e 63 65 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 6e 61 72 72 6f 77 7d 72 65 74 75 72 6e 22 22 7d 2c 70 6e 2e 65 72 61 41 62 62 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 65 72 61 73 28 29 3b 66 6f 72 28 65 3d 30 2c 74 3d 72 2e 6c 65 6e 67 74 68 3b 65 3c 74 3b 2b 2b 65 29 7b 69 66 28 6e 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 Data Ascii: .clone().startOf("day").valueOf(),r[e].since<=n&&n<=r[e].until)return r[e].narrow;if(r[e].until<=n&&n<=r[e].since)return r[e].narrow}return""},pn.eraAbbr=function(){var e,t,n,r=this.localeData().eras();for(e=0,t=r.length;e<t;++e){if(n=this.clone().startOf
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 20 69 6e 73 74 65 61 64 20 28 6e 6f 74 69 63 65 20 74 68 65 20 63 61 70 69 74 61 6c 73 29 22 2c 51 6e 29 2c 5a 6e 2e 6c 61 6e 67 3d 58 74 2c 50 28 22 58 22 2c 30 2c 30 2c 22 75 6e 69 78 22 29 2c 50 28 22 78 22 2c 30 2c 30 2c 22 76 61 6c 75 65 4f 66 22 29 2c 5f 65 28 22 78 22 2c 63 65 29 2c 5f 65 28 22 58 22 2c 2f 5b 2b 2d 5d 3f 5c 64 2b 28 5c 2e 5c 64 7b 31 2c 33 7d 29 3f 2f 29 2c 67 65 28 22 58 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 5f 64 3d 6e 65 77 20 44 61 74 65 28 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 29 2c 67 65 28 22 78 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 5f 64 3d 6e 65 77 Data Ascii: s deprecated. Please use toISOString() instead (notice the capitals)",Qn),Zn.lang=Xt,P("X",0,0,"unix"),P("x",0,0,"valueOf"),_e("x",ce),_e("X",/[+-]?\d+(\.\d{1,3})?/),ge("X",function(e,t,n){n._d=new Date(1e3*parseFloat(e))}),ge("x",function(e,t,n){n._d=new
2024-04-26 18:59:26 UTC	16384	IN	Data Raw: 5c 75 30 64 33 34 5c 75 30 64 34 64 5c 75 30 64 31 61 5f 5c 75 30 64 33 35 5c 75 30 64 34 64 5c 75 30 64 32 66 5c 75 30 64 33 65 5c 75 30 64 33 34 5c 75 30 64 33 65 5c 75 30 64 33 34 5c 75 30 64 34 64 5c 75 30 64 31 61 5f 5c 75 30 64 33 35 5c 75 30 64 34 36 5c 75 30 64 33 33 5c 75 30 64 34 64 5c 75 30 64 33 33 5c 75 30 64 33 66 5c 75 30 64 32 66 5c 75 30 64 33 65 5c 75 30 64 33 34 5c 75 30 64 34 64 5c 75 30 64 31 61 5f 5c 75 30 64 33 36 5c 75 30 64 32 38 5c 75 30 64 33 66 5c 75 30 64 32 66 5c 75 30 64 33 65 5c 75 30 64 33 34 5c 75 30 64 34 64 5c 75 30 64 31 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 5c 75 30 64 31 65 5c 75 30 64 33 65 5c 75 30 64 32 66 5c 75 30 64 37 63 5f 5c 75 30 64 32 34 5c 75 30 64 33 66 5c Data Ascii: \u0d34\u0d4d\u0d1a_\u0d35\u0d4d\u0d2f\u0d3e\u0d34\u0d3e\u0d34\u0d4d\u0d1a_\u0d35\u0d46\u0d33\u0d4d\u0d33\u0d3f\u0d2f\u0d3e\u0d34\u0d4d\u0d1a_\u0d36\u0d28\u0d3f\u0d2f\u0d3e\u0d34\u0d4d\u0d1a".split("_"),weekdaysShort:"\u0d1e\u0d3e\u0d2f\u0d7c_\u0d24\u0d3f\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:29 UTC	660	OUT	POST /api/ttp/url/get-page-data HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive Content-Length: 173 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://security-us.mimecast.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:29 UTC	173	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 66 37 4e 4d 4a 45 71 71 6a 41 43 52 64 36 67 67 4a 76 78 4f 6b 5a 51 46 33 79 58 67 41 72 30 48 4e 54 41 6f 31 59 37 6a 61 72 61 55 68 4f 77 4a 49 6b 6b 69 37 2d 49 4d 46 4c 7a 52 51 73 55 5f 48 2d 6f 73 30 43 69 76 68 4b 67 75 73 72 6d 61 4e 6b 69 64 6c 57 49 44 30 62 50 52 6b 6c 61 32 78 33 6e 30 47 46 55 32 50 39 7a 4d 58 70 73 69 58 68 78 6a 37 73 65 30 49 7a 41 41 78 2d 77 36 22 2c 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"f7NMJEqqjACRd6ggJvxOkZQF3yXgAr0HNTAo1Y7jaraUhOwJIkki7-IMFLzRQsU_H-os0CivhKgusrmaNkidlWID0bPRkla2x3n0GFU2P9zMXpsiXhxj7se0IzAAx-w6","pageType":"block"}]}
2024-04-26 18:59:29 UTC	557	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 18:59:29 GMT content-type: application/json; charset=UTF-8 Content-Length: 208 connection: close cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow content-md5: 40888357cb14ba3e1881164dc34f4d0a x-mc-req-id: 38ba21f0-4fd1-4ea5-aa69-5591387aa4f1 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d0-uFPdwS99P3OHP/1zpRMQ0emnB40"
2024-04-26 18:59:29 UTC	208	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 62 6c 6f 63 6b 22 2c 22 73 61 66 65 22 3a 66 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 42 6c 6f 63 6b 65 64 20 55 52 4c 20 43 61 74 65 67 6f 72 79 22 2c 22 63 75 73 74 6f 6d 65 72 43 6f 64 65 22 3a 22 43 55 53 41 31 37 41 32 32 31 22 2c 22 66 69 6c 65 44 6f 77 6e 6c 6f 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 48 65 75 72 69 73 74 69 63 73 4d 61 74 63 68 22 3a 66 61 6c 73 65 2c 22 61 63 74 69 6f 6e 45 6e 66 6f 72 63 65 6d 65 6e 74 22 3a 22 22 7d 5d 2c 22 66 61 69 6c 22 3a 5b 5d 7d Data Ascii: {"meta":{"status":200},"data":[{"pageType":"block","safe":false,"category":"Blocked URL Category","customerCode":"CUSA17A221","fileDownload":false,"isHeuristicsMatch":false,"actionEnforcement":""}],"fail":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:29 UTC	604	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json x-context-route: ttpwp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:29 UTC	529	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:29 GMT Connection: close
2024-04-26 18:59:29 UTC	12500	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-04-26 18:59:29 UTC	4652	IN	Data Raw: 65 20 66 6f 72 20 6d 61 6c 69 63 69 6f 75 73 20 61 6e 64 20 73 70 65 61 72 2d 70 68 69 73 68 69 6e 67 20 63 6f 6e 74 65 6e 74 2e 20 4f 6e 20 74 68 69 73 20 6f 63 63 61 73 69 6f 6e 2c 20 77 65 20 63 6f 75 6c 64 6e 27 74 20 63 6f 6d 70 6c 65 74 65 20 74 68 65 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 2c 20 61 6e 64 20 63 6f 6e 73 65 71 75 65 6e 74 6c 79 20 77 65 20 63 61 6e 27 74 20 65 6e 73 75 72 65 20 74 68 65 20 73 61 66 65 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 2e 22 2c 22 52 45 43 4f 4d 4d 45 4e 44 41 54 49 4f 4e 22 3a 22 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 3a 22 2c 22 52 45 43 4f 4d 4d 45 4e 44 41 54 49 4f 4e 5f 49 54 45 4d 5f 31 22 3a 22 43 6c 6f 73 65 20 74 68 65 20 62 72 6f 77 73 65 72 20 77 69 6e 64 6f 77 2e 22 2c 22 52 45 43 4f 4d Data Ascii: e for malicious and spear-phishing content. On this occasion, we couldn't complete the security check, and consequently we can't ensure the safety of this site.","RECOMMENDATION":"Recommendation:","RECOMMENDATION_ITEM_1":"Close the browser window.","RECOM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	852	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-us.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	487	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"21790-18d89b1f630" Content-Type: font/woff2 Content-Length: 137104 Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2024-04-26 18:59:30 UTC	9703	IN	Data Raw: 53 e9 a1 79 c6 72 f9 29 2e 9c 22 27 8e 50 3b e8 e9 3d a4 8b d2 53 0d 27 0a b8 c2 41 dd f1 b0 be e8 80 58 f2 63 1d ae f7 e7 1a 8c 8d 90 5d 0e 76 64 eb cf 4e 21 8c 4d 1f 60 bd 91 a4 4e ac 67 7d 60 81 87 48 60 78 20 be ad 27 31 7a ee 34 ec ce cd 7a 56 ad 39 1f 68 2c 98 77 6f 8e 0d 4d 21 8b 64 13 c4 ec 94 e9 6e 56 09 a6 3b ce 43 d3 9f 57 e3 46 5e fd f1 ee 24 94 cf bb 8d 00 b1 7e cf eb 4d c0 8f 1c ea 55 19 1f 5f a4 9e d6 ba 89 4f 6a e3 d2 a3 b0 84 0e b6 b2 17 80 22 39 76 ed 22 ee 92 d4 c5 c0 95 d4 95 2b 44 bc be fe b0 9e 35 3f f3 c0 ce 07 14 83 c1 f2 6b 23 50 f8 9b 0c e9 02 be fd 61 ee ad 45 6e d2 e0 fb 30 1c 6c 61 c5 d5 ab bd f2 bb f4 b2 e4 d6 47 ab 63 38 9f f6 f2 45 64 a9 df 37 c0 61 5d a6 18 4a 4f e0 4b d7 2d 67 15 77 b7 49 86 d2 69 42 ba 12 98 0e c7 09 a9 Data Ascii: Syr)."'P;=S'AXc]vdN!M`Ng}`H`x '1z4zV9h,woM!dnV;CWF^$~MU_Oj"9v"+D5?k#PaEn0laGc8Ed7a]JOK-gwIiB
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 7c cc 71 d4 f9 75 69 74 64 ce e8 53 4c 85 43 f4 fe 04 30 d8 7f de 1a b6 6c ba 42 17 40 ef 45 28 ef a6 50 30 d7 66 55 5f 8d 56 79 bb f5 6e 41 a5 d3 6a 61 d0 2d 08 e5 46 a3 6b f9 20 f1 20 1b ab 83 6e 24 9b 2c 84 78 ea ee 07 26 89 d5 df 68 94 37 f1 6d 90 9a d7 6d 50 a5 4e 5e 4f 5a ba 65 f6 ff 0b 78 19 99 74 af f3 06 5f 57 40 0c ff ec bf 59 a0 c8 85 88 e7 bc f3 8a 5a 5e 7a a5 72 61 6b fb 91 e0 65 59 a8 df b1 a5 a3 e5 42 51 fe df c9 2e d4 b8 3c 94 58 18 b2 74 28 71 30 e2 37 a2 99 c5 bd 84 d4 d0 f7 a9 46 69 68 f7 fb d4 13 1e 27 60 38 6b 92 d9 9c a7 fc 05 bc fc c7 fb 94 d1 a5 81 99 08 f0 6c 1e 6d 4d 44 64 9e 6b a4 10 fa 78 51 96 20 2c 16 5f ed f9 a3 06 ed 69 42 53 80 99 6c 06 39 b1 ac ac a5 c4 94 70 ad e6 4b c7 9a e0 03 29 f4 55 67 de bb ad 36 90 eb 82 ea 50 fd Data Ascii: \|quitdSLC0lB@E(P0fU_VynAja-Fk n$,x&h7mmPN^OZext_W@YZ^zrakeYBQ.<Xt(q07Fih'`8klmMDdkxQ ,_iBSl9pK)Ug6P
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: a7 20 fd 8f f3 08 57 a0 4c 36 07 42 80 e1 5f 4c 33 d7 94 18 ad 34 e5 ad 3c 08 07 3f 36 31 cd 3c 8e e9 9c 3b ad 97 c4 19 15 f8 c0 58 e2 c3 31 f9 be 36 91 1b 3f 25 cf 88 b3 b1 d6 d9 3d 70 a9 a2 20 f0 46 f5 b2 e9 4e 46 6c 68 cb 39 3a 0c 0d de 6e 59 1e ae 1a 43 c3 fc e1 74 85 27 26 25 fa 6b 58 fd d7 35 2b fd 06 2b 86 a3 44 57 dc 7f 37 6c 85 c8 48 49 2a 4b 26 0e d8 67 4e 32 29 59 e6 73 1c b9 ae b7 bb cb 6d 18 f5 b0 5a 61 0b 18 cd 76 42 fe bb 6c 44 b3 d7 8a 94 d6 f2 dc b9 d2 2c 5c cb 49 77 55 3f 95 ca 67 0a 91 00 01 bd bf ef 58 e4 df 66 56 77 e9 ed 0b d3 01 d3 ad 9c 52 ca ed 38 87 9d 67 9e b9 ed b4 0e 28 58 63 c2 d1 7f e6 63 9f 3b 71 a2 a6 bf 61 c1 39 d9 86 6f c7 4a 27 75 41 9b f0 7c b4 54 ad 28 af 0b c6 12 65 b1 93 19 93 50 92 f2 c5 77 bf 2e 97 f2 d8 7e 0c 1e Data Ascii: WL6B_L34<?61<;X16?%=p FNFlh9:nYCt'&%kX5++DW7lHI*K&gN2)YsmZavBlD,\IwU?gXfVwR8g(Xcc;qa9oJ'uA\|T(ePw.~
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: b5 bf 5f d8 f7 34 93 6b d4 ad ef 57 51 77 74 9a 4b b0 5c e0 9a 76 b4 4e 32 d4 f1 cd bc 82 82 8f 78 cc 4e b3 66 37 1b b0 a2 5a d0 e9 24 9e 5e 8f 44 be 8f 6c e5 ac 45 52 b5 74 51 5e f6 41 57 7e b2 17 4c be be ef 8c c6 50 5e 90 71 3d 83 b5 48 92 6b f1 59 56 49 65 5d d4 0d bb bd b6 1b a0 19 29 7f 96 fc 4c 5e eb 02 d8 a2 db ad b7 e8 53 9c 13 7e 54 66 9f 4c 69 d8 62 3f 19 a9 53 ab c6 32 74 ab d4 3a 12 c3 26 4c 85 65 60 b8 cd e2 15 1e 30 ae 37 a6 96 46 80 55 1c 89 89 8d 9f 8c 68 77 c9 cf ab 5b ee 6a 27 78 6c 62 e0 64 96 c5 62 e0 1b 84 86 e1 b1 43 f5 32 9b a4 d9 c0 93 b0 dd ec 58 28 60 54 8f 1d d8 ab b7 4b ef e1 7a be 00 70 5c f2 89 69 67 4d d1 b3 1d 6c 15 14 0f 51 1d f0 70 6f 36 20 48 c6 ab f9 5f 8e 69 8f c7 97 e3 f9 e1 ad eb d9 9b 05 e8 74 13 99 67 45 f4 7a 70 Data Ascii: _4kWQwtK\vN2xNf7Z$^DlERtQ^AW~LP^q=HkYVIe])L^S~TfLib?S2t:&Le`07FUhw[j'xlbdbC2X(`TKzp\igMlQpo6 H_itgEzp
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 8a 2a 07 4b 29 1a d7 86 df 05 e4 57 c3 dc 4a a8 a6 76 32 8d 2d 30 dc 92 33 1d 2c 85 9b 5e ed 03 95 ad e0 23 b0 f3 15 c7 ea 39 0e b1 2f f8 97 65 f9 1a 8d 3e 35 3d d2 9d 5e ab b1 2c 4f 36 2e fe 07 e6 43 85 ff a9 e8 f1 10 0b ca cf 7b 7d c7 e7 7f f7 1f cc af eb 59 63 58 e5 1f dd c3 e3 2c f6 01 23 63 9a 5a dd 12 b7 4e dd 71 8e a0 08 f6 8b b9 66 8a 38 07 46 26 d9 d5 98 31 1a 8e 32 01 f8 0e f8 f0 31 90 cb 98 61 8e 58 77 59 fb 99 d4 e5 b3 4f d0 58 21 85 d4 83 24 d1 d2 34 17 85 dd 14 3f 6d 80 f3 c4 eb 38 42 ef b5 d5 e4 63 19 7b 45 d5 5c 94 40 b9 d5 a4 92 57 c5 40 7c 49 57 9d 0e c7 2f 15 4a af 73 09 47 59 eb bb 78 29 24 71 eb d1 4f c1 13 92 4e 06 06 d4 ec 78 22 93 60 b2 94 cb 26 4c fd 26 4c 7b 54 89 f0 51 b4 4e 30 2a 68 e5 98 07 01 6b 66 de 54 a2 f1 da d6 19 dc 56 Data Ascii: K)WJv2-03,^#9/e>5=^,O6.C{}YcX,#cZNqf8F&121aXwYOX!$4?m8Bc{E\@W@\|IW/JsGYx)$qONx"`&L&L{TQN0hkfTV
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 93 e3 85 7c a1 e4 50 d1 c8 ea b7 9c 45 99 57 05 b8 cf 8b 55 2d 1f 89 66 be 88 bd 2d 73 6b a0 78 7a 2b 7c 9d 75 cc be d3 db 93 52 73 65 b7 3d 3f 39 73 b3 0b 56 15 5e c5 45 7d 9e b9 3b 3a 6b 85 9e 45 54 49 87 e9 72 4d 9f 5e f6 92 0d 78 a3 00 ba 4d c4 5d f9 d4 48 8d 0b dd 37 36 34 38 3a 36 08 32 61 87 af aa 6a a0 91 58 3f 3a a4 58 b2 4f aa c1 1c 7b ca d7 62 63 80 69 6f af 6e 69 46 e5 ba 23 a6 e8 97 6a 19 13 c7 05 90 8b 8f d3 5d 69 02 cb dd 92 4b 86 15 ab 95 2c ac 34 cc 27 1e b7 65 05 05 f8 5e c0 ea a4 22 80 db 6a 95 57 0f 0f bb 70 c9 cf 7f ff de bd bf 44 57 1c 56 cf 39 78 70 52 e1 bb c7 07 c3 8d f3 73 0c 5d 1c e5 10 51 38 9e df bf 10 1a 2f 27 3a 97 7d 57 f2 dd ec 24 16 1a 95 b1 24 e0 ea c8 44 31 27 74 f5 6d b8 4c 6d bb fc f8 10 f6 44 89 a3 1f 43 e2 26 34 6f Data Ascii: \|PEWU-f-skxz+\|uRse=?9sV^E};:kETIrM^xM]H7648:62ajX?:XO{bcioniF#j]iK,4'e^"jWpDWV9xpRs]Q8/':}W$$D1'tmLmDC&4o
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 05 45 01 c1 f7 1e cd f2 a9 36 fe 15 5a ec b2 60 dc c1 55 e9 74 ed ca 83 f6 c5 ef 32 b3 69 df d7 a0 cf be 95 d0 59 36 20 6b 6d 8a 38 74 8f 2a 08 28 b2 09 8b 02 04 4e b7 2e b8 27 ff 45 04 48 c7 3c 29 73 58 d2 2d 0e d9 c9 f5 da 04 5f 5d c0 76 0c 7e 93 9d 5f 94 79 9d 11 91 5f 8d ee 62 b8 7b 92 7d 75 91 c4 f2 9f cc d1 c2 11 e9 8b 5f f6 99 59 41 19 cc 82 7d bf 48 2c 38 fb 65 f3 ea f0 f0 d5 e6 a7 7a 9c d5 f8 66 1f b3 20 28 c3 cc da f7 e6 96 74 84 9a 64 5e f8 d3 66 b6 cc 2e 3d 46 2b 22 49 34 b1 c5 5c 5a 42 2a a2 1d 93 76 ca d9 9b 7f ba b5 3a 93 ed a5 0e df db a8 2a 9a 74 8c 39 d4 d8 59 35 ea af 95 ab a8 7f 3e 84 2e 86 de 64 13 69 18 5e ca 58 33 f4 bd f7 a0 6f b4 43 33 12 66 db 3b 97 5b 5c ac f4 7d 51 04 db 2a a0 8b 16 41 2b d4 87 75 20 45 15 86 36 58 e7 6a 57 1f Data Ascii: E6Z`Ut2iY6 km8t(N.'EH<)sX-_]v~_y_b{}u_YA}H,8ezf (td^f.=F+"I4\ZBv:t9Y5>.di^X3oC3f;[\}QA+u E6XjW
2024-04-26 18:59:30 UTC	12713	IN	Data Raw: 24 30 e3 8b ca 1e 9d 52 99 88 16 b2 89 75 51 cd 1d 22 2e 4b 3b 18 38 03 a5 65 6b 37 72 cd 0a 9b d5 17 dd 24 10 68 a9 cd 6d 69 45 62 86 ea 91 06 dc 46 71 51 69 09 12 0d 08 22 d9 cc 13 78 b4 45 66 6c ad 5d 89 09 ea c0 8e 97 61 7c 65 2b b9 03 c5 37 4a 56 44 76 28 e6 14 4b 3e 6d 5c 91 90 d1 67 74 95 45 e2 45 fd 68 24 8a 05 0d 50 19 46 9a 08 13 2c 17 42 c2 2d ab 98 86 28 0b f4 c9 61 09 b6 da c0 d2 96 c9 1e 50 9c 1a 38 56 24 9c 32 0f 78 20 48 88 76 74 64 50 e2 f9 d2 aa 48 98 16 1e b7 3c b4 f8 66 df b1 da 72 c9 d5 0d 65 48 da f2 90 61 64 88 d7 d6 b4 75 c4 5b 65 c1 6d 2b c2 78 42 99 ec ea 58 55 55 c2 c8 6c 66 6e d2 33 f4 ce 34 a9 14 1e c9 96 50 e4 19 e8 73 57 5c 2f 37 54 69 bd a5 f4 90 56 04 74 73 58 d4 69 29 7d a5 75 f2 19 f8 51 51 9f ae cc 0a c0 88 d2 c6 b6 a1 Data Ascii: $0RuQ".K;8ek7r$hmiEbFqQi"xEfl]a\|e+7JVDv(K>m\gtEEh$PF,B-(aP8V$2x HvtdPH<freHadu[em+xBXUUlfn34PsW\/7TiVtsXi)}uQQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	863	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://security-us.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	485	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"92e8-18d89b1f630" Content-Type: font/woff2 Content-Length: 37608 Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	12134	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 19 11 eb 26 cd fe 42 63 71 f0 75 dc 71 e0 72 93 03 cf 74 2a 3e ac 83 83 a3 dc b4 26 fa 39 7b 21 14 4a af 99 0a 0f 02 c7 94 5b 83 47 b1 20 78 01 70 f7 99 0b a5 fd af ce e7 df 60 e0 d1 43 18 57 12 b6 e1 98 5a ab 35 f8 05 89 0b db 74 a5 03 8e ef f7 fa 1b 18 76 a5 d9 74 bf af 7f 7f 4a e4 53 fd bc ba 53 fe 48 b2 b9 d7 a4 54 27 c3 e0 48 4c 19 54 ce 54 93 ef 41 e6 93 9d cd b4 3f d2 a5 a5 76 33 05 96 9d e9 5b 15 ed 29 3e 32 17 93 4b 58 08 17 dc 98 c7 33 db 3d 21 ff cc db 7c af 38 1b 9b 01 da 3b 3d d8 78 6d e1 ad 2a 57 dd 4d 63 ec 97 b6 d3 7e 1f 4f 34 47 86 78 b1 04 93 38 d5 2a 4c 3a 50 26 e5 7e ff 4c af 3c 1c 4c 7c 76 cd 19 34 86 ab ce a1 22 1b 87 b3 00 6b f9 9f ec 70 cd db 86 36 e4 87 32 78 94 23 80 a3 f0 e5 71 e1 5f bb 6c 69 ee 6b 8b a7 35 bc d2 17 f4 fd 13 4b Data Ascii: &Bcquqrt>&9{!J[G xp`CWZ5tvtJSSHT'HLTTA?v3[)>2KX3=!\|8;=xmWMc~O4Gx8*L:P&~L<L\|v4"kp62x#q_lik5K
2024-04-26 18:59:30 UTC	9090	IN	Data Raw: fb 37 12 3f 68 33 bb fd 25 e0 47 fc 48 62 e2 79 60 07 22 6a e2 46 a5 06 ae a2 93 9e d1 c3 85 08 3d f3 15 1b 71 23 a7 1c 6e 8a 13 a2 11 c9 c1 79 8a 65 86 af 24 85 39 a2 02 1c 98 bf d2 64 d2 33 89 13 8c 1a 8b b0 ad ee 5b e7 56 8c 1d 6a 5a ff 03 cd 24 67 f9 e3 09 d8 2b fb 79 ad 0d cc b5 ff a6 00 e9 e2 5e 55 e2 d4 c0 7d 03 15 f2 5b 12 5a 13 20 f0 7e 5e 22 5c 2e d7 7b 1a f4 9d 24 09 bd ab c4 ed 76 6f 1a 26 74 97 3e 74 26 30 7f ce be ca c1 2c bc 78 05 10 b2 9b fa 6b a1 4f 8e 66 a8 34 dc d0 57 b2 e8 3d cd 8c c8 3c e1 59 3f ce a3 ef f9 6d 64 57 be 7a b1 c6 bd ef de 81 d9 43 90 26 9e 02 82 d6 bb 4f 48 be aa 47 fd 6e 05 5c ff ea c4 10 ac bc 0b e5 e8 dd 4b 55 b7 3e 74 fe c1 9d 19 c0 6e b3 9c d0 81 2e a5 9f da 2f 75 7b 96 f1 cb 9a 23 3f cf eb 1b ac 58 3d 1f e4 6d ae Data Ascii: 7?h3%GHby`"jF=q#nye$9d3[VjZ$g+y^U}[Z ~^"\.{$vo&t>t&0,xkOf4W=<Y?mdWzC&OHGn\KU>tn./u{#?X=m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	591	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	482	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630" Content-Type: image/png Content-Length: 2782 Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	865	OUT	GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	492	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Thu, 29 Feb 2024 01:10:30 GMT ETag: W/"24c0-18df269b4c5" Content-Type: image/png Content-Length: 9408 Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	9408	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 02 00 00 00 c7 77 58 77 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 33 34 03 5b 7a 00 00 24 30 49 44 41 54 78 5e ed 9d 07 7c 15 55 f6 c7 67 5e 9b d7 cb cc 6b 79 2d 8d 34 08 01 42 0b d5 04 02 a1 85 14 d2 7b 23 04 42 0a a1 49 91 b2 88 22 ea ee 62 59 5d 17 75 57 b1 ac ba 22 fa 17 db ba ba 0a ae bb ea 2a eb da 45 45 a9 d2 12 12 88 21 ed 7f e6 cd 64 de bc c9 0b b8 bb c2 04 3f f7 7c be 9f 7c 26 ef dd 39 33 6f de fd dd 73 cf bd 77 e6 61 b9 b5 eb 11 08 84 88 20 11 22 10 22 83 44 88 40 88 0c Data Ascii: PNGIHDR,xwXwsRGBgAMAapHYsodtEXtSoftwarepaint.net 4.0.134[z$0IDATx^\|Ug^ky-4B{#BI"bY]uW"*EE!d?\|\|&93oswa ""D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	207.211.31.110	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	381	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	529	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"4300-18d89b1f630" Content-Type: application/json; charset=UTF-8 Content-Length: 17152 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	16384	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2024-04-26 18:59:30 UTC	768	IN	Data Raw: 56 41 4c 49 44 41 54 49 4f 4e 22 3a 7b 22 41 50 49 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 22 3a 22 41 6e 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 50 41 53 53 57 4f 52 44 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 70 61 73 73 77 6f 72 64 22 2c 22 52 45 53 54 41 52 54 5f 50 52 4f 43 45 53 53 22 3a 22 44 69 64 6e 27 74 20 72 65 63 65 69 76 65 20 61 20 63 6f 64 65 3f 22 2c 22 53 54 41 52 54 5f 41 47 41 49 4e 22 3a 22 53 74 61 72 74 20 61 67 61 69 6e 22 2c 22 45 4d 41 49 4c 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 43 4f 44 45 5f 49 4e 56 41 4c 49 44 22 3a 22 50 6c 65 Data Ascii: VALIDATION":{"API_VALIDATION_ERROR":"An error has occurred.","PASSWORD_INVALID":"Please enter a valid password","RESTART_PROCESS":"Didn't receive a code?","START_AGAIN":"Start again","EMAIL_INVALID":"Please enter a valid email address","CODE_INVALID":"Ple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	207.211.31.110	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	373	OUT	GET /api/ttp/url/get-page-data HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:30 UTC	439	IN	HTTP/1.1 404 Not Found x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/html; charset=utf-8 Content-Length: 180 ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:30 GMT Connection: close
2024-04-26 18:59:30 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	207.211.31.110	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:30 UTC	390	OUT	GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:31 UTC	482	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"ade-18d89b1f630" Content-Type: image/png Content-Length: 2782 Date: Fri, 26 Apr 2024 18:59:31 GMT Connection: close
2024-04-26 18:59:31 UTC	2782	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 16 00 00 00 1c 08 06 00 00 00 a4 a1 90 9d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 80 49 44 41 54 78 da ec 5d 0b 90 5c 45 15 ed 6c 12 20 88 58 53 02 46 31 04 07 15 8d 52 86 1a 54 c4 2f d4 ac 82 20 a8 e5 c4 a8 54 59 4a dc f8 41 c5 ef 44 cc 5a 65 d6 c2 dd 2a 50 4b a5 52 3b fe 90 a8 60 46 8d 52 50 01 33 86 28 4a 10 18 22 7e a2 90 ca 90 64 45 91 15 86 fc ff 59 ef 75 4e 9b 6b cf ed 99 f7 99 d9 25 4b 9f aa 53 d9 e9 d7 af bb 5f cf bb a7 ef bd dd bb 99 32 36 36 66 02 02 02 02 3a 89 69 61 0a 8e 7c 1c 3d eb a2 30 09 1d c4 de 91 9b ff fb ef fc cb fb c3 64 24 44 4f 98 82 80 84 78 06 71 29 f1 e7 c4 2b 89 c7 87 29 99 54 58 40 bc 8b 78 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx]\El XSF1RT/ TYJADZe*PKR;`FRP3(J"~dEYuNk%KS_266f:ia\|=0d$DOxq)+)TX@x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	207.211.31.110	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:31 UTC	664	OUT	GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:31 UTC	492	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: public, max-age=1209600000 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 18:59:31 GMT ETag: W/"24c0-18f1bc6e792" Content-Type: image/png Content-Length: 9408 Date: Fri, 26 Apr 2024 18:59:31 GMT Connection: close
2024-04-26 18:59:31 UTC	9408	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 78 08 02 00 00 00 c7 77 58 77 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 33 34 03 5b 7a 00 00 24 30 49 44 41 54 78 5e ed 9d 07 7c 15 55 f6 c7 67 5e 9b d7 cb cc 6b 79 2d 8d 34 08 01 42 0b d5 04 02 a1 85 14 d2 7b 23 04 42 0a a1 49 91 b2 88 22 ea ee 62 59 5d 17 75 57 b1 ac ba 22 fa 17 db ba ba 0a ae bb ea 2a eb da 45 45 a9 d2 12 12 88 21 ed 7f e6 cd 64 de bc c9 0b b8 bb c2 04 3f f7 7c be 9f 7c 26 ef dd 39 33 6f de fd dd 73 cf bd 77 e6 61 b9 b5 eb 11 08 84 88 20 11 22 10 22 83 44 88 40 88 0c Data Ascii: PNGIHDR,xwXwsRGBgAMAapHYsodtEXtSoftwarepaint.net 4.0.134[z$0IDATx^\|Ug^ky-4B{#BI"bY]uW"*EE!d?\|\|&93oswa ""D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	205.139.110.99	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:31 UTC	583	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:31 UTC	508	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Content-Type: image/x-icon Content-Length: 1150 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:31 GMT Connection: close
2024-04-26 18:59:31 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49766	207.211.31.110	443	1376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:59:31 UTC	382	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:59:32 UTC	508	IN	HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Content-Type: image/x-icon Content-Length: 1150 Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:59:31 GMT Connection: close
2024-04-26 18:59:32 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Target ID:	0
Start time:	20:58:48
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:58:53
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2444,i,15971310653574119148,10434369989334271885,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:58:56
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/Akjcmy83Tyqu4jiKkY0loKkW4h48tqcbO9gZhn_-k_uVAd2q7v_ttiOxkUuTQPEWo2JwpHrnbwT_9JpXWJTWzC-7nRCHVVxhXCSULg33_FfJnsc7KP7F9CuwM6Wb9_HW87mhsljLPOD-Yn3-MqNENmGdxV7uMSczlkzfVkuS9Yla9mFj_h15Y6l48kEIZBZSMFvvCwZcqFNCS0OZDXopH-D3MYbocvC-rm9EVi1OTSGimfE8XyEbR4tZNyX887bVXFo1wPQmK0en15VHlvSFpHCwGRCqy2qtK9wBVpW_XyjObYaNhEH6KhkoiL-RMTn3CJZLEbh3v9QdVkqzHtEQk1VGlLuqEY8SRs3xraRwEKNryn4dafudjuCS43-VNIPG7dbPG0RTLmU1L0ksJ-Acz4R-Ltf_Q3-F5r6y7htC-eUK_vvkV3ZFmtW0yQp_-4aWL_ikZDSpU1_tAoA7O3rQI_hkGK0jnUwG_lxleZB20zRhQuy1IprCLKt5KiIOgg1v-pXN5CMWl8RDuiMY144Yi_YJwUhFna8gECliLI9T_7dDEJ0-NIVARRIbfw59agRoYmyQ4J4e4rv5ub976KTaT3MQg3-q40ZmzUG4x4lO1ciQ3CW2vKjZr36lRB206Bt0ck7tOf20DFZ9l0JqLC8RCtApUBvv459ytMVb_t_KOD72LHNnzCNyTNb-zDL1Bva9F5xnhLTC4ekv1Cg5PiIpMoIY7vvau9j7E4_gZawxEZs2AzFgdxA-WA_SA27ahdyIuc-PzE3NvFJUTxTsAq9tX7Nq6qcHC4mdZxH5zZO3skP4vMIY7GcxecMEcFihwsuM2K6PIrySLLpS6UMBzY3N_vAkR77glb-n1eWutA-YlGE3x715w-fNspiDHvKNZ9E3F31CLbzxjPi9fvmFsoQsU55-mQxQsww_WJT7aMwnyX7hVU4_3rqxHWnVYq2cNCcN6ycY53JWmu_iRUJw9DOVV8-skIIFR6evVbu5T-zPWncBJAhjf4OqTo5-nll1rZrXaCMUeriQgWX0D5ehT4oynnKPAjc0RIa3zHMX2U5sidnvNanzwcVWzpRoijQuYkGYTM6RfG2JD7WtycYWuF-jGzbXEhTkOkEFP7D_EC6nCVMvtyeFRPrCDHnW9wmkaYlxAFvLZ8iL5qcaKEdU2Xcv1foDSnCEkx6pA3gObsDRpmZyNjh8oRZaFmK9gU1xTA0aBTVzckE3o_sf9Df3NSXLiQUI65XYgfHkfRZNkEYAsWrFzhVpVTsDQ83alfH6I7mtf69Ixc0jS9_u1uGi2SeQAlf-1Ds71KEB2iHf5186OdADPCQHu-aeErU7yZZOQmMYySGKP5YC6cV028nxISJUDFz9XyzK5y8YjMkwN0fnsbvTVGgt2z1mXZU5RNRzf1wDSj8Vc05uzWF3ntNK9utnfuw8mJuFIb8yLAhxrg60DrEcCV3e4PyQwKhtJchx4TsqXj-X1MhhjBj0nF-NeSpRZ4RBPGQDtERxWKknGmUodWqTWc4t1v22hNBJZWYjkuczaQ6DLyIqZEIjn-Cq8oXFJQV2kFQ1tuhjpuh2eqWss3wEU0HZFaaPOkY1aWVCdOKp_nR9UbtYjBf9D3DTcjT0ba7kXTwTVCxGV6UjeMc_yeYzGF5cqGCubdWLJc3Ak4x6U6Ky35QOvyjwxBoMSCCXRIPflCXIfyMYWnshBwFmonvwDG5EJ_Lm0UFjSxAVEj7Y36mv7MBt9Z4L-9QNfQejLP4qnnM1-0cfdN-cjVCZ3SzVqers2wUIhsz7mb3Mwr3PQKzCgz3Bc0PREaTlpDDfm3097IqYLOHnoWWD_IhTJtu8yjIurPFSzKWkNIH2fpCX4x-PNZlUkj2x5bw7jMfkKZ7P9dRdLJOl42KZvZRZr8UA3XcmBhwMlyv8jzdI1r5jkHtVjSdzuFJ83F-N29On6fAx6ckwKJi3KOidm64dcCLVUlqGTJpExY0HeKtmT4DBmTwkHg0VLYW-43wvKAgo-4d9x9_B5Sx7ZOxxEozoT97E70nfUG5yPtxZhaVI2iPbzMI9Xu9b5zepLazNzLsLbXGR5STzIzZVoWWP4anD4-4yRzYaukGwoxw5iOHcLiAwQ9rkLSF1zoRCveRq9IezLDfNRPTAhumyLtJoJNCa2QgjLMZx4e-e3I2IWFvM_gYt4mtbjJa6lj0YIo0fFQ6PUdriyENvb0WkprJpuMFLxGaR49vt9zVmA9mO_bva7wGfK-JdKrAchl75Qc5QJJmsJwsV_W6soHNey4lOt-E3CI_3IjqctGXn0Kd_rDvFFR2FAaklSU60cCxne-sEOa8GSFmdpE5DN9MDb_pzsvMOHF2LScC3zmREkNmjUaXdQdsJe4WJRJNmlXyuzjDWIVPAoWtVltXUvsEQCi4AQSowzIfedVAQXuhTvR6nwc7XCze6qfww8zFyqo1L34jiTyNeS8_aTCl83Y3YlrDcJiKCKYb4dyMSySV3wUxEBLq4MX_olOlhWqdTF3yftFzue1oxk1xEuTYoZn134mf9Mr6nO7RHG2dpbbDXl-Ab8wT1QNBh3XKM8oKX6kckfiOeQhWUrOC7bagUragD6wlsG4CUue4oymP6F9ey5D6qUCyAp3TlUrMNgVNPq4b7ce9fk1EABqtqiPFsUA6JB3pYk4plNMQrvuFK2MlCCaH-Dqw1KjXrUWsThNMfSE_TxYg9ZhC-Fg HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/style.css?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/jsonx-context-route: ttpwpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-us.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://security-us.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://security-us.mimecast.com/ttpwp?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/languages/en.json HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ttp/url/get-page-data HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/mimecastlogo@2x.png HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /branding/09c6b1c12e27f5cc697efcdec77f1eee726fbaed/main-page-logo.png?tkn=3.jycdMPcORdlwC-e8hsni3iQTPbShah4cwssJWykrXASGCtIb1xs6x6fJyy1t5kCD1byipQxxDtTbtKUe0emssGUmt2SyhwtTw_Bln0uTKgsoyp_bkfA3T6tdWSc1ZN_QeKZ-8fYOT0WuYHD0ekm4FgHT9ocPRo9Ju5gnEf9ViOQjcan7N2X0z2ySB0kxx_QL.myuNHANzrJC5JwZP4auzCA&originalContextPath=ttpwp HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp/resources/images/favicon.ico HTTP/1.1Host: security-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: security-us.mimecast.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/I2_RCR6B8lUnq8wnc9kfMg?domain=u44114957.ct.sendgrid.net